Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efb06f2a-09b2-3c54-8bf6-4b4954484a31.roa
File: efb06f2a-09b2-3c54-8bf6-4b4954484a31.roa (raw, json)
Hash identifier: wwJYjQcqAT4R6T+NQCMhrznEAEUiKxj7Jzj7hC8SEVg=
Subject key identifier: 18:0D:95:2E:82:30:DF:C8:2F:17:C3:44:0A:FF:A8:8C:3D:27:C8:E6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858491D718A9C5C3CBBF1CF480718
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efb06f2a-09b2-3c54-8bf6-4b4954484a31.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 46450
IP address blocks: 108.165.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:8a:9c:5c:3c:bb:f1:cf:48:07:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=ac43a733-3906-4934-af0d-77d7e133e09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:94:c2:ed:c3:b2:a3:e2:bb:7a:15:91:da:7d:
45:1f:d7:b6:36:b1:21:49:f5:67:df:2b:3f:26:3f:
e2:97:93:f1:9d:82:64:fc:02:1e:cf:69:0c:64:ca:
45:ad:30:59:19:33:f8:17:05:5e:b9:bb:57:0d:43:
1a:a5:06:49:84:f7:d0:f6:b0:3c:df:16:03:c5:b2:
e3:eb:71:5b:a9:dc:a4:52:f7:66:c6:6b:ab:f4:5f:
13:49:16:76:77:40:bf:cf:61:7f:0d:ef:c6:1d:bd:
1b:65:41:1c:ee:ea:3d:29:aa:37:9f:dc:bd:65:b8:
5b:4a:70:d6:b5:a0:eb:34:83:10:a1:97:c2:55:bb:
dd:8c:36:02:30:d6:15:4c:40:de:65:3f:87:04:55:
9c:4f:86:2a:e0:ec:06:19:13:24:6b:25:ba:a6:ee:
de:f0:d9:7b:25:93:21:b4:1a:08:87:6a:a8:84:5b:
29:9b:ff:ea:d4:44:d8:b0:39:a0:66:92:6c:d3:cb:
75:20:68:74:c3:ed:61:93:d8:30:70:23:b2:68:89:
63:9a:58:f5:e4:9c:76:62:41:0b:2e:b8:a0:31:01:
08:00:02:4e:39:82:41:7d:5b:75:0b:6b:9f:57:3f:
94:67:f2:ce:46:18:65:b2:e2:cf:1d:9f:9e:d3:5c:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:95:2E:82:30:DF:C8:2F:17:C3:44:0A:FF:A8:8C:3D:27:C8:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efb06f2a-09b2-3c54-8bf6-4b4954484a31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:3a:24:80:35:a8:13:23:99:e4:38:2c:cc:b6:a7:e6:0b:6f:
e3:b5:43:0f:46:9e:71:8a:58:7b:7c:aa:9d:91:25:b0:65:31:
c6:cb:63:33:66:8d:3a:46:0c:a0:9b:9a:ed:63:ac:fb:3d:f6:
33:c2:7f:d2:62:6b:c6:76:6f:f6:99:31:52:83:b3:61:54:21:
1d:ce:e8:cf:51:cc:ce:25:09:c4:0c:5b:3a:0d:ed:b0:36:89:
36:7d:00:db:c8:3c:14:da:f1:05:92:db:a8:4d:41:be:f8:f6:
2c:58:7b:de:16:cb:8e:3f:e8:e0:0e:75:bc:5d:41:92:03:19:
fd:65:e1:e2:97:aa:a0:74:37:c5:fa:45:d0:d6:b2:94:03:c6:
b4:ed:a8:f0:6c:fe:54:18:25:31:2f:0d:38:6b:f5:4f:df:21:
2c:07:4e:14:e4:0d:33:80:f5:82:60:35:50:63:20:9b:a1:54:
5f:f9:2f:a7:f6:d5:e8:c3:c6:e3:5e:33:8f:e6:64:32:22:25:
aa:0b:59:e0:be:6a:68:90:35:cf:3b:60:9b:23:a1:68:c9:6b:
a1:80:89:3f:f1:b7:f3:84:1e:77:8c:47:77:e7:99:f5:68:16:
be:53:af:86:f8:62:7a:bd:7e:4c:a0:01:de:cf:41:aa:0b:9f:
88:bb:6c:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYqcXDy78c9IBxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
YWM0M2E3MzMtMzkwNi00OTM0LWFmMGQtNzdkN2UxMzNlMDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJTC7cOyo+K7ehWR2n1FH9e2NrEhSfVn3ys/
Jj/il5PxnYJk/AIez2kMZMpFrTBZGTP4FwVeubtXDUMapQZJhPfQ9rA83xYDxbLj
63FbqdykUvdmxmur9F8TSRZ2d0C/z2F/De/GHb0bZUEc7uo9Kao3n9y9ZbhbSnDW
taDrNIMQoZfCVbvdjDYCMNYVTEDeZT+HBFWcT4Yq4OwGGRMkayW6pu7e8Nl7JZMh
tBoIh2qohFspm//q1ETYsDmgZpJs08t1IGh0w+1hk9gwcCOyaIljmlj15Jx2YkEL
LrigMQEIAAJOOYJBfVt1C2ufVz+UZ/LORhhlsuLPHZ+e01x7/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgNlS6CMN/ILxfDRAr/qIw9J8jmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWZiMDZmMmEtMDliMi0z
YzU0LThiZjYtNGI0OTU0NDg0YTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKVIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADg6JIA1qBMjmeQ4LMy2p+YLb+O1Qw9GnnGKWHt8qp2RJbBlMcbLYzNm
jTpGDKCbmu1jrPs99jPCf9Jia8Z2b/aZMVKDs2FUIR3O6M9RzM4lCcQMWzoN7bA2
iTZ9ANvIPBTa8QWS26hNQb749ixYe94Wy44/6OAOdbxdQZIDGf1l4eKXqqB0N8X6
RdDWspQDxrTtqPBs/lQYJTEvDThr9U/fISwHThTkDTOA9YJgNVBjIJuhVF/5L6f2
1ejDxuNeM4/mZDIiJaoLWeC+amiQNc87YJsjoWjJa6GAiT/xt/OEHneMR3fnmfVo
Fr5Tr4b4Ynq9fkygAd7PQaoLn4i7bIY=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:29:54 2025 by rpki-client