Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2786eb8e-e607-3c06-a6cc-45c54b4eaa36.roa
File: 2786eb8e-e607-3c06-a6cc-45c54b4eaa36.roa (raw, json)
Hash identifier: CMwD8tCZ7XmB6923KUtXju/gWQi+wn9Mug9VfgNC+sw=
Subject key identifier: 54:F5:5B:8C:FC:27:00:A2:CE:79:33:C0:79:94:AC:72:7D:28:67:D1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483455819461A94A2688DAE300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2786eb8e-e607-3c06-a6cc-45c54b4eaa36.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 44477
IP address blocks: 166.1.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:81:94:61:a9:4a:26:88:da:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=c29f1463-ae8d-4768-8947-3ac8f3a9f461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:54:56:c3:1e:1f:87:82:bc:84:50:17:47:
09:25:1f:ec:48:6c:dd:1c:2a:68:27:ef:d0:19:d5:
cd:6e:bc:3f:f7:37:5a:47:80:e9:c9:20:f1:7f:96:
29:4f:64:f3:40:1f:48:ee:79:d1:33:89:2d:6f:e6:
b8:f9:50:10:72:dc:99:09:56:80:27:90:71:7c:26:
b9:49:48:c4:3f:09:06:c9:04:af:57:b1:c2:60:ff:
e9:c3:88:42:15:c5:60:9e:1f:7e:10:6a:c1:e9:03:
76:db:50:0a:c9:84:40:72:64:d3:39:f5:03:5a:0a:
99:2c:77:3f:75:fb:fe:6e:ff:4a:be:95:74:c6:78:
b0:45:b0:52:61:b7:59:02:81:5e:00:48:18:cf:1b:
eb:c4:62:c4:cc:35:44:6a:dc:39:95:94:f5:d7:f0:
f7:0c:aa:fc:9b:fd:bf:45:13:97:88:db:a2:65:dd:
43:54:ce:0c:11:8d:a8:60:5c:95:6b:c0:2b:6f:d6:
85:82:be:f1:22:69:a8:85:de:bc:6a:8d:13:c1:75:
7f:f1:76:0b:dd:1a:55:0a:ad:0e:a4:ca:c8:d7:8e:
d5:c1:98:21:a3:2c:8d:41:db:7f:90:ab:87:62:47:
1d:e7:f4:13:85:ea:e0:d8:02:ff:0a:7d:7f:b9:3e:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F5:5B:8C:FC:27:00:A2:CE:79:33:C0:79:94:AC:72:7D:28:67:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2786eb8e-e607-3c06-a6cc-45c54b4eaa36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:4e:67:a8:63:e1:19:6f:08:f0:2d:44:2d:19:27:8f:c5:81:
12:f0:78:1f:18:74:f9:31:57:43:9c:0b:44:27:40:99:e8:4e:
aa:49:25:8a:27:5f:a4:7c:ff:bf:4e:bd:de:6e:0b:94:d2:ed:
df:6a:0e:72:8d:7f:55:23:f8:c9:78:bd:05:49:01:bf:fc:60:
e0:5f:db:a2:0b:b0:ed:55:cf:f9:ec:bc:d0:15:3f:9b:03:e4:
0a:18:b7:b0:cc:0f:ba:03:d4:e5:6f:e8:0d:b4:06:02:92:d4:
99:cb:0a:fd:3f:ac:0c:7d:3f:22:0e:45:b0:c3:03:be:26:32:
d2:32:65:fe:8b:75:70:1b:16:5a:37:74:3f:c7:15:ef:09:70:
5f:19:02:23:b5:df:08:22:08:49:bb:35:68:9d:7d:7b:2e:17:
85:f8:aa:97:87:3e:18:23:fe:e7:46:27:1d:0d:70:cf:46:cb:
18:95:86:97:6a:a3:d4:e6:3d:53:2e:9e:a6:ef:6a:4d:49:90:
a1:5b:ef:f9:86:95:26:17:99:cf:89:dc:e8:f8:62:a0:86:ac:
83:d7:f5:09:2c:fc:df:51:9a:48:16:c4:a3:51:c2:52:b2:16:
a5:02:d7:67:38:2b:c9:60:69:f7:0d:44:00:ff:29:0b:40:26:
8c:eb:cb:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VYGUYalKJoja4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
YzI5ZjE0NjMtYWU4ZC00NzY4LTg5NDctM2FjOGYzYTlmNDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq5UVsMeH4eCvIRQF0cJJR/sSGzdHCpoJ+/Q
GdXNbrw/9zdaR4DpySDxf5YpT2TzQB9I7nnRM4ktb+a4+VAQctyZCVaAJ5BxfCa5
SUjEPwkGyQSvV7HCYP/pw4hCFcVgnh9+EGrB6QN221AKyYRAcmTTOfUDWgqZLHc/
dfv+bv9KvpV0xniwRbBSYbdZAoFeAEgYzxvrxGLEzDVEatw5lZT11/D3DKr8m/2/
RROXiNuiZd1DVM4MEY2oYFyVa8Arb9aFgr7xImmohd68ao0TwXV/8XYL3RpVCq0O
pMrI147VwZghoyyNQdt/kKuHYkcd5/QTherg2AL/Cn1/uT4CNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFT1W4z8JwCiznkzwHmUrHJ9KGfRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjc4NmViOGUtZTYwNy0z
YzA2LWE2Y2MtNDVjNTRiNGVhYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChOZ6hj4RlvCPAtRC0ZJ4/FgRLweB8YdPkxV0OcC0QnQJnoTqpJJYon
X6R8/79Ovd5uC5TS7d9qDnKNf1Uj+Ml4vQVJAb/8YOBf26ILsO1Vz/nsvNAVP5sD
5AoYt7DMD7oD1OVv6A20BgKS1JnLCv0/rAx9PyIORbDDA74mMtIyZf6LdXAbFlo3
dD/HFe8JcF8ZAiO13wgiCEm7NWidfXsuF4X4qpeHPhgj/udGJx0NcM9GyxiVhpdq
o9TmPVMunqbvak1JkKFb7/mGlSYXmc+J3Oj4YqCGrIPX9Qks/N9RmkgWxKNRwlKy
FqUC12c4K8lgafcNRAD/KQtAJozry1A=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:40 2025 by rpki-client