Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa
File: 42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa (raw, json)
Hash identifier: wIPCoK4vyRvzG11tYNeVHYvdkNrxC7N0GqoGyJ4cMgo=
Subject key identifier: 8E:EF:AE:E2:DA:0E:86:61:A6:07:7C:23:A5:61:37:4D:AC:27:57:7A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848265FF364212F85149D4D0C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 212335
IP address blocks: 108.165.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:f3:64:21:2f:85:14:9d:4d:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=8385b9eb-b721-458d-ad19-21226e57a954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:a6:7e:24:51:3f:7b:7d:03:51:7f:12:eb:
7d:a4:7e:74:29:c3:57:0b:07:f3:07:95:51:86:34:
8e:78:a7:b6:78:21:e6:02:f5:ce:ec:3c:20:5c:df:
3c:5b:8c:94:08:ec:b7:c3:45:89:bd:89:e8:b0:7d:
82:a1:cc:5d:0c:18:de:89:cb:88:14:d0:da:3c:00:
0c:d0:49:71:bf:df:76:57:77:f9:65:fa:f7:05:3d:
0d:1d:fa:4c:f5:e7:1f:f4:fa:1e:9a:13:be:dc:b1:
d5:97:33:47:f9:9d:37:a6:3b:fb:75:92:49:6a:38:
c8:3c:07:a7:d5:12:bf:f0:d9:72:0f:27:25:3a:d8:
52:ac:ee:8f:b2:70:0e:e5:60:9d:85:85:c9:fb:36:
66:92:10:ff:63:fd:a3:2c:ca:11:f9:ce:33:ab:11:
90:e2:eb:81:0b:4b:9f:d3:86:70:d3:c2:a8:04:31:
0e:1a:1c:d5:e4:1f:ed:6d:e3:b2:f5:17:12:8f:5a:
8e:ca:63:be:e7:10:f3:ed:1c:63:8d:76:46:c8:3d:
05:1e:48:31:ab:91:ff:50:61:47:4b:eb:e2:d3:da:
e5:18:09:a4:50:cc:a0:90:dc:58:1f:45:8d:a1:8d:
25:70:0f:51:2d:0e:20:d4:ae:4d:d2:df:e6:a0:c3:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:AE:E2:DA:0E:86:61:A6:07:7C:23:A5:61:37:4D:AC:27:57:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:5c:dd:de:21:10:65:8d:f3:69:53:22:95:4a:89:17:82:57:
b0:8c:5f:23:3c:61:a0:de:b8:9f:7d:f9:b1:75:4a:59:e0:f3:
b2:13:e5:36:81:23:4e:de:67:8c:c7:bf:82:d5:2c:5f:d7:fb:
94:b3:30:18:36:66:a5:b2:fb:70:85:91:9f:43:a1:75:5c:fc:
33:ac:a6:77:1c:e0:12:16:1d:c7:d7:26:15:26:18:e9:b3:26:
c9:b7:46:74:87:7b:04:42:ff:e5:b5:32:7c:70:90:b4:40:c2:
2b:50:b7:59:41:b6:de:4a:7f:f7:0b:cc:6a:ef:eb:42:5b:97:
e1:f6:25:7b:fe:45:6a:7c:dc:55:16:a4:de:7b:f0:3f:50:a0:
ad:c1:e1:e7:26:26:3f:43:62:48:35:68:37:be:3c:5f:5c:2d:
15:cd:84:1a:73:d3:34:f4:32:29:f6:ce:8f:da:67:85:ad:13:
ef:92:27:11:80:2f:12:a8:8b:42:8e:0c:a0:ef:13:e5:31:10:
6b:a8:7d:a7:e6:3a:cb:7e:5b:d5:3c:68:10:e9:73:3d:29:c9:
09:50:79:30:1d:98:57:b1:31:6c:37:d5:cb:61:8c:2d:04:1a:
ba:3b:4d:b2:30:18:46:5a:ce:bf:ab:e4:d7:c3:1b:37:62:af:
4e:64:e9:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmX/NkIS+FFJ1NDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIwOTE0MDA1MVoXDTI1MDMwOTEzMDA1MVowLzEtMCsGA1UEAxMk
ODM4NWI5ZWItYjcyMS00NThkLWFkMTktMjEyMjZlNTdhOTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJmmfiRRP3t9A1F/Eut9pH50KcNXCwfzB5VR
hjSOeKe2eCHmAvXO7DwgXN88W4yUCOy3w0WJvYnosH2CocxdDBjeicuIFNDaPAAM
0Elxv992V3f5Zfr3BT0NHfpM9ecf9PoemhO+3LHVlzNH+Z03pjv7dZJJajjIPAen
1RK/8NlyDyclOthSrO6PsnAO5WCdhYXJ+zZmkhD/Y/2jLMoR+c4zqxGQ4uuBC0uf
04Zw08KoBDEOGhzV5B/tbeOy9RcSj1qOymO+5xDz7RxjjXZGyD0FHkgxq5H/UGFH
S+vi09rlGAmkUMygkNxYH0WNoY0lcA9RLQ4g1K5N0t/moMOIMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7vruLaDoZhpgd8I6VhN02sJ1d6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDJlNWFmMGItZDc3ZS0z
MDBkLThmMjgtN2VlYjg0YmUwOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZc3d4hEGWN82lTIpVKiReCV7CMXyM8YaDeuJ99+bF1Slng87IT5TaB
I07eZ4zHv4LVLF/X+5SzMBg2ZqWy+3CFkZ9DoXVc/DOspncc4BIWHcfXJhUmGOmz
Jsm3RnSHewRC/+W1MnxwkLRAwitQt1lBtt5Kf/cLzGrv60Jbl+H2JXv+RWp83FUW
pN578D9QoK3B4ecmJj9DYkg1aDe+PF9cLRXNhBpz0zT0Min2zo/aZ4WtE++SJxGA
LxKoi0KODKDvE+UxEGuofafmOst+W9U8aBDpcz0pyQlQeTAdmFexMWw31cthjC0E
Gro7TbIwGEZazr+r5NfDGzdir05k6VY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:11:33 2025 by rpki-client