Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa
File: af2b9587-c7e7-3560-a142-285f95c0baea.roa (raw, json)
Hash identifier: X+TQjnCHgwvmdpueCkqLX4f4b06ciy7pFVPB0kPvZUA=
Subject key identifier: 06:11:4C:56:DC:D2:36:2F:76:AF:23:5F:CF:8D:E8:AC:33:4B:39:1F
Certificate issuer: /CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
Certificate serial: 010D0C9F43285848EC9691F4B36ED454B6CDF260
Authority key identifier: 48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 6082
IP address blocks: 66.182.128.0/22 maxlen: 24
66.182.149.0/24 maxlen: 24
66.182.156.0/22 maxlen: 24
66.182.170.0/23 maxlen: 24
66.182.172.0/23 maxlen: 24
66.182.174.0/23 maxlen: 24
199.71.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:91:f4:b3:6e:d4:54:b6:cd:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=f2ce4336-282a-4f8d-b052-e24263367e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:c4:eb:95:da:79:91:37:0a:23:2e:1d:ea:
f3:82:48:04:c0:b8:ef:05:c2:2a:f4:90:93:1e:d1:
d3:c0:33:f2:15:b7:c5:1b:42:cb:81:69:f1:ac:cf:
9c:15:74:43:ba:5c:23:68:87:65:f1:6f:f5:0e:a0:
3d:34:1d:26:de:3d:08:e3:1a:48:9d:74:02:67:41:
57:c0:48:c2:5e:75:ff:c7:84:71:70:76:be:a9:8e:
be:f1:e2:89:46:89:24:3d:0a:f0:c3:39:f6:d9:86:
47:04:c4:8f:0a:61:d5:58:59:c1:9a:f1:34:36:c6:
16:cd:ba:02:94:5d:0d:79:0c:51:b2:41:fb:4f:1d:
c9:c5:c6:b6:c9:65:7b:1d:be:fb:2a:1a:b5:06:a9:
36:61:39:eb:40:11:26:59:6a:10:d3:f4:48:bd:37:
20:76:af:78:89:42:20:f2:61:07:fe:30:7f:a3:0f:
b2:1f:49:7d:1c:05:2b:24:90:7e:51:8d:c3:14:fd:
b3:35:57:7a:83:03:84:43:53:d8:33:a9:f6:43:cc:
0d:c1:ce:ed:0f:9a:a8:b7:76:91:51:c2:4f:2e:58:
5c:d3:01:3b:55:d8:b7:39:3a:c0:81:20:2c:ba:88:
4a:e0:78:7a:80:98:48:63:18:8f:24:97:09:5f:05:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:11:4C:56:DC:D2:36:2F:76:AF:23:5F:CF:8D:E8:AC:33:4B:39:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl
X509v3 Authority Key Identifier:
keyid:48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
sbgp-ipAddrBlock: critical
IPv4:
66.182.128.0/22
66.182.149.0/24
66.182.156.0/22
66.182.170.0-66.182.175.255
199.71.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:15:8b:e3:47:55:49:76:bf:3c:a9:e4:a2:1f:5d:df:49:58:
35:d5:e3:87:9a:73:f6:c1:ec:bf:1b:fc:cc:d4:d9:1b:18:c5:
f2:bd:f9:bb:01:da:ac:48:2f:da:bb:08:80:b7:fa:c7:b8:9c:
7a:8a:65:31:19:25:67:90:d6:2f:bd:df:69:ea:6b:19:fc:bf:
3a:63:2b:2c:eb:93:b5:9c:43:ba:c4:6b:a1:cb:6c:d6:ac:73:
aa:9e:c9:e2:2f:d5:3b:c2:86:bf:9a:ae:56:1e:0f:17:0e:cb:
4e:a9:4f:e5:0c:b5:16:b3:ef:1c:6b:8c:f4:f5:bf:9c:2e:c8:
ed:79:86:75:da:49:b0:cc:8c:3d:dd:60:09:00:f5:d5:3d:ad:
d3:54:a1:59:4e:b1:5c:6b:06:be:ca:b0:a5:38:a2:af:a4:70:
8b:5e:d7:58:6e:03:61:bd:f0:2f:88:8d:99:5f:fc:fd:54:cd:
b1:fc:76:fc:66:25:ca:ca:9d:54:f9:8a:ca:5b:5b:6c:b7:a5:
82:80:8b:8a:f0:ae:2f:43:d7:6f:91:7d:53:d5:15:ae:e1:90:
15:af:ab:3e:da:6b:68:ed:e4:ba:97:24:2f:21:33:c4:6c:4a:
c8:f4:a0:35:9c:33:3e:94:75:ba:30:f5:14:9a:e5:50:b6:67:
f9:27:5f:72
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEjslpH0s27UVLbN8mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGY2NWNjNjEtMmI0YS00ZjQ4LWFlNWQtMjgzNjZhYTJk
Y2IwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjJjZTQzMzYtMjgyYS00ZjhkLWIwNTItZTI0MjYzMzY3ZTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh47E65XaeZE3CiMuHerzgkgEwLjvBcIq9JCT
HtHTwDPyFbfFG0LLgWnxrM+cFXRDulwjaIdl8W/1DqA9NB0m3j0I4xpInXQCZ0FX
wEjCXnX/x4RxcHa+qY6+8eKJRokkPQrwwzn22YZHBMSPCmHVWFnBmvE0NsYWzboC
lF0NeQxRskH7Tx3Jxca2yWV7Hb77Khq1Bqk2YTnrQBEmWWoQ0/RIvTcgdq94iUIg
8mEH/jB/ow+yH0l9HAUrJJB+UY3DFP2zNVd6gwOEQ1PYM6n2Q8wNwc7tD5qot3aR
UcJPLlhc0wE7Vdi3OTrAgSAsuohK4Hh6gJhIYxiPJJcJXwXAnwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFAYRTFbc0jYvdq8jX8+N6KwzSzkfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZjY1
Y2M2MS0yYjRhLTRmNDgtYWU1ZC0yODM2NmFhMmRjYjAvYWYyYjk1ODctYzdlNy0z
NTYwLWExNDItMjg1Zjk1YzBiYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGY2NWNjNjEtMmI0YS00ZjQ4LWFl
NWQtMjgzNjZhYTJkY2IwLzBmNjVjYzYxLTJiNGEtNGY0OC1hZTVkLTI4MzY2YWEy
ZGNiMC5jcmwwHwYDVR0jBBgwFoAUSCC3o2IZFe1+Qr9kQZNPTMzuz+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZjY1Y2M2MS0yYjRhLTRmNDgtYWU1ZC0yODM2
NmFhMmRjYjAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCQraAAwQA
QraVAwQCQracMAwDBAFCtqoDBARCtqADBAHHR9IwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvRWL40dVSXa/
PKnkoh9d30lYNdXjh5pz9sHsvxv8zNTZGxjF8r35uwHarEgv2rsIgLf6x7iceopl
MRklZ5DWL73faeprGfy/OmMrLOuTtZxDusRrocts1qxzqp7J4i/VO8KGv5quVh4P
Fw7LTqlP5Qy1FrPvHGuM9PW/nC7I7XmGddpJsMyMPd1gCQD11T2t01ShWU6xXGsG
vsqwpTiir6Rwi17XWG4DYb3wL4iNmV/8/VTNsfx2/GYlysqdVPmKyltbbLelgoCL
ivCuL0PXb5F9U9UVruGQFa+rPtpraO3kupckLyEzxGxKyPSgNZwzPpR1ujD1FJrl
ULZn+Sdfcg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:59 2025 by rpki-client