Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
File: f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa (raw, json)
Hash identifier: eXHvZ4v5CSTieawPXTL4IJtYQ/r/QAAiFygsZM8SFW8=
Subject key identifier: 85:AF:99:C4:7B:E0:0D:22:C4:BF:F2:05:00:24:71:2A:11:AA:3F:01
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848116FF92C3E88DC082030E200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 58061
IP address blocks: 166.1.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f9:2c:3e:88:dc:08:20:30:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=176c4312-dc34-4f15-a752-1eda5dfa6b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:eb:48:cc:e2:72:c2:cd:4f:86:39:75:58:
78:34:38:87:eb:70:8f:e8:63:0b:4d:f5:5c:f9:f3:
f6:c1:64:dd:6f:c9:82:c0:2b:9e:85:54:db:86:76:
c5:c4:98:6b:08:ea:ab:6c:1a:11:0d:5a:32:15:23:
a5:1f:5b:40:a8:31:4c:6d:b1:48:5a:66:8f:b6:43:
db:fb:ee:91:f7:4f:84:59:50:32:ac:f3:63:99:9e:
3d:26:94:ee:b8:b6:be:e4:fa:70:a1:8c:4f:91:e2:
01:81:d0:e4:81:dc:54:cc:66:d6:23:9b:f3:a6:85:
c6:42:15:81:ab:0b:ad:dd:e1:08:22:32:e7:5e:b0:
0f:07:21:5d:26:29:c9:fe:f2:84:76:84:e3:57:ec:
55:fe:f0:e4:7e:91:0d:17:bf:56:2b:4c:52:8a:ef:
4d:1d:c8:a8:77:4e:03:e7:73:68:d3:9a:08:b3:6b:
e9:9f:85:d8:9f:18:d7:71:48:5e:12:32:d5:48:46:
9b:b3:07:b6:0c:b2:7d:83:77:3f:39:21:8f:42:bb:
c4:af:96:8b:19:4b:ff:67:8f:97:4b:43:6d:76:e2:
f3:14:51:79:cd:e7:ff:08:6c:ba:87:27:6d:df:87:
d2:ab:57:07:e8:93:1c:33:42:13:62:2c:d9:f6:d1:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AF:99:C4:7B:E0:0D:22:C4:BF:F2:05:00:24:71:2A:11:AA:3F:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:6a:d9:8e:dc:77:25:68:d1:c3:f7:95:c4:f1:96:9f:16:3c:
ac:09:ff:e9:a4:e4:97:7a:36:21:69:87:6c:1d:eb:d4:7e:be:
8a:4f:85:1e:46:a0:88:b0:43:54:d3:e8:3d:2f:f3:ef:d5:28:
4f:a1:9a:34:89:1d:dc:da:ab:95:0c:82:ce:9f:39:fd:b5:45:
fd:af:e6:ae:3f:8c:e5:2e:13:7c:39:2c:51:74:7c:d3:d2:3c:
0d:ae:82:50:bc:ea:20:58:93:19:f3:a4:7f:bb:97:67:3e:f5:
24:18:06:ae:94:ec:61:fc:c4:4e:db:7a:a8:46:82:9e:e6:4b:
06:4d:c8:24:eb:98:7d:6b:78:0a:0b:0e:df:a8:c3:b3:c5:56:
a3:7b:c6:b9:0a:76:42:8a:7b:de:d9:3d:45:3d:35:c9:65:b7:
65:91:58:de:27:57:91:ab:f8:92:0b:4c:c2:c5:1d:20:6c:6d:
51:f4:03:ec:1e:c2:d6:da:6a:14:50:57:5b:37:ae:04:95:3d:
05:40:e4:56:7e:06:2c:1d:e3:d0:c1:81:d3:da:a5:41:6d:0c:
5e:17:28:8f:2e:e3:9e:c5:08:aa:c5:ac:6f:3a:bf:70:ea:64:
84:17:0c:e0:fd:4e:53:ac:ab:61:c8:ef:44:24:6b:d5:02:af:
12:04:85:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb/ksPojcCCAw4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
MTc2YzQzMTItZGMzNC00ZjE1LWE3NTItMWVkYTVkZmE2Yjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RXrSMzicsLNT4Y5dVh4NDiH63CP6GMLTfVc
+fP2wWTdb8mCwCuehVTbhnbFxJhrCOqrbBoRDVoyFSOlH1tAqDFMbbFIWmaPtkPb
++6R90+EWVAyrPNjmZ49JpTuuLa+5PpwoYxPkeIBgdDkgdxUzGbWI5vzpoXGQhWB
qwut3eEIIjLnXrAPByFdJinJ/vKEdoTjV+xV/vDkfpENF79WK0xSiu9NHciod04D
53No05oIs2vpn4XYnxjXcUheEjLVSEabswe2DLJ9g3c/OSGPQrvEr5aLGUv/Z4+X
S0NtduLzFFF5zef/CGy6hydt34fSq1cH6JMcM0ITYizZ9tEx/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWvmcR74A0ixL/yBQAkcSoRqj8BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjA3ZWVhNTktMjkwOC0z
MGNkLTgxYjQtNWMxYzBmZDkzNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJpq2Y7cdyVo0cP3lcTxlp8WPKwJ/+mk5Jd6NiFph2wd69R+vopPhR5G
oIiwQ1TT6D0v8+/VKE+hmjSJHdzaq5UMgs6fOf21Rf2v5q4/jOUuE3w5LFF0fNPS
PA2uglC86iBYkxnzpH+7l2c+9SQYBq6U7GH8xE7beqhGgp7mSwZNyCTrmH1reAoL
Dt+ow7PFVqN7xrkKdkKKe97ZPUU9Ncllt2WRWN4nV5Gr+JILTMLFHSBsbVH0A+we
wtbaahRQV1s3rgSVPQVA5FZ+Biwd49DBgdPapUFtDF4XKI8u457FCKrFrG86v3Dq
ZIQXDOD9TlOsq2HI70Qka9UCrxIEhaQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:48:58 2025 by rpki-client