Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/561321f5-144e-3b4d-b1f8-27b1230853fd.roa
File: 561321f5-144e-3b4d-b1f8-27b1230853fd.roa (raw, json)
Hash identifier: MPVXgmNRtcy/ocZIQiqq1tcESmpH7gpqX3JDAXdJt5o=
Subject key identifier: B0:C5:40:55:37:9A:0E:3A:A0:4F:FF:70:F0:35:14:DB:BE:09:8B:61
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848116FF762ABFE7B63D93E4630
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/561321f5-144e-3b4d-b1f8-27b1230853fd.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 58061
IP address blocks: 166.1.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f7:62:ab:fe:7b:63:d9:3e:46:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=ea4f4190-cb48-4aa4-967b-c4579f52a251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a9:82:7c:fc:ce:a0:f2:42:e6:04:e1:98:2b:
7a:67:f2:0b:de:66:9d:e5:4e:a8:06:bb:3f:31:4a:
a0:db:5a:59:eb:f8:f8:c6:0f:7e:69:41:22:fb:6e:
a0:26:28:09:a9:b5:77:95:78:d6:7d:47:95:6c:59:
bf:1b:e7:fe:f3:73:df:ca:5c:bb:d0:e1:e5:89:d7:
03:83:3b:3b:fc:02:43:2b:a4:39:20:b0:d3:2f:d9:
d6:ca:25:ec:5c:0a:9e:70:8e:1a:9d:be:20:b2:c0:
63:70:7a:51:19:07:42:55:b3:6e:09:be:64:0c:87:
85:91:e0:ce:de:78:1c:70:3b:04:10:9e:cf:96:a3:
5e:d9:b2:b9:12:85:95:26:48:88:79:ea:5d:0d:19:
c5:af:00:6d:5b:43:ce:be:e4:ef:2f:e0:33:ca:9f:
ef:b4:bd:c7:c6:3d:c6:22:c1:a0:0c:ae:ce:7b:ff:
cf:f5:85:84:10:a0:18:bd:96:57:d3:50:dc:7f:9f:
10:ec:8e:53:95:10:e9:d4:7c:a2:04:f2:5a:f3:3a:
05:f7:ec:0c:4f:a3:83:c8:27:e4:c1:74:71:43:99:
87:1b:7b:d4:d2:0e:2b:84:3b:84:9a:fe:a0:b7:b8:
72:25:6b:f8:76:53:da:e7:da:c3:97:f3:90:4c:89:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:40:55:37:9A:0E:3A:A0:4F:FF:70:F0:35:14:DB:BE:09:8B:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/561321f5-144e-3b4d-b1f8-27b1230853fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:b2:54:27:09:6b:bb:5c:d5:30:8a:e4:5f:2d:80:3b:d1:84:
f1:81:cc:7a:98:95:25:a9:fe:30:78:07:42:70:52:d8:be:f0:
62:a1:ed:01:ef:ba:c7:9d:31:a9:49:84:fc:1a:54:84:b0:0f:
c5:01:96:42:8f:e5:ac:f2:c7:a2:fa:c8:cf:42:61:f8:2e:92:
41:a4:ed:5d:a2:22:69:ee:38:55:9b:d8:6d:f1:a2:e4:d4:e8:
4b:81:ee:9a:27:e1:ed:bb:2c:f1:41:2c:0a:e9:23:e7:dd:ef:
c8:de:0a:fc:a2:4a:6c:1f:9c:4f:19:f6:c0:0f:b0:8b:76:e1:
36:bd:2b:e4:33:63:b9:74:4d:24:7f:8a:c2:05:1d:7d:a8:fa:
0e:ca:d0:b3:04:f1:52:a7:b6:87:58:62:e3:66:8d:76:79:59:
3f:ae:41:8e:c8:c0:63:26:2e:59:da:cb:25:b3:fc:1b:2b:31:
67:55:48:04:1f:46:8e:31:5a:3d:c2:77:f2:c8:ed:30:a7:12:
f0:70:f9:56:3a:47:8a:37:7b:b5:ce:e1:e6:61:62:60:ea:df:
4d:3a:0e:c7:44:c1:f1:28:2e:fa:f7:b5:f1:c5:c1:9a:83:d3:
3a:b8:76:9c:2e:34:13:eb:35:34:80:15:72:09:b9:37:06:7a:
fe:e9:cf:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb/diq/57Y9k+RjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
ZWE0ZjQxOTAtY2I0OC00YWE0LTk2N2ItYzQ1NzlmNTJhMjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqmCfPzOoPJC5gThmCt6Z/IL3mad5U6oBrs/
MUqg21pZ6/j4xg9+aUEi+26gJigJqbV3lXjWfUeVbFm/G+f+83Pfyly70OHlidcD
gzs7/AJDK6Q5ILDTL9nWyiXsXAqecI4anb4gssBjcHpRGQdCVbNuCb5kDIeFkeDO
3ngccDsEEJ7PlqNe2bK5EoWVJkiIeepdDRnFrwBtW0POvuTvL+Azyp/vtL3Hxj3G
IsGgDK7Oe//P9YWEEKAYvZZX01Dcf58Q7I5TlRDp1HyiBPJa8zoF9+wMT6ODyCfk
wXRxQ5mHG3vU0g4rhDuEmv6gt7hyJWv4dlPa59rDl/OQTImCpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDFQFU3mg46oE//cPA1FNu+CYthMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTYxMzIxZjUtMTQ0ZS0z
YjRkLWIxZjgtMjdiMTIzMDg1M2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgE6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmyVCcJa7tc1TCK5F8tgDvRhPGBzHqYlSWp/jB4B0JwUti+8GKh7QHv
usedMalJhPwaVISwD8UBlkKP5azyx6L6yM9CYfgukkGk7V2iImnuOFWb2G3xouTU
6EuB7pon4e27LPFBLArpI+fd78jeCvyiSmwfnE8Z9sAPsIt24Ta9K+QzY7l0TSR/
isIFHX2o+g7K0LME8VKntodYYuNmjXZ5WT+uQY7IwGMmLlnayyWz/BsrMWdVSAQf
Ro4xWj3Cd/LI7TCnEvBw+VY6R4o3e7XO4eZhYmDq3006DsdEwfEoLvr3tfHFwZqD
0zq4dpwuNBPrNTSAFXIJuTcGev7pz6M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:43 2025 by rpki-client