Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5ea516ff-1921-3378-b1e8-92f8c7ebec13.roa
File: 5ea516ff-1921-3378-b1e8-92f8c7ebec13.roa (raw, json)
Hash identifier: CQdpYpAdvg4mgQUJi7XcuMK8WbEWKm0TExvKkcUYYLw=
Subject key identifier: 74:92:0A:F7:78:79:D4:E5:E1:3B:A4:3C:A2:A5:75:2B:FD:6D:AE:AC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858481F653AE7F03E1E49CE49AAC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5ea516ff-1921-3378-b1e8-92f8c7ebec13.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 396982
IP address blocks: 108.165.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:3a:e7:f0:3e:1e:49:ce:49:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=a0365cd4-6e66-4056-b2e4-aef2ccfd5ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:df:b2:75:d6:26:db:02:16:c4:55:b3:68:0c:
f2:a7:38:df:87:c1:9a:2a:76:1d:01:9f:59:7b:86:
15:b1:cb:b6:0d:32:23:43:17:d2:5b:5d:70:a2:02:
fb:5e:0d:e6:12:a6:1f:f2:65:db:77:d0:6b:f0:18:
ae:ea:fd:52:cc:17:e4:af:c7:27:3d:8a:95:57:d1:
a7:db:53:7a:10:d0:c3:67:9b:d0:2e:ef:7e:6d:c9:
11:b9:94:c6:6e:d3:fd:15:a9:b0:24:67:7d:61:91:
40:f0:bd:45:bd:80:3b:70:8d:18:07:56:11:19:ec:
43:f1:e6:7a:c0:cc:f2:4e:95:c5:4c:8b:03:3a:f6:
7f:a7:00:b4:43:f6:86:28:f4:b0:33:1c:ab:ed:8d:
17:49:c6:ed:bd:bc:57:a7:f9:87:dc:db:2c:bd:40:
99:52:09:a2:ce:6f:d5:95:6a:e0:f7:c2:d1:bc:0f:
da:9c:71:a3:ab:c5:18:05:19:0f:fc:bc:7e:a9:4f:
09:c1:01:5c:b4:ef:5d:e5:3f:6a:6a:d9:36:90:5d:
25:12:67:66:03:75:e5:ab:37:3c:c6:92:85:a6:8c:
4c:d1:df:64:bb:ca:83:63:b6:19:b5:04:8d:00:f9:
8f:78:a9:3b:ea:2c:3b:9e:96:e7:00:43:12:b2:18:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:92:0A:F7:78:79:D4:E5:E1:3B:A4:3C:A2:A5:75:2B:FD:6D:AE:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5ea516ff-1921-3378-b1e8-92f8c7ebec13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:39:31:e3:a4:fa:be:38:e3:9e:b9:12:07:8b:b3:99:11:18:
a9:3a:5d:82:95:f6:d6:e3:40:fb:12:72:52:1a:07:c3:aa:a4:
35:4b:26:15:36:01:ba:f5:50:9a:41:6b:e6:36:c5:3e:9a:ea:
d5:d1:b9:5a:36:19:e3:2e:0c:de:db:78:10:8c:2b:a0:d1:58:
e7:70:2f:ec:15:84:f0:dd:c3:1d:9f:ef:16:b5:c9:bc:6a:07:
88:bb:77:9f:7f:99:06:43:61:39:14:5e:fd:8b:49:10:e4:f9:
a4:fe:ff:2c:67:30:b6:3f:15:8b:bf:81:5f:37:44:54:eb:01:
72:c6:cb:3b:10:16:83:1d:8a:19:d7:42:c0:80:1a:0f:94:91:
05:d5:ed:2e:ea:e1:fa:23:09:63:e9:46:c1:96:f4:44:76:78:
17:15:3c:ed:1f:79:58:b6:f7:17:b0:fc:a9:ae:9f:2b:3d:97:
66:c5:c8:8d:a5:b4:5a:f0:f1:5c:9d:d2:6a:1c:52:cb:36:49:
fa:cf:55:13:a7:60:1e:67:ec:89:15:f5:c3:1b:63:a8:11:52:
da:6d:1b:13:e2:95:3a:7e:f4:d5:12:ab:de:57:2c:c4:2c:40:
2c:b6:90:48:01:29:ca:f3:53:ed:9b:50:b4:29:73:9b:d9:f8:
14:51:f6:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTrn8D4eSc5JqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
YTAzNjVjZDQtNmU2Ni00MDU2LWIyZTQtYWVmMmNjZmQ1ZmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd+yddYm2wIWxFWzaAzypzjfh8GaKnYdAZ9Z
e4YVscu2DTIjQxfSW11wogL7Xg3mEqYf8mXbd9Br8Biu6v1SzBfkr8cnPYqVV9Gn
21N6ENDDZ5vQLu9+bckRuZTGbtP9FamwJGd9YZFA8L1FvYA7cI0YB1YRGexD8eZ6
wMzyTpXFTIsDOvZ/pwC0Q/aGKPSwMxyr7Y0XScbtvbxXp/mH3NssvUCZUgmizm/V
lWrg98LRvA/anHGjq8UYBRkP/Lx+qU8JwQFctO9d5T9qatk2kF0lEmdmA3Xlqzc8
xpKFpoxM0d9ku8qDY7YZtQSNAPmPeKk76iw7npbnAEMSshjAnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSSCvd4edTl4TukPKKldSv9ba6sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWVhNTE2ZmYtMTkyMS0z
Mzc4LWIxZTgtOTJmOGM3ZWJlYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAII5MeOk+r444565EgeLs5kRGKk6XYKV9tbjQPsSclIaB8OqpDVLJhU2
Abr1UJpBa+Y2xT6a6tXRuVo2GeMuDN7beBCMK6DRWOdwL+wVhPDdwx2f7xa1ybxq
B4i7d59/mQZDYTkUXv2LSRDk+aT+/yxnMLY/FYu/gV83RFTrAXLGyzsQFoMdihnX
QsCAGg+UkQXV7S7q4fojCWPpRsGW9ER2eBcVPO0feVi29xew/Kmunys9l2bFyI2l
tFrw8Vyd0mocUss2SfrPVROnYB5n7IkV9cMbY6gRUtptGxPilTp+9NUSq95XLMQs
QCy2kEgBKcrzU+2bULQpc5vZ+BRR9mQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:31 2025 by rpki-client