Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32fbef02-d8ba-3f6d-b2d7-f48ecab3e544.roa
File: 32fbef02-d8ba-3f6d-b2d7-f48ecab3e544.roa (raw, json)
Hash identifier: MOa0nJTusNPLb0314VEJD/z2LIc7RsaT2aajsSIUCyg=
Subject key identifier: BE:AF:B4:D9:F6:51:A0:BD:F1:E4:78:62:48:6A:66:D4:43:0E:07:C0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858484C102BD22A61187C36D27F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32fbef02-d8ba-3f6d-b2d7-f48ecab3e544.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 40676
IP address blocks: 50.114.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:2b:d2:2a:61:18:7c:36:d2:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=57730fe0-30b0-4bf6-907a-70c3ad871c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:58:11:b7:71:90:38:2e:56:d8:b7:0d:42:
2c:d5:60:1e:18:79:2f:39:f5:78:9e:c3:72:11:4b:
10:96:d7:c4:78:44:31:38:fa:eb:c8:23:41:e1:ff:
31:b3:17:38:41:8e:9c:9f:e5:bd:74:5d:59:ed:55:
e5:e7:14:97:af:28:5f:5d:f9:a3:9d:42:5d:6b:7f:
7a:44:af:92:d2:1e:d0:07:54:ec:0f:28:e3:25:4d:
47:26:c5:2f:9c:1c:f5:e4:0f:94:15:23:b9:a9:07:
07:0e:ce:ba:79:d2:7f:89:af:b9:49:f2:c9:91:b7:
a9:da:cd:c7:70:9b:e0:78:35:64:e2:c5:2b:ad:00:
bf:23:8d:5f:d7:a7:a7:cc:d6:fb:86:70:60:3c:b6:
f3:39:db:53:5d:61:a4:1d:f9:f6:71:53:70:1f:e2:
71:bf:ba:67:41:26:59:4d:8e:fb:db:3a:75:d0:ba:
99:f2:fa:72:04:35:de:d2:d9:aa:e4:0b:a1:9b:5d:
1c:25:de:d0:30:0c:60:0d:51:63:ca:45:81:0c:fc:
32:3b:4a:32:76:fe:98:92:db:b7:2c:31:83:0c:f6:
23:6c:cc:31:ff:e4:a0:ff:58:90:27:82:f1:2a:16:
ed:c1:e1:b8:2a:52:a0:6a:7e:01:d2:dd:88:c5:06:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:B4:D9:F6:51:A0:BD:F1:E4:78:62:48:6A:66:D4:43:0E:07:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32fbef02-d8ba-3f6d-b2d7-f48ecab3e544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:b0:7f:ab:60:69:43:1c:b3:8a:b2:a3:bf:eb:2b:22:32:cc:
47:3e:df:11:98:6a:3c:74:9f:1c:45:90:f8:62:59:ef:c7:6e:
d1:a9:d6:c9:7a:42:1b:b5:73:67:26:7e:5f:a0:dc:a6:f8:3f:
99:a5:0d:9a:b7:a4:49:6d:41:f1:be:5d:9d:9b:ca:09:9c:55:
1c:cb:15:25:66:16:26:80:f4:56:f7:4f:e0:46:cd:88:a9:86:
b3:df:aa:d9:db:8c:a4:9d:bb:94:13:36:81:b6:40:1d:6c:39:
a3:c2:6d:af:6a:34:88:e3:c7:23:80:2c:75:60:f5:ea:78:a1:
a4:2d:0d:2d:4b:9a:6e:8f:54:93:b6:77:bf:47:11:ea:85:47:
fa:69:49:b4:df:f1:30:57:51:38:1b:00:11:73:75:0b:85:c7:
4c:bd:90:d0:19:13:d6:ad:17:9d:b0:db:12:4f:3c:46:cf:b7:
99:2d:e5:69:7b:b2:29:17:40:10:89:cf:c5:bb:4c:a1:96:9b:
b2:08:b2:43:20:cf:5f:d9:16:f4:85:07:66:e5:ad:ac:3b:58:
2c:0b:d1:d9:75:4c:c2:85:e0:bd:36:76:b6:ca:fa:73:16:bb:
79:c5:c6:af:16:19:9d:e1:21:ef:03:6a:87:5e:da:68:2d:62:
2a:43:f8:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMECvSKmEYfDbSf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NTc3MzBmZTAtMzBiMC00YmY2LTkwN2EtNzBjM2FkODcxYzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt9YEbdxkDguVti3DUIs1WAeGHkvOfV4nsNy
EUsQltfEeEQxOPrryCNB4f8xsxc4QY6cn+W9dF1Z7VXl5xSXryhfXfmjnUJda396
RK+S0h7QB1TsDyjjJU1HJsUvnBz15A+UFSO5qQcHDs66edJ/ia+5SfLJkbep2s3H
cJvgeDVk4sUrrQC/I41f16enzNb7hnBgPLbzOdtTXWGkHfn2cVNwH+Jxv7pnQSZZ
TY772zp10LqZ8vpyBDXe0tmq5Auhm10cJd7QMAxgDVFjykWBDPwyO0oydv6Yktu3
LDGDDPYjbMwx/+Sg/1iQJ4LxKhbtweG4KlKgan4B0t2IxQa3kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6vtNn2UaC98eR4YkhqZtRDDgfAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzJmYmVmMDItZDhiYS0z
ZjZkLWIyZDctZjQ4ZWNhYjNlNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnLGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKiwf6tgaUMcs4qyo7/rKyIyzEc+3xGYajx0nxxFkPhiWe/HbtGp1sl6
Qhu1c2cmfl+g3Kb4P5mlDZq3pEltQfG+XZ2bygmcVRzLFSVmFiaA9Fb3T+BGzYip
hrPfqtnbjKSdu5QTNoG2QB1sOaPCba9qNIjjxyOALHVg9ep4oaQtDS1Lmm6PVJO2
d79HEeqFR/ppSbTf8TBXUTgbABFzdQuFx0y9kNAZE9atF52w2xJPPEbPt5kt5Wl7
sikXQBCJz8W7TKGWm7IIskMgz1/ZFvSFB2blraw7WCwL0dl1TMKF4L02drbK+nMW
u3nFxq8WGZ3hIe8Daode2mgtYipD+IQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:51:23 2025 by rpki-client