Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/7f9d2aed-2a0f-3604-9fb6-cd678c8fe699.roa
File: 7f9d2aed-2a0f-3604-9fb6-cd678c8fe699.roa (raw, json)
Hash identifier: jhPicCb+AKjiTJnlOH3ufot4mGdyMM5MrUJx+kLikdg=
Subject key identifier: C6:82:F1:81:DA:70:16:38:08:33:EC:AA:47:FF:C6:9E:73:B5:32:28
Certificate issuer: /CN=5f0444bf-8f35-4754-9121-fb0e0baca58d
Certificate serial: 010D0C9F432858480644FD38A3864461FB4DBF00
Authority key identifier: 46:45:6E:EB:E8:2D:43:55:0B:C2:E8:8E:14:B7:F9:BB:7D:24:FD:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/7f9d2aed-2a0f-3604-9fb6-cd678c8fe699.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 14618
IP address blocks: 66.232.20.0/23 maxlen: 23
206.166.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fd:38:a3:86:44:61:fb:4d:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0444bf-8f35-4754-9121-fb0e0baca58d
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=54ca0fa2-c319-4a02-952f-225c9f701637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:0f:76:6b:5d:87:f7:17:96:33:27:24:47:
2a:3b:24:3a:27:b4:f8:75:3e:46:de:ac:ea:be:12:
8c:da:0b:43:93:29:8e:ec:56:bd:44:c2:a1:5a:03:
0d:a6:08:64:7e:4b:8c:25:09:fa:8e:c2:c2:e0:ee:
2c:e1:22:7d:94:a6:42:db:72:09:de:88:04:d3:53:
13:d9:79:73:72:b8:8c:1e:06:23:bd:8c:98:44:28:
e8:bc:a1:59:49:b5:f7:50:2f:90:fe:bb:31:d1:ab:
27:a9:11:c1:6a:72:75:10:81:c0:ab:50:b1:2a:b9:
60:3a:cc:1d:cd:d0:63:5d:2a:b6:42:54:53:bb:08:
b9:38:63:4d:ea:dd:c9:09:a8:d6:90:61:b4:84:a2:
9e:fc:28:b9:9a:ac:da:4b:a2:a3:61:d3:e3:ac:de:
fb:ee:22:f0:a8:27:ba:cc:2e:6c:b2:9a:56:bd:0d:
92:21:b8:08:e4:e2:4a:c8:65:b3:54:82:35:ea:57:
37:42:07:82:8b:9c:b2:18:7c:a0:da:5d:00:13:1f:
52:73:53:3e:35:99:d6:5b:c1:ac:f1:a9:a7:33:6d:
a9:a1:e8:b0:cc:7e:f2:90:03:6e:4e:82:9f:bb:77:
0a:c2:18:d6:a0:a1:b0:89:f4:c1:d4:4f:cb:6a:bf:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:82:F1:81:DA:70:16:38:08:33:EC:AA:47:FF:C6:9E:73:B5:32:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/7f9d2aed-2a0f-3604-9fb6-cd678c8fe699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.crl
X509v3 Authority Key Identifier:
keyid:46:45:6E:EB:E8:2D:43:55:0B:C2:E8:8E:14:B7:F9:BB:7D:24:FD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer
sbgp-ipAddrBlock: critical
IPv4:
66.232.20.0/23
206.166.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:b3:d6:d5:21:59:4b:da:f2:0f:fd:a9:02:5b:32:a3:96:61:
ed:10:9e:64:3c:38:45:01:03:4c:60:e3:20:7f:9c:79:5e:ec:
