Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/fdff9be1-69c5-30d8-b567-66fb0f24a21f.roa
File: fdff9be1-69c5-30d8-b567-66fb0f24a21f.roa (raw, json)
Hash identifier: wFa/YpMxgZ9BR+EiuMocZrUdXp4B4nxXlRZjT3+geDw=
Subject key identifier: EE:A1:A5:32:CC:3E:58:20:24:19:EE:85:8A:82:09:5B:13:14:2F:AE
Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Certificate serial: 010D0C9F432858492CB2137C2FEF160A9E461580
Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/fdff9be1-69c5-30d8-b567-66fb0f24a21f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 10439
IP address blocks: 66.240.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:13:7c:2f:ef:16:0a:9e:46:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=405181c5-22d3-4f59-bfc7-edfd171f9778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:a9:ea:b3:9d:1d:69:da:e6:e0:f4:21:74:
29:84:a3:20:e9:c9:ee:c1:47:b6:9e:b7:d9:e4:cf:
ee:83:ab:5f:e7:80:61:be:9c:7e:73:a9:9c:f0:4b:
5a:48:27:0a:95:bf:69:16:7f:42:61:1f:d7:26:d9:
77:5e:45:de:92:90:5b:1e:52:a2:b8:65:b2:b1:35:
65:e5:fd:7c:25:37:3f:0a:7e:d2:8b:d9:79:91:b5:
19:54:22:83:0a:cb:52:12:ec:69:fb:fb:47:73:49:
72:ad:f2:3e:0a:51:94:93:9b:3f:e4:f2:9a:f1:d2:
52:a1:7d:cc:c8:db:ae:4e:8b:35:f1:49:fb:a2:6f:
a3:fd:95:25:c9:d6:47:a5:59:b1:7e:e4:08:10:79:
76:fb:6b:29:8c:cb:04:51:ea:fc:e2:94:8a:a5:ae:
83:44:3e:8e:12:e7:a0:54:6e:59:b5:1b:bd:d6:0e:
24:76:a4:25:e1:7f:a1:55:00:1a:69:fe:96:dc:0d:
c4:1b:77:64:37:01:be:37:fe:42:77:22:3f:9b:23:
b3:12:79:f7:c1:e7:1a:59:77:58:34:f0:27:a7:93:
41:38:36:9b:9e:65:48:c0:a3:02:5c:2a:45:2f:e3:
0c:7d:b0:63:b8:f9:78:dc:6e:cd:94:13:79:0a:1e:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:A5:32:CC:3E:58:20:24:19:EE:85:8A:82:09:5B:13:14:2F:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/fdff9be1-69c5-30d8-b567-66fb0f24a21f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl
X509v3 Authority Key Identifier:
keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
sbgp-ipAddrBlock: critical
IPv4:
66.240.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:49:55:8b:5b:28:3f:f6:12:a6:f2:6d:7c:03:7f:30:98:3e:
a8:bc:1e:21:9a:3c:fe:d0:46:a0:7f:37:d9:1c:ba:33:56:0f:
a4:83:21:7b:1c:29:24:13:c3:0b:04:3e:35:e2:ad:dd:e4:f5:
7b:26:91:a1:c2:0f:01:5d:9c:76:6d:00:9f:c7:71:a6:f3:47:
86:b2:0a:d9:85:15:1e:9a:0f:e0:8b:84:0b:f3:b3:a2:1c:82:
63:02:25:92:9f:1b:b8:8f:27:90:bc:50:34:97:7f:80:4e:69:
92:d7:9f:91:2c:07:77:fd:dd:03:be:aa:ee:62:47:c1:98:e8:
88:83:67:f7:83:50:9d:b0:46:e8:37:7f:49:e1:29:75:5b:47:
0b:19:e0:8e:71:f5:6e:cd:47:bd:6a:3a:fb:9c:9f:1c:0b:d6:
ed:84:3c:14:f1:32:59:ee:3e:41:1b:4a:11:8b:b3:b2:ff:f3:
9e:6a:e8:f2:8a:48:82:0c:61:5b:bd:38:72:9e:89:1a:6c:6b:
4a:c0:c7:66:ff:91:cd:b8:0e:f7:32:2e:ca:ea:61:34:65:38:
af:41:28:da:ed:71:be:62:ca:d1:7f:ec:8f:aa:ea:ee:e0:94:
7b:5f:4a:e7:e5:87:2d:6f:c6:23:d3:2b:3f:3d:01:55:fd:85:
5a:0e:c9:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshN8L+8WCp5GFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz
ZjY1MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDA1MTgxYzUtMjJkMy00ZjU5LWJmYzctZWRmZDE3MWY5Nzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE+p6rOdHWna5uD0IXQphKMg6cnuwUe2nrfZ
5M/ug6tf54Bhvpx+c6mc8EtaSCcKlb9pFn9CYR/XJtl3XkXekpBbHlKiuGWysTVl
5f18JTc/Cn7Si9l5kbUZVCKDCstSEuxp+/tHc0lyrfI+ClGUk5s/5PKa8dJSoX3M
yNuuTos18Un7om+j/ZUlydZHpVmxfuQIEHl2+2spjMsEUer84pSKpa6DRD6OEueg
VG5ZtRu91g4kdqQl4X+hVQAaaf6W3A3EG3dkNwG+N/5CdyI/myOzEnn3wecaWXdY
NPAnp5NBODabnmVIwKMCXCpFL+MMfbBjuPl43G7NlBN5Ch5rOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6hpTLMPlggJBnuhYqCCVsTFC+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl
ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvZmRmZjliZTEtNjljNS0z
MGQ4LWI1NjctNjZmYjBmMjRhMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3
YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh
M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi
NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQvDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANFJVYtbKD/2EqbybXwDfzCYPqi8HiGaPP7QRqB/N9kcujNWD6SDIXsc
KSQTwwsEPjXird3k9XsmkaHCDwFdnHZtAJ/HcabzR4ayCtmFFR6aD+CLhAvzs6Ic
gmMCJZKfG7iPJ5C8UDSXf4BOaZLXn5EsB3f93QO+qu5iR8GY6IiDZ/eDUJ2wRug3
f0nhKXVbRwsZ4I5x9W7NR71qOvucnxwL1u2EPBTxMlnuPkEbShGLs7L/855q6PKK
SIIMYVu9OHKeiRpsa0rAx2b/kc24DvcyLsrqYTRlOK9BKNrtcb5iytF/7I+q6u7g
lHtfSuflhy1vxiPTKz89AVX9hVoOyW4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:14 2025 by rpki-client