Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4c58a4bf-f353-3ef4-8992-03f87341a788.roa
File: 4c58a4bf-f353-3ef4-8992-03f87341a788.roa (raw, json)
Hash identifier: 0It6KyCkZRGN8qwSKTl8qeRd68CGEEk4ubNyTGC6aW8=
Subject key identifier: 79:97:44:48:A3:55:0C:82:B7:56:D9:68:2A:46:94:9A:37:5C:BB:A4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858480BDA7DF91CE25D18AD0074A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4c58a4bf-f353-3ef4-8992-03f87341a788.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 5065
IP address blocks: 108.165.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:7d:f9:1c:e2:5d:18:ad:00:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=f0fec306-7f88-44c2-adeb-61db4ba58434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:11:a9:ee:cd:bf:41:ce:33:4f:f4:cb:b5:
86:a4:01:65:d0:a1:32:e3:04:82:1f:3d:ed:6e:85:
e1:27:db:7a:15:26:57:52:27:8b:03:f7:cf:e9:34:
37:a1:3c:53:74:e4:5e:cf:9a:57:ef:5a:d5:87:f7:
44:66:f6:ba:7a:c9:35:2a:60:9a:37:e9:70:3f:f5:
de:eb:88:e1:f0:4d:4a:56:55:d2:9d:93:bb:32:3f:
19:03:aa:61:26:10:06:c7:2b:6e:93:e6:c7:24:6a:
40:34:cf:9e:1d:3c:ef:93:d8:00:a5:d3:3e:a6:e1:
d8:50:e0:29:81:09:19:f5:ba:00:85:e6:eb:73:a4:
f2:89:9a:a7:3c:97:48:6b:d3:e5:c4:3b:83:a2:78:
84:03:8b:f0:58:d3:aa:c7:b6:28:92:40:cc:07:98:
40:bc:37:5c:ed:6b:21:dd:24:6f:4f:73:1e:dd:ab:
ad:70:67:7a:33:e4:ef:f7:52:4b:df:f9:7d:b7:72:
5c:dd:20:ec:ad:44:72:1f:2b:57:d9:52:7e:78:f1:
7e:7a:5e:0e:5d:3f:6c:2d:a1:c7:3b:4e:be:01:d1:
e4:2d:d2:75:65:ea:d7:02:f4:87:44:b8:aa:a0:f0:
04:08:54:d3:cb:4b:92:68:ef:e5:5d:69:9c:48:66:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:97:44:48:A3:55:0C:82:B7:56:D9:68:2A:46:94:9A:37:5C:BB:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4c58a4bf-f353-3ef4-8992-03f87341a788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:50:d7:6b:ec:02:1e:83:a3:09:0f:2f:35:b7:a6:4c:81:be:
16:7b:4a:03:58:e0:61:d2:b7:2d:0f:8c:e6:62:3f:2c:97:bf:
27:e6:49:ad:bc:87:d4:ef:67:25:08:4a:c6:10:76:c5:91:55:
35:d3:10:43:8c:9b:5c:f1:b6:2d:b0:7a:e1:41:ee:53:9b:a1:
86:bb:90:a6:56:05:80:be:52:c6:89:5c:a5:04:12:2c:b0:66:
8d:db:54:f6:8b:48:7d:da:5b:a4:10:a5:8e:05:51:1c:7a:89:
cf:80:29:2e:a1:52:2b:a6:cb:1f:8c:45:e3:8a:62:1e:b3:a8:
37:8a:35:0b:08:b6:68:f8:54:64:de:20:a0:2c:eb:53:07:de:
62:64:5e:ad:48:14:fb:49:b9:02:bb:68:17:1b:8c:a7:32:91:
42:17:c7:d0:e4:f6:08:f4:3c:65:f7:56:fc:18:cf:a2:de:79:
38:f1:be:f5:8c:d0:0a:21:5d:37:18:a8:36:75:ab:10:c7:3b:
16:85:62:8e:97:cb:18:6d:de:a7:c2:1b:c1:63:e9:cf:2d:84:
21:d0:65:5e:2c:eb:88:12:ea:0d:0b:d2:ac:a1:79:fc:6b:ef:
f1:77:10:27:d7:fd:6a:6a:5d:a8:2b:b1:d8:2b:97:e9:2e:2e:
ea:d9:67:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2n35HOJdGK0AdKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
ZjBmZWMzMDYtN2Y4OC00NGMyLWFkZWItNjFkYjRiYTU4NDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F8Rqe7Nv0HOM0/0y7WGpAFl0KEy4wSCHz3t
boXhJ9t6FSZXUieLA/fP6TQ3oTxTdORez5pX71rVh/dEZva6esk1KmCaN+lwP/Xe
64jh8E1KVlXSnZO7Mj8ZA6phJhAGxytuk+bHJGpANM+eHTzvk9gApdM+puHYUOAp
gQkZ9boAhebrc6TyiZqnPJdIa9PlxDuDoniEA4vwWNOqx7YokkDMB5hAvDdc7Wsh
3SRvT3Me3autcGd6M+Tv91JL3/l9t3Jc3SDsrURyHytX2VJ+ePF+el4OXT9sLaHH
O06+AdHkLdJ1ZerXAvSHRLiqoPAECFTTy0uSaO/lXWmcSGbbfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmXREijVQyCt1bZaCpGlJo3XLukMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGM1OGE0YmYtZjM1My0z
ZWY0LTg5OTItMDNmODczNDFhNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJlQ12vsAh6DowkPLzW3pkyBvhZ7SgNY4GHSty0PjOZiPyyXvyfmSa28
h9TvZyUISsYQdsWRVTXTEEOMm1zxti2weuFB7lOboYa7kKZWBYC+UsaJXKUEEiyw
Zo3bVPaLSH3aW6QQpY4FURx6ic+AKS6hUiumyx+MReOKYh6zqDeKNQsItmj4VGTe
IKAs61MH3mJkXq1IFPtJuQK7aBcbjKcykUIXx9Dk9gj0PGX3VvwYz6LeeTjxvvWM
0AohXTcYqDZ1qxDHOxaFYo6Xyxht3qfCG8Fj6c8thCHQZV4s64gS6g0L0qyhefxr
7/F3ECfX/WpqXagrsdgrl+kuLurZZ5Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:51 2025 by rpki-client