Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f03bb49-ce55-3ccb-84a2-039cf0c37d5c.roa
File: 0f03bb49-ce55-3ccb-84a2-039cf0c37d5c.roa (raw, json)
Hash identifier: gnxrZ3M340/VpAh6XOGVYgc1wvP2U7WQAOv1pNSQ6wc=
Subject key identifier: 2E:0E:A7:F4:12:8D:05:81:84:2C:10:B2:DC:20:C7:DE:36:C5:3A:5D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848116FF8761BB362D47EB87480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f03bb49-ce55-3ccb-84a2-039cf0c37d5c.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 58061
IP address blocks: 166.0.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f8:76:1b:b3:62:d4:7e:b8:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=4cd89018-6991-4fa9-a5ce-859db264bbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:0a:ce:56:13:b6:de:ec:69:53:aa:b5:31:
4d:13:a7:01:db:4a:94:80:84:fa:97:7d:5a:45:8a:
89:d2:ee:88:ab:2e:e2:db:8b:22:e1:f7:5a:4b:54:
22:ee:0c:1c:f9:23:eb:67:42:4e:a1:84:88:64:39:
35:b5:eb:5b:ce:4d:95:6a:63:38:f8:d9:01:69:1c:
5b:3a:2a:84:2e:e6:e9:6a:cf:24:1d:7b:b3:41:23:
39:8b:c1:69:67:c7:1e:2c:fb:e8:a6:c2:96:8d:88:
bc:50:5f:d3:35:b9:2d:76:18:bf:b2:87:08:a7:77:
ea:d6:0f:53:d1:6d:f4:6f:4a:b0:8b:dc:2f:b4:37:
47:20:f5:26:c3:bb:c3:e9:03:32:c7:ec:92:63:c2:
5b:ba:07:5a:58:c9:d4:7a:f3:7d:bc:cb:41:66:ad:
26:0f:ff:51:17:61:db:8f:1f:38:a0:1a:5f:b0:7d:
0a:f4:36:1e:1b:af:2c:c0:31:a0:63:24:d3:84:ff:
85:e0:b9:f3:f3:e5:67:c7:2d:16:5e:cd:f8:9f:62:
26:f3:28:83:cd:c2:d6:13:fe:df:2f:b0:3f:2d:4c:
cd:c6:cf:84:0e:6f:12:6d:3d:a5:54:22:33:48:39:
e8:c5:33:44:09:12:40:73:df:e1:70:74:68:b5:d9:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0E:A7:F4:12:8D:05:81:84:2C:10:B2:DC:20:C7:DE:36:C5:3A:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f03bb49-ce55-3ccb-84a2-039cf0c37d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:02:eb:96:dc:dd:03:6f:7d:63:2c:e4:8e:0d:10:e7:3f:a3:
24:19:7d:1b:49:06:28:a7:d7:c7:6d:30:6b:3f:04:ff:e0:be:
b9:e9:e7:3e:9c:fc:20:bb:f0:0c:e3:f1:9b:c8:45:35:f4:4a:
68:fb:66:1c:6d:a2:bb:35:20:7a:56:33:2f:57:38:8e:d3:2c:
e4:cf:f7:ac:a7:1c:6e:41:23:ce:e0:66:9d:9e:e1:4b:0b:ff:
31:11:8d:de:c2:2e:84:96:0a:f9:7a:bd:bd:b9:37:ba:69:71:
bf:f4:74:e4:8d:43:44:d1:1e:1a:08:4c:57:d9:ee:0f:37:90:
64:7b:76:c3:2a:67:3d:cf:c5:aa:b1:5e:47:c3:4c:38:be:80:
98:b7:4d:09:76:ca:92:2e:7c:28:01:ac:79:c2:4f:cd:f2:20:
4b:1a:b2:1a:39:79:14:e9:52:2d:e6:b7:f0:18:0a:3a:6c:f7:
9c:6c:62:bf:9c:8e:15:2e:f8:da:62:63:48:d8:e3:c2:6f:5b:
05:b3:55:b3:c7:49:6b:95:1a:f9:8c:a4:23:c8:6e:b4:41:73:
5f:c3:7e:0e:9a:cf:6e:67:d4:01:7e:2f:4c:21:1a:13:95:0d:
64:35:cf:7e:06:1f:f2:68:44:29:e1:1a:4d:77:2a:84:fd:25:
65:11:b2:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb/h2G7Ni1H64dIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
NGNkODkwMTgtNjk5MS00ZmE5LWE1Y2UtODU5ZGIyNjRiYmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVIKzlYTtt7saVOqtTFNE6cB20qUgIT6l31a
RYqJ0u6Iqy7i24si4fdaS1Qi7gwc+SPrZ0JOoYSIZDk1tetbzk2VamM4+NkBaRxb
OiqELubpas8kHXuzQSM5i8FpZ8ceLPvopsKWjYi8UF/TNbktdhi/socIp3fq1g9T
0W30b0qwi9wvtDdHIPUmw7vD6QMyx+ySY8JbugdaWMnUevN9vMtBZq0mD/9RF2Hb
jx84oBpfsH0K9DYeG68swDGgYyTThP+F4Lnz8+Vnxy0WXs34n2Im8yiDzcLWE/7f
L7A/LUzNxs+EDm8SbT2lVCIzSDnoxTNECRJAc9/hcHRotdkTDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4Op/QSjQWBhCwQstwgx942xTpdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGYwM2JiNDktY2U1NS0z
Y2NiLTg0YTItMDM5Y2YwYzM3ZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwC65bc3QNvfWMs5I4NEOc/oyQZfRtJBiin18dtMGs/BP/gvrnp5z6c
/CC78Azj8ZvIRTX0Smj7Zhxtors1IHpWMy9XOI7TLOTP96ynHG5BI87gZp2e4UsL
/zERjd7CLoSWCvl6vb25N7ppcb/0dOSNQ0TRHhoITFfZ7g83kGR7dsMqZz3Pxaqx
XkfDTDi+gJi3TQl2ypIufCgBrHnCT83yIEsasho5eRTpUi3mt/AYCjps95xsYr+c
jhUu+NpiY0jY48JvWwWzVbPHSWuVGvmMpCPIbrRBc1/Dfg6az25n1AF+L0whGhOV
DWQ1z34GH/JoRCnhGk13KoT9JWURsqw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:25 2025 by rpki-client