Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
File: 484e3031-ebe0-3e55-a672-ef11f402ca1f.roa (raw, json)
Hash identifier: pFyRKmJgtDgnDUoYQPI3W/iSBDA3hLGWo665VkFb434=
Subject key identifier: 66:C2:64:85:36:11:3B:BF:AB:60:77:7E:18:95:AB:CB:7F:01:ED:EE
Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial: 010D0C9F4328584882809CB2B8A05A5C61BCF5B0
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 26703
IP address blocks: 66.102.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9c:b2:b8:a0:5a:5c:61:bc:f5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=5af64d80-0aed-4e7f-9dc6-b8f60341e429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:07:0f:a3:c1:2e:e9:e4:80:59:a2:f1:50:
3a:4a:18:f3:49:77:de:00:ad:cf:2c:bf:f9:e1:af:
13:7e:4d:b9:09:33:d5:10:c6:c9:14:e7:8b:b3:26:
6e:ae:dc:86:16:ad:41:91:a1:b0:52:19:6b:93:47:
74:c8:da:88:76:45:f7:57:40:5c:76:00:6a:d4:f1:
fd:c6:fa:85:2e:80:85:a4:ee:dd:b6:f5:26:2f:19:
7c:6a:c7:e9:88:59:cc:dd:13:bb:b3:fc:90:21:d8:
12:92:b9:1f:ee:25:0b:8d:36:77:b1:76:70:23:f7:
7c:4a:43:2c:8d:53:56:4f:b2:f5:9c:c7:66:36:34:
ce:e9:6d:d4:f3:a9:e7:2d:3b:a2:09:2d:88:9e:24:
a3:89:d9:e3:dc:8a:92:6d:2f:fe:a8:1d:59:eb:98:
93:b8:f5:3e:e6:9b:9e:31:c1:6b:e3:18:2c:8c:54:
60:41:9b:15:f2:e5:31:75:a3:e7:6a:fd:5d:2d:e1:
c6:2b:8a:c7:e9:fe:ee:67:9d:63:a7:40:ae:47:22:
28:28:06:c8:f5:e0:b0:3e:71:cb:40:b2:1c:60:f5:
f5:e4:5c:02:5b:ef:f8:e3:17:65:b9:ad:98:57:91:
45:b4:f7:0f:0c:fd:06:9c:01:29:26:2d:61:0d:53:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C2:64:85:36:11:3B:BF:AB:60:77:7E:18:95:AB:CB:7F:01:ED:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl
X509v3 Authority Key Identifier:
keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7c:af:79:51:77:62:dc:50:7e:84:dc:92:39:bb:10:22:47:
50:9e:15:26:0e:a5:92:95:9c:00:60:37:59:95:23:b3:1c:2e:
9b:65:a5:89:1e:9f:6e:97:41:cb:b1:6c:94:8c:e2:47:2d:6e:
40:27:b7:cb:60:15:95:6d:c8:2c:7b:85:c9:78:0d:59:4b:53:
25:fd:80:e6:8d:78:ad:85:b9:18:2e:80:88:a8:95:1c:10:8b:
7a:f0:30:26:6c:28:13:a1:c2:87:df:9e:01:9e:c2:3b:a1:d7:
f1:f8:ef:f9:51:81:ec:b2:ae:aa:fd:65:14:30:5b:78:dc:47:
5a:e3:68:dc:37:ee:21:ca:50:ee:7d:29:80:cb:90:b1:b1:f0:
21:1f:0b:82:d5:b1:ff:ee:15:f3:41:e2:0d:0e:a3:90:92:47:
0f:75:fd:60:8c:58:ce:a5:fa:d4:1e:29:43:d5:d4:61:3d:20:
75:26:33:a9:52:19:e5:f2:df:90:81:06:48:5e:87:18:c7:0d:
b6:d5:82:10:40:d2:8e:32:68:1c:88:57:7f:26:ca:98:8e:44:
7d:8d:0d:c6:2b:44:fb:04:bf:a0:1a:88:ad:d6:5a:86:78:3b:
74:f1:20:02:61:94:a3:11:a8:10:ee:a1:41:8d:fa:95:95:aa:
ff:3c:dd:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJyyuKBaXGG89bAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj
ZTA4MB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NWFmNjRkODAtMGFlZC00ZTdmLTlkYzYtYjhmNjAzNDFlNDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnAHD6PBLunkgFmi8VA6ShjzSXfeAK3PLL/5
4a8Tfk25CTPVEMbJFOeLsyZurtyGFq1BkaGwUhlrk0d0yNqIdkX3V0BcdgBq1PH9
xvqFLoCFpO7dtvUmLxl8asfpiFnM3RO7s/yQIdgSkrkf7iULjTZ3sXZwI/d8SkMs
jVNWT7L1nMdmNjTO6W3U86nnLTuiCS2IniSjidnj3IqSbS/+qB1Z65iTuPU+5pue
McFr4xgsjFRgQZsV8uUxdaPnav1dLeHGK4rH6f7uZ51jp0CuRyIoKAbI9eCwPnHL
QLIcYPX15FwCW+/44xdlua2YV5FFtPcPDP0GnAEpJi1hDVMeDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbCZIU2ETu/q2B3fhiVq8t/Ae3uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4
M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvNDg0ZTMwMzEtZWJlMC0z
ZTU1LWE2NzItZWYxMWY0MDJjYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4
NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl
Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll
ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmbcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFh8r3lRd2LcUH6E3JI5uxAiR1CeFSYOpZKVnABgN1mVI7McLptlpYke
n26XQcuxbJSM4kctbkAnt8tgFZVtyCx7hcl4DVlLUyX9gOaNeK2FuRgugIiolRwQ
i3rwMCZsKBOhwoffngGewjuh1/H47/lRgeyyrqr9ZRQwW3jcR1rjaNw37iHKUO59
KYDLkLGx8CEfC4LVsf/uFfNB4g0Oo5CSRw91/WCMWM6l+tQeKUPV1GE9IHUmM6lS
GeXy35CBBkhehxjHDbbVghBA0o4yaByIV38mypiORH2NDcYrRPsEv6AaiK3WWoZ4
O3TxIAJhlKMRqBDuoUGN+pWVqv883Rk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:29:29 2025 by rpki-client