Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d95797ea-caa1-3119-a2ca-04e4f0a292fd.roa
File: d95797ea-caa1-3119-a2ca-04e4f0a292fd.roa (raw, json)
Hash identifier: xTJ3ULF9I8pqRCSkj+bKonmpp3jN1rh180/NO3HTBSA=
Subject key identifier: 99:42:C4:22:B5:C6:8C:2C:EA:C9:8A:EF:35:43:BC:31:72:FD:75:84
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584832F0352F673695EBEF8B31B8
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d95797ea-caa1-3119-a2ca-04e4f0a292fd.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 66.128.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:35:2f:67:36:95:eb:ef:8b:31:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=c6d04025-f705-41c4-ab9a-3498e427d030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:35:bf:5d:87:2c:1f:a6:77:2e:44:44:2e:
21:f4:50:87:d3:9d:03:71:25:e0:66:6c:54:c5:fb:
e0:43:1a:bf:f8:f4:d8:e6:0c:ee:28:e1:20:33:cb:
f9:d8:5c:3a:19:04:ea:25:26:4c:d5:90:f1:c1:57:
1a:ac:2f:1b:ad:7a:02:e3:de:a6:39:ec:6b:b0:8c:
21:3d:29:77:4c:93:d3:d0:aa:ba:2a:8e:d0:8c:e7:
75:3d:81:4e:d8:c2:70:0d:79:e9:5a:25:ac:7c:99:
c6:d8:95:82:76:48:55:e0:54:4b:09:35:0f:ad:2c:
df:f3:6c:91:48:6e:14:d2:a7:b5:b3:c6:b4:7d:5f:
bc:30:9a:92:3b:17:21:6a:57:27:3a:d3:fe:45:92:
d0:02:7c:90:e7:36:41:5a:25:fc:f3:f5:01:fb:3c:
59:e9:75:d1:b5:bb:0f:bf:e2:f7:ed:aa:49:45:e9:
a3:07:41:d6:4a:a8:2b:3a:8e:6d:7c:f1:dc:8f:ac:
08:9b:a6:fe:55:88:36:9b:f1:80:10:58:8f:67:d2:
e5:67:67:03:61:96:eb:fb:5a:bc:7c:a1:59:4a:08:
c6:29:b1:0c:5a:e6:59:a9:90:31:9c:26:f3:cf:f2:
91:07:fc:c3:dd:90:0a:ba:e7:b7:83:ce:fe:b4:1b:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:42:C4:22:B5:C6:8C:2C:EA:C9:8A:EF:35:43:BC:31:72:FD:75:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d95797ea-caa1-3119-a2ca-04e4f0a292fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:e1:a8:a4:31:b2:6e:07:ac:03:ff:f3:e6:f4:4a:cc:71:5a:
9f:bc:5c:29:68:fa:2f:65:af:4f:53:4c:18:10:76:6a:db:ea:
c9:1c:a6:50:83:c9:f0:f6:5e:d3:ba:48:15:a5:c0:d0:96:bc:
0b:2a:c1:9b:4c:62:d3:9d:12:59:99:94:08:15:62:68:b7:57:
83:63:54:0b:89:ea:86:5e:5a:79:d7:f9:93:8e:72:80:59:d0:
06:b1:24:9f:3a:c6:7f:02:d1:05:f1:13:41:32:c1:01:8f:31:
de:c3:c1:92:0d:5f:a9:87:81:22:03:2d:52:31:77:67:27:4d:
c7:51:60:23:3e:5b:03:cd:6d:ae:04:5f:30:af:ed:46:26:0d:
13:be:f7:86:82:e1:49:88:66:af:f4:d1:ed:70:2c:fb:e0:b1:
0d:15:79:e6:a1:97:d0:64:26:6e:3b:ec:49:2c:51:94:a3:ee:
64:b1:ce:ec:1e:ef:ff:53:68:8b:8e:bd:72:f4:f6:80:0d:be:
bb:18:2a:4a:51:48:77:3e:31:cb:18:87:0a:21:85:b8:b0:c4:
59:db:c4:44:d3:3b:ae:49:59:6a:d9:0e:56:75:88:1e:cb:11:
93:e4:44:26:35:be:30:5a:64:1f:22:cd:cf:75:5c:d7:5a:9d:
4c:3c:f9:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DUvZzaV6++LMbgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YzZkMDQwMjUtZjcwNS00MWM0LWFiOWEtMzQ5OGU0MjdkMDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhk1v12HLB+mdy5ERC4h9FCH050DcSXgZmxU
xfvgQxq/+PTY5gzuKOEgM8v52Fw6GQTqJSZM1ZDxwVcarC8brXoC496mOexrsIwh
PSl3TJPT0Kq6Ko7QjOd1PYFO2MJwDXnpWiWsfJnG2JWCdkhV4FRLCTUPrSzf82yR
SG4U0qe1s8a0fV+8MJqSOxchalcnOtP+RZLQAnyQ5zZBWiX88/UB+zxZ6XXRtbsP
v+L37apJRemjB0HWSqgrOo5tfPHcj6wIm6b+VYg2m/GAEFiPZ9LlZ2cDYZbr+1q8
fKFZSgjGKbEMWuZZqZAxnCbzz/KRB/zD3ZAKuue3g87+tBv6CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJlCxCK1xows6smK7zVDvDFy/XWEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDk1Nzk3ZWEtY2FhMS0z
MTE5LWEyY2EtMDRlNGYwYTI5MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoChMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrhqKQxsm4HrAP/8+b0SsxxWp+8XClo+i9lr09TTBgQdmrb6skcplCD
yfD2XtO6SBWlwNCWvAsqwZtMYtOdElmZlAgVYmi3V4NjVAuJ6oZeWnnX+ZOOcoBZ
0AaxJJ86xn8C0QXxE0EywQGPMd7DwZINX6mHgSIDLVIxd2cnTcdRYCM+WwPNba4E
XzCv7UYmDRO+94aC4UmIZq/00e1wLPvgsQ0Veeahl9BkJm477EksUZSj7mSxzuwe
7/9TaIuOvXL09oANvrsYKkpRSHc+McsYhwohhbiwxFnbxETTO65JWWrZDlZ1iB7L
EZPkRCY1vjBaZB8izc91XNdanUw8+Tw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:13 2025 by rpki-client