Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa
File: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (raw, json)
Hash identifier: d84PB21Ob8Wu+wkJctTu8BbuWl3GKWFYqW+AMe41A1U=
Subject key identifier: 91:74:FA:6C:CB:DB:0F:F8:92:DA:43:39:A5:16:93:9A:FE:F6:A0:99
Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d
Certificate serial: 010D0C9F43285848CDE10C005A7F96B724DB0EC0
Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 14877
IP address blocks: 166.66.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:0c:00:5a:7f:96:b7:24:db:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=6c72acff-51d1-483f-9c87-12b357cd8ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:40:62:bc:ab:49:a8:61:ea:1b:a4:65:98:
2e:70:80:64:7a:ea:0e:b3:02:d8:bf:57:f3:dd:61:
56:dd:51:db:08:eb:83:9d:27:6a:c8:e3:03:b0:7f:
97:3a:a3:7f:ac:2d:e8:21:1b:5d:aa:8e:26:7d:2f:
fe:7b:7e:cd:f7:0b:c0:db:67:a5:00:04:d0:04:48:
6d:a0:61:ce:ee:13:d5:8c:2d:95:6b:73:2d:ad:f4:
ad:0c:f7:68:9a:ed:57:dd:04:16:bb:89:d6:97:79:
04:cc:2d:ae:2a:70:9c:b1:8f:f1:81:6a:e4:bc:f9:
6a:e8:e5:c4:2e:91:3a:1c:a8:57:ee:94:38:a6:9c:
e8:fc:7c:e2:71:80:1b:a0:eb:30:df:54:39:6c:6e:
f9:1d:d2:f2:08:75:6e:31:96:6b:0c:12:87:d2:be:
c2:1f:d3:8b:a2:1f:1f:61:7a:cf:8a:30:5c:e4:29:
86:cf:2c:fc:a6:74:ed:37:31:64:a1:d0:cc:21:e7:
46:8d:22:6e:ab:dd:c0:fd:de:1e:1d:cb:f1:5e:c4:
fe:42:b4:b0:63:d7:f8:87:46:2d:0d:7e:3b:fa:23:
90:3b:b1:0b:2a:5c:40:df:67:75:73:3e:d9:76:c7:
1c:87:a3:f0:8f:31:41:ad:2a:68:92:bf:9e:c6:00:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:FA:6C:CB:DB:0F:F8:92:DA:43:39:A5:16:93:9A:FE:F6:A0:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl
X509v3 Authority Key Identifier:
keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
sbgp-ipAddrBlock: critical
IPv4:
166.66.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:8f:19:91:f4:10:50:8f:2e:3b:6b:71:ff:21:88:91:ff:96:
62:cb:51:fb:c3:aa:82:78:db:b5:1b:06:50:df:4a:82:39:f8:
6c:e5:7b:d5:af:60:59:2d:9b:b9:08:bf:24:24:3f:de:55:28:
99:c2:87:8e:b0:f5:7a:73:f0:d6:ec:8e:4d:00:85:23:3c:cf:
45:39:36:7b:8c:67:8d:2d:81:6f:9d:f9:5c:78:c2:f0:22:b3:
b7:b3:8a:91:15:8b:ce:c0:14:5d:ea:04:9d:30:18:52:a7:92:
c5:6c:be:47:6f:b4:48:15:bd:b4:0e:5b:a2:a3:d3:7a:96:c4:
e2:f1:3c:11:6c:26:cf:d9:e2:69:78:61:98:55:d5:87:3c:ee:
87:3d:c0:df:e1:97:b2:7b:e0:c5:82:8e:3f:04:62:a6:af:3a:
2d:dc:33:76:b1:40:46:59:06:f9:3c:fe:25:c4:83:9a:60:c7:
5b:63:0b:b7:a1:83:64:60:9b:e3:d2:5d:35:c7:c1:bd:a1:99:
0c:f3:81:36:b6:74:1b:31:48:fd:be:06:8f:c3:20:74:23:8f:
2c:17:80:ce:eb:62:62:e5:a8:84:e1:7f:8b:8c:9b:66:86:ac:
2e:dc:f1:6e:dc:79:5c:f9:84:86:20:c7:b7:12:03:fa:ac:43:
e0:8d:2c:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4QwAWn+WtyTbDsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1
MTZkMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk
NmM3MmFjZmYtNTFkMS00ODNmLTljODctMTJiMzU3Y2Q4ZmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEFAYryrSahh6hukZZgucIBkeuoOswLYv1fz
3WFW3VHbCOuDnSdqyOMDsH+XOqN/rC3oIRtdqo4mfS/+e37N9wvA22elAATQBEht
oGHO7hPVjC2Va3MtrfStDPdomu1X3QQWu4nWl3kEzC2uKnCcsY/xgWrkvPlq6OXE
LpE6HKhX7pQ4ppzo/HzicYAboOsw31Q5bG75HdLyCHVuMZZrDBKH0r7CH9OLoh8f
YXrPijBc5CmGzyz8pnTtNzFkodDMIedGjSJuq93A/d4eHcvxXsT+QrSwY9f4h0Yt
DX47+iOQO7ELKlxA32d1cz7Zdscch6PwjzFBrSpokr+exgC19QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJF0+mzL2w/4ktpDOaUWk5r+9qCZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm
MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvYThmMzVjNTktYjk3MS0z
ZDg0LWE2NjItYjAzYTE5NjM4YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5
YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5
NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy
MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApkLKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKPGZH0EFCPLjtrcf8hiJH/lmLLUfvDqoJ427UbBlDfSoI5+Gzle9Wv
YFktm7kIvyQkP95VKJnCh46w9Xpz8Nbsjk0AhSM8z0U5NnuMZ40tgW+d+Vx4wvAi
s7ezipEVi87AFF3qBJ0wGFKnksVsvkdvtEgVvbQOW6Kj03qWxOLxPBFsJs/Z4ml4
YZhV1Yc87oc9wN/hl7J74MWCjj8EYqavOi3cM3axQEZZBvk8/iXEg5pgx1tjC7eh
g2Rgm+PSXTXHwb2hmQzzgTa2dBsxSP2+Bo/DIHQjjywXgM7rYmLlqIThf4uMm2aG
rC7c8W7ceVz5hIYgx7cSA/qsQ+CNLPQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:57:49 2025 by rpki-client