Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22ab13b-d75b-3bcb-acee-974feaf8a876.roa
File: c22ab13b-d75b-3bcb-acee-974feaf8a876.roa (raw, json)
Hash identifier: cTnyX+WqkVmYSJRjcwsSa2CzGRiVwTHrSbaQWzrcb7I=
Subject key identifier: 37:A7:77:A4:78:26:3F:26:3F:8C:A6:46:79:3C:57:E8:4F:51:CE:48
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848DC488CCA0F7B6BB1CBB57F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22ab13b-d75b-3bcb-acee-974feaf8a876.roa
Signing time: Wed 12 Feb 2025 17:50:54 +0000
ROA not before: Wed 12 Feb 2025 17:50:54 +0000
ROA not after: Tue 13 May 2025 16:50:54 +0000
asID: 36352
IP address blocks: 108.165.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dc:48:8c:ca:0f:7b:6b:b1:cb:b5:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 12 17:50:54 2025 GMT
Not After : May 13 16:50:54 2025 GMT
Subject: CN=934916b3-bfa5-44b8-ac52-cbf8f783c2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:ed:6f:a0:77:16:83:f7:45:15:16:38:9a:
8a:16:92:4d:25:c8:ef:90:d8:37:d7:f3:6d:13:0b:
42:0a:d0:6f:52:6a:38:8e:4a:53:58:9a:84:98:45:
ad:87:d3:3c:d0:83:e5:72:cf:8b:5e:47:75:fc:38:
ae:8d:53:0f:17:19:1e:32:16:7d:6c:2f:79:4a:fb:
2e:e7:df:7c:a5:00:57:e9:fb:b6:83:c1:7f:4f:54:
a3:bb:39:dd:a5:8b:df:dd:d3:5f:78:80:0b:ff:5d:
a2:ba:3a:d3:e5:73:bc:2a:63:0b:09:7d:ea:98:e9:
b6:09:b1:53:ce:08:a8:7e:d3:94:31:4d:84:d7:32:
ac:ef:25:98:ec:7a:58:b4:1e:80:a2:e0:6a:87:56:
6b:71:ea:45:15:8d:75:f2:c9:9f:d9:9d:75:6e:ee:
7d:96:a8:39:b0:f8:83:1a:c2:43:7f:5b:bd:bf:d9:
85:e2:be:22:b0:2d:5a:19:24:41:03:d0:36:b3:f4:
c6:60:d0:3a:5d:23:ca:5e:6e:54:d5:47:ec:88:6c:
10:ad:66:c0:c5:2d:66:84:d1:f6:d7:d7:c7:bd:58:
d4:cd:54:05:34:f4:fe:71:4c:1c:f5:d2:99:58:72:
3b:15:bb:24:19:c5:51:b2:dc:2f:12:eb:e6:8b:82:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A7:77:A4:78:26:3F:26:3F:8C:A6:46:79:3C:57:E8:4F:51:CE:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22ab13b-d75b-3bcb-acee-974feaf8a876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:58:a2:bf:c2:5f:eb:f4:52:9a:5c:e3:ce:f0:46:60:d1:9d:
41:14:f1:cd:94:8a:e7:26:c3:9a:c5:30:04:87:49:d6:cf:b4:
3e:72:52:f8:8d:1b:47:c3:28:88:f5:b1:a8:c3:85:53:e2:4a:
b2:e4:39:e0:16:fa:c8:b6:cc:08:e2:08:ca:b5:10:3e:ca:a2:
47:48:8d:f4:a5:b0:82:20:06:10:d7:b9:ac:69:2d:de:ac:ed:
27:fb:32:49:a4:99:e4:20:69:c5:9d:62:bf:05:31:c7:d0:f0:
7f:1e:34:58:6f:ac:53:75:d9:49:97:05:05:58:22:2e:b4:0d:
60:22:0c:30:ad:e6:bf:15:d4:f6:e2:46:ee:b3:1d:a8:e3:30:
89:c2:b8:01:ed:b3:22:d2:50:88:dd:8d:79:93:cf:2f:02:9a:
b6:b3:d8:1d:97:10:55:48:ad:d3:0f:2b:4f:ac:60:9a:0b:00:
bf:f8:f5:e5:fd:9e:75:36:3f:4e:4b:f0:96:a6:b3:7e:69:7a:
41:88:43:d4:68:42:0a:2d:de:a2:1c:89:f8:03:84:a5:df:53:
d6:2d:c1:dc:1b:db:95:dd:4a:1e:c6:e1:09:93:74:cb:c2:63:
89:c3:f7:26:a4:22:19:df:c7:40:df:1a:53:d4:91:a9:c0:b2:
8a:96:0c:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjcSIzKD3trscu1fwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxMjE3NTA1NFoXDTI1MDUxMzE2NTA1NFowLzEtMCsGA1UEAxMk
OTM0OTE2YjMtYmZhNS00NGI4LWFjNTItY2JmOGY3ODNjMmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCbtb6B3FoP3RRUWOJqKFpJNJcjvkNg31/Nt
EwtCCtBvUmo4jkpTWJqEmEWth9M80IPlcs+LXkd1/DiujVMPFxkeMhZ9bC95Svsu
5998pQBX6fu2g8F/T1SjuzndpYvf3dNfeIAL/12iujrT5XO8KmMLCX3qmOm2CbFT
zgioftOUMU2E1zKs7yWY7HpYtB6AouBqh1ZrcepFFY118smf2Z11bu59lqg5sPiD
GsJDf1u9v9mF4r4isC1aGSRBA9A2s/TGYNA6XSPKXm5U1UfsiGwQrWbAxS1mhNH2
19fHvVjUzVQFNPT+cUwc9dKZWHI7FbskGcVRstwvEuvmi4IbYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDend6R4Jj8mP4ymRnk8V+hPUc5IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzIyYWIxM2ItZDc1Yi0z
YmNiLWFjZWUtOTc0ZmVhZjhhODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxYor/CX+v0Uppc487wRmDRnUEU8c2Uiucmw5rFMASHSdbPtD5yUviN
G0fDKIj1sajDhVPiSrLkOeAW+si2zAjiCMq1ED7KokdIjfSlsIIgBhDXuaxpLd6s
7Sf7MkmkmeQgacWdYr8FMcfQ8H8eNFhvrFN12UmXBQVYIi60DWAiDDCt5r8V1Pbi
Ru6zHajjMInCuAHtsyLSUIjdjXmTzy8Cmraz2B2XEFVIrdMPK0+sYJoLAL/49eX9
nnU2P05L8Jams35pekGIQ9RoQgot3qIcifgDhKXfU9Ytwdwb25XdSh7G4QmTdMvC
Y4nD9yakIhnfx0DfGlPUkanAsoqWDL4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:34 2025 by rpki-client