Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/ea91c50d-9962-3ff7-9380-50486d4ddb6b.roa
File: ea91c50d-9962-3ff7-9380-50486d4ddb6b.roa (raw, json)
Hash identifier: c/tIENOwD+raNGK7nmD6VndBlHmu4NuOO4SMcGSNjCY=
Subject key identifier: D2:97:FC:09:57:13:39:38:BF:84:D3:5F:F7:D7:00:04:C6:FD:77:D1
Certificate issuer: /CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
Certificate serial: 010D0C9F43285848AF2B798C0017F13FD1748480
Authority key identifier: 6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/ea91c50d-9962-3ff7-9380-50486d4ddb6b.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 399078
IP address blocks: 104.166.114.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:79:8c:00:17:f1:3f:d1:74:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=01fa721c-e94e-486b-94b4-df9e5399672a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:cc:aa:03:4d:00:a3:2c:5a:c5:b7:55:9a:
38:86:c6:d6:d1:b6:57:76:42:a1:30:63:8c:51:bc:
8e:b4:60:5d:87:03:d8:65:13:22:ee:b9:f9:d3:d4:
1b:fa:3c:37:0d:fd:a2:b5:0d:f4:84:14:9f:79:07:
45:9d:d3:79:cd:6e:0c:e7:70:18:db:6f:fe:9e:59:
05:70:cd:51:56:d1:ed:1c:46:7f:76:f0:cd:56:63:
b8:6f:a7:08:27:6d:be:1f:04:45:7a:01:5f:a5:f2:
fa:58:bf:2a:a0:77:ff:94:0f:62:85:60:07:a1:d6:
bc:22:de:64:b1:ca:7a:2d:cf:02:92:17:70:6b:08:
e3:ac:1a:b5:13:73:89:c4:ef:14:a1:ba:b0:5f:05:
7b:9f:2d:21:57:94:b1:2f:db:90:8b:00:ab:aa:a7:
57:de:3f:38:2c:92:f6:2a:b0:35:54:ba:fb:6f:25:
da:2d:f1:06:63:49:6e:6d:0e:6c:87:30:3d:1b:54:
1b:c3:f0:f5:58:07:8b:ee:2e:a4:f7:e6:31:85:a4:
97:c8:7c:7e:fc:a7:c4:d6:a5:2f:be:9a:1f:20:e6:
b1:1e:45:dd:1e:f9:3b:8d:a0:e6:2f:52:3a:10:9a:
1c:92:92:65:26:a0:14:95:57:c3:3a:97:7f:3b:2b:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:97:FC:09:57:13:39:38:BF:84:D3:5F:F7:D7:00:04:C6:FD:77:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/ea91c50d-9962-3ff7-9380-50486d4ddb6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl
X509v3 Authority Key Identifier:
keyid:6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.166.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:7e:f6:12:c1:94:f5:c9:db:8f:1e:e5:87:63:4b:b6:1b:25:
71:ba:6a:2a:fe:5c:f6:92:2a:d2:9c:64:c0:e5:b8:a3:3d:da:
cf:d1:c6:95:39:df:f8:3a:5c:ab:31:36:e8:12:fb:01:89:02:
b1:ba:d0:4c:b2:b7:bc:7f:26:88:f6:03:b3:bb:9f:48:4c:66:
ed:7a:fe:3d:11:0f:4b:17:24:4e:2a:7e:da:9c:54:8c:8b:ce:
73:23:89:50:b7:bf:7c:5a:3d:4e:f4:f1:86:4d:a6:ac:ea:3b:
8e:48:44:34:93:c8:b6:08:47:17:a3:ce:db:f8:6d:2a:07:b9:
db:3c:a7:24:13:88:4b:f6:56:4a:48:e1:44:4a:08:95:32:45:
56:68:12:a2:5c:13:2b:a8:d5:c0:1f:86:78:e8:db:1d:fb:2b:
c4:82:64:c5:81:51:b1:ab:04:c7:39:ea:27:c9:82:81:d6:2d:
5d:da:ec:21:30:91:c7:ac:d8:20:18:a3:b0:86:26:d5:5e:88:
5d:96:4f:05:17:cf:86:85:2e:8a:d2:c3:19:75:6a:be:41:13:
e9:72:df:c8:67:43:45:94:61:21:f4:1b:dd:48:f1:90:d3:0f:
90:06:e5:6d:98:a4:eb:86:da:74:f4:26:c7:62:f1:73:a7:fc:
48:93:01:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3mMABfxP9F0hIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIzY2E5ZDktMTRmMi00ODI0LWIxYmEtMTZiYzAzMGNj
ZjE1MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MDFmYTcyMWMtZTk0ZS00ODZiLTk0YjQtZGY5ZTUzOTk2NzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtPMqgNNAKMsWsW3VZo4hsbW0bZXdkKhMGOM
UbyOtGBdhwPYZRMi7rn509Qb+jw3Df2itQ30hBSfeQdFndN5zW4M53AY22/+nlkF
cM1RVtHtHEZ/dvDNVmO4b6cIJ22+HwRFegFfpfL6WL8qoHf/lA9ihWAHoda8It5k
scp6Lc8CkhdwawjjrBq1E3OJxO8UobqwXwV7ny0hV5SxL9uQiwCrqqdX3j84LJL2
KrA1VLr7byXaLfEGY0lubQ5shzA9G1Qbw/D1WAeL7i6k9+YxhaSXyHx+/KfE1qUv
vpofIOaxHkXdHvk7jaDmL1I6EJockpJlJqAUlVfDOpd/OyvU3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKX/AlXEzk4v4TTX/fXAATG/XfRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjNj
YTlkOS0xNGYyLTQ4MjQtYjFiYS0xNmJjMDMwY2NmMTUvZWE5MWM1MGQtOTk2Mi0z
ZmY3LTkzODAtNTA0ODZkNGRkYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjIzY2E5ZDktMTRmMi00ODI0LWIx
YmEtMTZiYzAzMGNjZjE1LzIyM2NhOWQ5LTE0ZjItNDgyNC1iMWJhLTE2YmMwMzBj
Y2YxNS5jcmwwHwYDVR0jBBgwFoAUani5rNsZfoddLthS4SX+IZmx0+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjNjYTlkOS0xNGYyLTQ4MjQtYjFiYS0xNmJj
MDMwY2NmMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKZyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAV+9hLBlPXJ248e5YdjS7YbJXG6air+XPaSKtKcZMDluKM92s/RxpU5
3/g6XKsxNugS+wGJArG60Eyyt7x/Joj2A7O7n0hMZu16/j0RD0sXJE4qftqcVIyL
znMjiVC3v3xaPU708YZNpqzqO45IRDSTyLYIRxejztv4bSoHuds8pyQTiEv2VkpI
4URKCJUyRVZoEqJcEyuo1cAfhnjo2x37K8SCZMWBUbGrBMc56ifJgoHWLV3a7CEw
kces2CAYo7CGJtVeiF2WTwUXz4aFLorSwxl1ar5BE+ly38hnQ0WUYSH0G91I8ZDT
D5AG5W2YpOuG2nT0Jsdi8XOn/EiTAbI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:41 2025 by rpki-client