Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbd22798-3f27-3720-8c4f-37adf01dbbd7.roa
File: cbd22798-3f27-3720-8c4f-37adf01dbbd7.roa (raw, json)
Hash identifier: uvLj/LPshGeLyvrOq5RkxI0lwXzoyGyWGtg53M2NMdk=
Subject key identifier: 2C:57:5C:B1:D5:82:B4:ED:17:B0:16:68:A7:E6:D0:D0:D0:E1:7F:9C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584937D93F5EEECD1099BF6E16C6
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbd22798-3f27-3720-8c4f-37adf01dbbd7.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 6939
IP address blocks: 66.160.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3f:5e:ee:cd:10:99:bf:6e:16:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=17e58736-3b51-4975-ae14-38470cfa9c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:7c:55:92:18:d9:2e:30:61:23:36:94:bb:
fb:2d:27:a6:93:51:52:76:9b:f1:d3:7a:2e:b8:2e:
4a:ad:cb:cb:8c:c4:c6:88:6b:8f:bc:82:c7:2e:7f:
45:03:d5:53:28:c3:3f:62:48:45:78:50:8f:b2:58:
79:f4:63:7c:89:17:37:a6:43:f2:4e:ba:9d:f2:9d:
92:6c:be:7b:95:51:22:4e:bc:30:ee:ab:42:45:81:
9b:d8:79:66:0c:e1:58:04:c6:18:44:79:9e:50:ea:
21:8c:fc:25:8c:f7:8f:f6:a6:05:ce:49:10:b4:4c:
f9:44:9d:6f:d9:57:c8:a1:1d:2e:de:3d:3a:5f:60:
89:3a:da:70:9b:fe:84:16:bf:2b:c6:e0:42:eb:8c:
04:16:28:4d:0a:e0:b5:04:a4:e9:87:5f:c3:ac:ea:
97:a7:3d:c0:da:f3:0c:52:f9:82:8e:d9:6d:53:11:
c3:30:7d:3e:85:61:15:22:09:f8:db:60:35:1d:5d:
d9:fa:44:9e:99:94:16:62:36:ef:c2:a0:c3:2e:79:
e2:ea:b6:3e:02:6d:62:ef:f5:c8:b8:bc:b1:6b:96:
cc:9e:33:97:87:28:da:04:21:6c:ad:75:40:78:98:
70:26:d1:fc:cc:83:91:9c:e9:4e:0f:d5:49:3c:dd:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:57:5C:B1:D5:82:B4:ED:17:B0:16:68:A7:E6:D0:D0:D0:E1:7F:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbd22798-3f27-3720-8c4f-37adf01dbbd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:6f:35:f5:3b:41:8b:56:dd:4f:42:fd:84:06:00:78:a1:1e:
03:7f:4a:44:d8:63:9b:65:29:6b:7f:90:bd:1d:e3:b6:20:17:
f8:9d:b6:15:02:41:1f:5d:cd:44:9b:a5:4a:46:30:aa:44:a5:
ca:7e:f9:b7:ac:a6:c8:75:1f:99:cc:64:db:70:a8:68:e1:a5:
e0:16:1e:7f:64:80:6c:ea:1d:75:12:a5:3d:5c:e0:3c:c8:73:
d5:15:35:cc:f8:85:6a:be:a8:cb:37:37:94:12:5e:07:86:eb:
6c:68:cd:bd:86:6f:ee:3c:be:bd:33:e5:a9:99:01:26:30:ff:
8c:c0:7d:8d:61:f7:8c:ac:0a:f4:bd:5e:a6:6b:53:db:ab:35:
eb:c6:09:2d:b6:8e:4b:90:4f:0f:4b:48:2a:ac:86:72:6b:e5:
33:cd:cc:36:ed:a4:ee:32:65:b5:8f:61:a4:29:ff:75:3c:eb:
db:5d:a8:31:62:8c:80:02:72:5a:87:63:ec:27:09:22:3c:14:
7a:40:1b:2c:8c:57:f5:2a:19:bf:02:7b:51:43:2e:20:f5:bc:
aa:87:7a:71:54:cf:a5:de:38:69:21:d8:66:2e:cc:d4:5e:cb:
26:24:b8:db:fc:fb:94:90:88:59:38:d4:63:04:1c:65:be:db:
da:87:61:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32T9e7s0Qmb9uFsYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTdlNTg3MzYtM2I1MS00OTc1LWFlMTQtMzg0NzBjZmE5YzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7h8VZIY2S4wYSM2lLv7LSemk1FSdpvx03ou
uC5KrcvLjMTGiGuPvILHLn9FA9VTKMM/YkhFeFCPslh59GN8iRc3pkPyTrqd8p2S
bL57lVEiTrww7qtCRYGb2HlmDOFYBMYYRHmeUOohjPwljPeP9qYFzkkQtEz5RJ1v
2VfIoR0u3j06X2CJOtpwm/6EFr8rxuBC64wEFihNCuC1BKTph1/DrOqXpz3A2vMM
UvmCjtltUxHDMH0+hWEVIgn422A1HV3Z+kSemZQWYjbvwqDDLnni6rY+Am1i7/XI
uLyxa5bMnjOXhyjaBCFsrXVAeJhwJtH8zIORnOlOD9VJPN1EVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxXXLHVgrTtF7AWaKfm0NDQ4X+cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2JkMjI3OTgtM2YyNy0z
NzIwLThjNGYtMzdhZGYwMWRiYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQqCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9vNfU7QYtW3U9C/YQGAHihHgN/SkTYY5tlKWt/kL0d47YgF/idthUC
QR9dzUSbpUpGMKpEpcp++bespsh1H5nMZNtwqGjhpeAWHn9kgGzqHXUSpT1c4DzI
c9UVNcz4hWq+qMs3N5QSXgeG62xozb2Gb+48vr0z5amZASYw/4zAfY1h94ysCvS9
XqZrU9urNevGCS22jkuQTw9LSCqshnJr5TPNzDbtpO4yZbWPYaQp/3U869tdqDFi
jIACclqHY+wnCSI8FHpAGyyMV/UqGb8Ce1FDLiD1vKqHenFUz6XeOGkh2GYuzNRe
yyYkuNv8+5SQiFk41GMEHGW+29qHYRc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:11 2025 by rpki-client