Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa
File: d57c390c-9f0a-385c-a044-6ac60c35012d.roa (raw, json)
Hash identifier: VG00ZgW1OQMeVb19b9VMo8e5YgkfvK5I5A2R7NiAlYs=
Subject key identifier: 10:CF:37:17:E0:E9:27:FC:AF:4A:71:09:59:39:C3:0F:88:70:BF:6F
Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial: 010D0C9F43285848C6E63340BD2E2606557F7700
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 399804
IP address blocks: 66.187.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:33:40:bd:2e:26:06:55:7f:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=0d9d582c-1d62-49a1-a0d3-65257a03f40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:1a:f5:67:f2:a3:4e:94:72:8e:c3:d2:83:
b4:7d:6d:44:69:1a:19:29:cf:f7:48:22:59:14:40:
05:45:2b:4f:9d:55:59:da:ad:99:10:bc:25:88:7a:
f2:3c:0c:c5:1c:61:e7:79:56:cb:d6:95:03:09:01:
c6:d8:9d:e6:9a:0d:d1:c6:96:c5:69:51:e2:93:9c:
ce:aa:63:75:bd:eb:de:cf:14:e6:40:f2:15:42:40:
5a:63:c0:62:09:d6:14:b3:a3:a2:c5:85:14:1d:2c:
98:31:ad:3f:b4:0f:c2:a3:fc:c8:2f:20:82:bd:a4:
35:4d:a1:c1:ab:c1:ba:f1:b5:fa:e1:03:f7:42:be:
55:84:c6:e9:5e:55:7d:b5:f6:14:00:ab:29:47:8c:
73:63:2f:cf:00:ef:ca:bd:37:33:a8:a4:b0:fb:ed:
76:79:66:7d:63:64:94:fb:40:6a:a3:87:14:9b:e3:
74:79:d1:2d:09:cb:9f:8f:f3:dd:30:68:73:d9:84:
0e:4c:1f:37:f1:91:c4:e6:7e:5d:5f:32:8d:5d:b0:
8a:fc:f8:27:e5:db:7d:63:b9:39:a0:35:bd:00:9a:
0a:03:d5:87:ab:34:8e:33:6a:f2:27:4d:07:96:48:
0f:83:b1:f9:b5:1a:17:3c:1a:14:23:d0:d3:bb:48:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CF:37:17:E0:E9:27:FC:AF:4A:71:09:59:39:C3:0F:88:70:BF:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
X509v3 Authority Key Identifier:
keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
sbgp-ipAddrBlock: critical
IPv4:
66.187.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:f7:69:33:f2:cd:77:83:0b:48:c7:0f:14:e2:7c:b1:af:48:
34:35:ff:a2:96:ae:ba:a0:00:7b:c7:36:b8:0f:1d:33:e0:07:
d3:ae:d2:eb:62:ce:66:c9:42:70:8a:11:e1:14:97:57:46:03:
aa:3a:81:4d:28:2f:1c:bb:1e:65:11:b9:78:96:e4:3b:df:b9:
95:df:4b:a9:ba:5d:13:09:33:37:64:34:d3:59:fe:56:98:ab:
be:d7:ff:a6:37:1e:c8:6b:4c:0b:69:b5:25:1a:18:72:10:dd:
e6:4e:8e:5c:b1:a4:6f:4a:8a:f2:71:c1:5b:b8:6f:b2:22:81:
b3:a1:06:7b:fb:98:18:f9:c2:96:38:1e:a3:f5:dd:83:c7:0e:
ad:f6:40:26:21:78:7a:bc:96:25:83:64:03:a6:47:22:c3:0c:
50:65:df:6e:1c:ee:ef:61:71:8b:8d:8d:1d:b9:14:3f:23:5b:
8c:4f:b1:4c:08:29:71:af:c0:75:72:bc:4a:f0:0a:88:30:65:
cd:ce:e8:53:05:3a:18:7f:cf:05:22:02:24:5c:10:f6:27:cf:
5b:aa:f9:bb:8b:b7:e8:c8:03:6a:e4:6d:bd:aa:67:dd:64:2e:
9b:cf:16:f9:6c:ee:7c:96:c2:76:7e:2d:e9:37:0c:66:55:fe:
d7:f6:b0:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jNAvS4mBlV/dwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4
ZTc5MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
MGQ5ZDU4MmMtMWQ2Mi00OWExLWEwZDMtNjUyNTdhMDNmNDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwUa9Wfyo06Uco7D0oO0fW1EaRoZKc/3SCJZ
FEAFRStPnVVZ2q2ZELwliHryPAzFHGHneVbL1pUDCQHG2J3mmg3RxpbFaVHik5zO
qmN1vevezxTmQPIVQkBaY8BiCdYUs6OixYUUHSyYMa0/tA/Co/zILyCCvaQ1TaHB
q8G68bX64QP3Qr5VhMbpXlV9tfYUAKspR4xzYy/PAO/KvTczqKSw++12eWZ9Y2SU
+0Bqo4cUm+N0edEtCcufj/PdMGhz2YQOTB838ZHE5n5dXzKNXbCK/Pgn5dt9Y7k5
oDW9AJoKA9WHqzSOM2ryJ00HlkgPg7H5tRoXPBoUI9DTu0iKNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDPNxfg6Sf8r0pxCVk5ww+IcL9vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh
MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvZDU3YzM5MGMtOWYwYS0z
ODVjLWEwNDQtNmFjNjBjMzUwMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz
YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0
OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5
MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrsHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEf3aTPyzXeDC0jHDxTifLGvSDQ1/6KWrrqgAHvHNrgPHTPgB9Ou0uti
zmbJQnCKEeEUl1dGA6o6gU0oLxy7HmURuXiW5DvfuZXfS6m6XRMJMzdkNNNZ/laY
q77X/6Y3HshrTAtptSUaGHIQ3eZOjlyxpG9KivJxwVu4b7IigbOhBnv7mBj5wpY4
HqP13YPHDq32QCYheHq8liWDZAOmRyLDDFBl324c7u9hcYuNjR25FD8jW4xPsUwI
KXGvwHVyvErwCogwZc3O6FMFOhh/zwUiAiRcEPYnz1uq+buLt+jIA2rkbb2qZ91k
LpvPFvls7nyWwnZ+Lek3DGZV/tf2sAU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:30 2025 by rpki-client