Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ab48a1d-f82a-32f3-9dc6-d58a1f53c010.roa
File: 6ab48a1d-f82a-32f3-9dc6-d58a1f53c010.roa (raw, json)
Hash identifier: vIflBNtMk9tJO2IUV1V2119POrd8EJq2Z1n/7dn5jCs=
Subject key identifier: 7C:27:AC:07:9C:EC:F4:D0:DE:5D:23:9A:0C:25:47:25:FF:4E:F5:10
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B2D819CDA778F72C93E06140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ab48a1d-f82a-32f3-9dc6-d58a1f53c010.roa
Signing time: Tue 28 Jan 2025 21:36:11 +0000
ROA not before: Tue 28 Jan 2025 21:36:11 +0000
ROA not after: Mon 28 Apr 2025 20:36:11 +0000
asID: 11798
IP address blocks: 108.165.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:d8:19:cd:a7:78:f7:2c:93:e0:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 21:36:11 2025 GMT
Not After : Apr 28 20:36:11 2025 GMT
Subject: CN=f0c84aaf-33e4-4ab3-9bfa-a8db4eb49c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:4a:25:50:e9:51:ca:c0:03:ec:a7:3a:97:
a6:31:86:a6:d2:82:30:2b:92:fd:3a:f3:b9:99:b1:
f5:1d:2f:1a:89:7d:d7:aa:47:5b:b4:2c:fc:a2:60:
bd:16:b8:fd:f2:ae:bd:0e:14:5e:55:16:bf:73:0f:
60:ce:c1:23:70:6c:2a:89:c7:ad:8d:b5:8c:ab:97:
d1:77:6b:8d:5b:e5:b1:a4:75:d0:05:ce:04:c8:9d:
9e:69:68:d2:7b:88:be:09:3b:c6:c4:b2:8f:9e:70:
d3:5a:75:8e:48:1f:22:5d:18:4d:75:05:10:62:71:
44:0c:28:9d:f0:45:be:7f:84:29:94:03:38:4d:d1:
51:c4:59:a9:97:f8:67:d7:22:55:17:08:72:c6:2b:
01:0b:51:de:f4:b3:ab:52:f5:20:63:0a:97:a8:e5:
96:24:a6:61:25:55:1c:71:51:11:d2:09:fd:4a:67:
16:5a:30:a3:31:94:9e:23:29:b2:38:a7:70:51:c8:
d5:eb:d4:b2:69:81:de:c8:6f:5f:16:58:d2:22:2a:
d3:9f:fb:2b:22:33:a7:84:d5:6d:97:7e:6b:6d:78:
c1:84:12:2e:9e:f8:48:31:93:62:92:21:92:21:5a:
6c:7d:22:cb:ce:6b:ed:ec:66:59:56:94:08:0b:3e:
bd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:27:AC:07:9C:EC:F4:D0:DE:5D:23:9A:0C:25:47:25:FF:4E:F5:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ab48a1d-f82a-32f3-9dc6-d58a1f53c010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:c7:75:5b:24:0a:3c:73:e2:ee:df:4e:b0:90:de:4d:59:ca:
9a:93:55:a7:45:c0:62:42:4b:1b:e4:31:ef:db:4e:10:65:91:
1a:0f:10:50:0c:04:58:0a:79:b4:a4:c3:58:b0:70:cd:19:a8:
e4:c7:bb:aa:c5:3e:4c:a8:9a:59:58:60:70:5e:9a:60:e6:e1:
c2:87:a4:f5:ac:27:4a:b1:26:e7:de:77:dc:f1:79:08:70:0c:
bc:e2:5a:c5:48:2f:9e:1a:6f:ac:77:6c:b4:76:ad:41:de:a1:
4c:fb:82:34:c8:97:c4:17:92:2a:33:1b:54:71:08:68:55:e7:
89:db:74:14:96:12:35:66:21:54:54:be:be:61:8e:7e:3e:78:
fe:ec:56:62:e4:40:13:3b:39:c3:96:72:16:86:be:a9:4d:13:
2a:f6:19:ef:08:5d:59:60:ac:80:b0:bb:5b:ca:25:0c:fc:e8:
ee:e6:84:d5:d4:67:ed:43:15:c1:5d:94:e8:ce:03:52:b2:11:
f6:85:6c:3d:67:03:b7:34:42:f6:5e:52:a9:d9:83:e5:25:57:
39:03:2b:c0:0c:80:cc:ed:16:9b:5c:9c:55:98:71:db:8e:59:
b6:c4:49:36:04:49:0c:50:56:2a:31:45:50:45:69:e6:f9:fd:
5d:0b:5e:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiy2BnNp3j3LJPgYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyODIxMzYxMVoXDTI1MDQyODIwMzYxMVowLzEtMCsGA1UEAxMk
ZjBjODRhYWYtMzNlNC00YWIzLTliZmEtYThkYjRlYjQ5YzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnydKJVDpUcrAA+ynOpemMYam0oIwK5L9OvO5
mbH1HS8aiX3XqkdbtCz8omC9Frj98q69DhReVRa/cw9gzsEjcGwqicetjbWMq5fR
d2uNW+WxpHXQBc4EyJ2eaWjSe4i+CTvGxLKPnnDTWnWOSB8iXRhNdQUQYnFEDCid
8EW+f4QplAM4TdFRxFmpl/hn1yJVFwhyxisBC1He9LOrUvUgYwqXqOWWJKZhJVUc
cVER0gn9SmcWWjCjMZSeIymyOKdwUcjV69SyaYHeyG9fFljSIirTn/srIjOnhNVt
l35rbXjBhBIunvhIMZNikiGSIVpsfSLLzmvt7GZZVpQICz69dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwnrAec7PTQ3l0jmgwlRyX/TvUQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmFiNDhhMWQtZjgyYS0z
MmYzLTlkYzYtZDU4YTFmNTNjMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3HdVskCjxz4u7fTrCQ3k1ZypqTVadFwGJCSxvkMe/bThBlkRoPEFAM
BFgKebSkw1iwcM0ZqOTHu6rFPkyomllYYHBemmDm4cKHpPWsJ0qxJufed9zxeQhw
DLziWsVIL54ab6x3bLR2rUHeoUz7gjTIl8QXkiozG1RxCGhV54nbdBSWEjVmIVRU
vr5hjn4+eP7sVmLkQBM7OcOWchaGvqlNEyr2Ge8IXVlgrICwu1vKJQz86O7mhNXU
Z+1DFcFdlOjOA1KyEfaFbD1nA7c0QvZeUqnZg+UlVzkDK8AMgMztFptcnFWYcduO
WbbESTYESQxQVioxRVBFaeb5/V0LXsc=
-----END CERTIFICATE-----
Generated at Mon May 12 14:07:05 2025 by rpki-client