Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b485731-1d51-3943-acc4-974602c8c083.roa
File: 7b485731-1d51-3943-acc4-974602c8c083.roa (raw, json)
Hash identifier: IWOYaTNL1L2XpI5hcNZLYxQtiNAU6T4G0vn4DpZA45k=
Subject key identifier: 2A:9E:07:E4:25:E6:A2:1E:50:04:55:6C:B7:E8:63:33:D3:F9:50:3B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489075FDF3A41923347B2EB800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b485731-1d51-3943-acc4-974602c8c083.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 25846
IP address blocks: 108.165.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:fd:f3:a4:19:23:34:7b:2e:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=8e227e49-9993-42c0-a5cb-e6236543db84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:5c:75:b8:70:61:94:f0:c6:43:70:4f:3b:
83:bb:32:ba:13:b5:17:68:43:69:88:33:69:23:a8:
c0:ad:b6:3e:bd:72:4e:06:65:1f:27:d6:b1:a8:d2:
7e:36:de:a3:fe:e3:29:48:ae:25:46:f6:bb:da:5e:
5a:83:c6:d5:c6:11:64:05:83:40:02:68:27:27:3c:
7a:18:cc:47:83:5e:8e:ea:80:af:77:f6:ec:a2:a5:
3a:aa:cd:1c:d1:5a:35:16:4d:82:5c:be:d5:08:8b:
50:a4:66:b9:1a:88:b8:67:c8:35:16:d1:f5:4e:97:
dd:5e:a2:2d:ad:04:14:5b:3c:7e:26:36:ff:ff:41:
8e:d0:72:fd:49:62:37:5b:7a:a8:67:c1:70:3e:35:
c9:be:d1:0d:5c:b7:09:94:4b:28:e0:fb:1e:95:22:
ef:8c:9e:f8:96:fb:f9:4c:4f:26:2c:57:15:9d:18:
d8:cb:a1:c8:16:1a:57:50:68:fe:40:09:e2:71:56:
fd:2a:83:65:15:9d:3d:cc:8d:8e:cb:65:cc:c5:6e:
5e:66:3e:e8:2c:70:0f:90:82:0d:08:97:fb:a3:16:
15:97:3f:2c:33:6c:0b:46:e8:a6:e8:2a:a4:6f:89:
1b:13:47:42:80:37:71:16:64:5f:ec:22:0d:99:a4:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:07:E4:25:E6:A2:1E:50:04:55:6C:B7:E8:63:33:D3:F9:50:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b485731-1d51-3943-acc4-974602c8c083.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:07:5c:7d:c5:fd:e7:2c:08:73:33:1f:07:65:c5:e4:e0:db:
6f:af:78:fd:5b:44:0e:ba:ff:1d:1c:88:5f:c8:ec:c6:df:77:
60:69:59:17:97:8c:8e:59:39:4f:48:86:ef:48:32:a9:19:21:
07:61:aa:2d:f2:29:c4:70:28:4d:83:2a:8f:4b:da:4f:e0:a7:
02:8e:52:ef:f8:fb:58:9e:93:8e:4e:7c:34:09:a8:d3:a0:8d:
9a:ac:99:bc:8b:2e:de:99:13:06:98:49:9f:a0:71:e1:13:db:
29:1f:bb:79:a1:40:b5:56:c7:96:46:0a:5c:e8:a0:d9:84:a5:
87:46:2f:72:b7:58:13:3d:37:90:f9:64:b0:59:af:70:ad:e3:
91:05:f6:75:3f:2c:80:31:9c:07:76:3c:ca:b7:14:9e:91:03:
fd:df:f9:f9:12:cf:5e:b4:53:bd:cb:65:e3:f3:50:33:e5:32:
54:69:21:d8:8a:d3:66:10:6a:65:ae:8b:dc:93:4b:a1:6f:74:
fd:22:9c:2b:2b:4b:0a:4d:ad:32:41:db:f7:a6:bb:40:b7:85:
3a:bf:92:ca:0c:49:b3:19:65:71:5a:ef:e0:f5:16:59:07:b2:
47:26:c2:9a:9a:db:48:e4:e6:a2:c9:ea:eb:0e:58:9d:e0:e7:
bf:b7:73:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdf3zpBkjNHsuuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
OGUyMjdlNDktOTk5My00MmMwLWE1Y2ItZTYyMzY1NDNkYjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA125cdbhwYZTwxkNwTzuDuzK6E7UXaENpiDNp
I6jArbY+vXJOBmUfJ9axqNJ+Nt6j/uMpSK4lRva72l5ag8bVxhFkBYNAAmgnJzx6
GMxHg16O6oCvd/bsoqU6qs0c0Vo1Fk2CXL7VCItQpGa5Goi4Z8g1FtH1TpfdXqIt
rQQUWzx+Jjb//0GO0HL9SWI3W3qoZ8FwPjXJvtENXLcJlEso4PselSLvjJ74lvv5
TE8mLFcVnRjYy6HIFhpXUGj+QAnicVb9KoNlFZ09zI2Oy2XMxW5eZj7oLHAPkIIN
CJf7oxYVlz8sM2wLRuim6Cqkb4kbE0dCgDdxFmRf7CINmaRYSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqeB+Ql5qIeUARVbLfoYzPT+VA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2I0ODU3MzEtMWQ1MS0z
OTQzLWFjYzQtOTc0NjAyYzhjMDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYHXH3F/ecsCHMzHwdlxeTg22+veP1bRA66/x0ciF/I7Mbfd2BpWReX
jI5ZOU9Ihu9IMqkZIQdhqi3yKcRwKE2DKo9L2k/gpwKOUu/4+1iek45OfDQJqNOg
jZqsmbyLLt6ZEwaYSZ+gceET2ykfu3mhQLVWx5ZGClzooNmEpYdGL3K3WBM9N5D5
ZLBZr3Ct45EF9nU/LIAxnAd2PMq3FJ6RA/3f+fkSz160U73LZePzUDPlMlRpIdiK
02YQamWui9yTS6FvdP0inCsrSwpNrTJB2/emu0C3hTq/ksoMSbMZZXFa7+D1FlkH
skcmwpqa20jk5qLJ6usOWJ3g57+3cyY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:26:23 2025 by rpki-client