91:ef:ce:1e:54:03:c1:5f:9f:c4:84:df:9d:38:c2:d4:6b:d2:
18:6a:39:ac:a0:55:dd:b8:06:8d:12:23:2d:cf:c6:50:e9:85:
cd:9c:19:6e:1c:db:8f:4a:64:a3:c1:d1:82:b8:d6:42:da:25:
3a:2f:14:50:9b:06:e7:1d:17:6f:7b:3a:88:4c:f3:55:6a:0f:
66:88:a6:aa:db:b1:b5:4f:aa:bc:52:f1:ef:d5:80:61:52:11:
5d:2c:5d:15:6f:81:c6:a4:ec:2a:1c:b8:af:b6:e5:e2:a8:c3:
05:b7:54:de:a0:78:2d:16:88:23:8c:b6:59:08:39:17:ab:84:
ce:16:80:8d:44:92:5f:05:69:82:54:53:ed:0f:d7:3e:74:60:
46:98:e6:94:43:e5:4f:78:66:bd:4b:8a:35:f8:eb:3f:8b:c3:
5b:77:f2:40:16:ae:86:04:da:18:6c:c2:e7:d2:ef:ae:b2:10:
7d:dd:36:71:7b:64:72:c7:60:f4:ba:32:9a:d3:e8:e0:ee:2f:
08:ae:40:44:58:de:a5:61:9a:43:38:b7:fc:bd:44:34:ab:fe:
a0:12:36:d6
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgGRP04o4ZEYftNvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWYwNDQ0YmYtOGYzNS00NzU0LTkxMjEtZmIwZTBiYWNh
NThkMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
NTRjYTBmYTItYzMxOS00YTAyLTk1MmYtMjI1YzlmNzAxNjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi8Pdmtdh/cXljMnJEcqOyQ6J7T4dT5G3qzq
vhKM2gtDkymO7Fa9RMKhWgMNpghkfkuMJQn6jsLC4O4s4SJ9lKZC23IJ3ogE01MT
2XlzcriMHgYjvYyYRCjovKFZSbX3UC+Q/rsx0asnqRHBanJ1EIHAq1CxKrlgOswd
zdBjXSq2QlRTuwi5OGNN6t3JCajWkGG0hKKe/Ci5mqzaS6KjYdPjrN777iLwqCe6
zC5ssppWvQ2SIbgI5OJKyGWzVII16lc3QgeCi5yyGHyg2l0AEx9Sc1M+NZnWW8Gs
8amnM22poeiwzH7ykANuToKfu3cKwhjWoKGwifTB1E/Lar+5VwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMaC8YHacBY4CDPsqkf/xp5ztTIoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZjA0
NDRiZi04ZjM1LTQ3NTQtOTEyMS1mYjBlMGJhY2E1OGQvN2Y5ZDJhZWQtMmEwZi0z
NjA0LTlmYjYtY2Q2NzhjOGZlNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWYwNDQ0YmYtOGYzNS00NzU0LTkx
MjEtZmIwZTBiYWNhNThkLzVmMDQ0NGJmLThmMzUtNDc1NC05MTIxLWZiMGUwYmFj
YTU4ZC5jcmwwHwYDVR0jBBgwFoAURkVu6+gtQ1ULwuiOFLf5u30k/YUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZjA0NDRiZi04ZjM1LTQ3NTQtOTEyMS1mYjBl
MGJhY2E1OGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQugUAwQB
zqb4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHqz1tUhWUva8g/9qQJbMqOWYe0QnmQ8OEUBA0xg4yB/nHle
7JHvzh5UA8Ffn8SE3504wtRr0hhqOaygVd24Bo0SIy3PxlDphc2cGW4c249KZKPB
0YK41kLaJTovFFCbBucdF297OohM81VqD2aIpqrbsbVPqrxS8e/VgGFSEV0sXRVv
gcak7CocuK+25eKowwW3VN6geC0WiCOMtlkIORerhM4WgI1Ekl8FaYJUU+0P1z50
YEaY5pRD5U94Zr1LijX46z+Lw1t38kAWroYE2hhswufS766yEH3dNnF7ZHLHYPS6
MprT6ODuLwiuQERY3qVhmkM4t/y9RDSr/qASNtY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:13 2025 by rpki-client