Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f33871ce-64ca-33ec-9576-2176a24bacd7.roa
File: f33871ce-64ca-33ec-9576-2176a24bacd7.roa (raw, json)
Hash identifier: RczeRPC7T88d1b0RkYNjWrWuK+Cga6E3UBml3bWfERI=
Subject key identifier: 53:47:C5:25:BF:9E:DF:CA:71:C6:F2:2B:BF:D8:6F:20:A1:58:26:BC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584858A0545CE4DF238F5348CAC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f33871ce-64ca-33ec-9576-2176a24bacd7.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 6939
IP address blocks: 166.0.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:54:5c:e4:df:23:8f:53:48:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=a53c8b81-f47b-43ca-b564-7c554c6f4a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:dd:fb:65:85:a6:d7:28:cf:4f:ec:c5:93:
40:60:e9:cc:91:e1:0c:27:2b:f5:40:ff:72:d7:76:
2b:1c:da:72:44:13:65:97:ea:c4:74:59:a6:3e:40:
58:04:ca:e4:09:f9:17:52:c1:27:40:05:9c:49:7b:
31:3f:71:68:24:35:ff:9f:4a:e7:e9:de:cc:3f:a6:
e9:98:9a:81:6c:5f:a8:8a:ea:6e:ae:6c:0b:23:4b:
55:48:37:0b:31:94:0f:35:eb:80:7a:28:96:70:6a:
b3:d4:68:da:03:94:fc:43:eb:9c:c3:e7:f1:10:ab:
ef:ea:f5:2e:8d:22:2d:ea:97:39:8e:f1:c0:e1:1b:
04:fd:02:9a:ff:c7:64:a4:74:fa:55:ba:d4:ca:3c:
de:b6:7a:8e:c4:00:ca:c1:a2:9c:75:09:b3:6e:02:
0d:19:6c:17:1e:8d:12:80:c8:db:40:99:6b:41:7e:
67:41:f0:f3:b8:df:07:30:b3:7a:43:6f:a6:a4:be:
a1:5d:0f:d7:97:b6:d7:67:11:69:23:d3:c1:cc:50:
24:84:1f:70:1b:13:2e:89:50:ac:e5:f2:7e:be:63:
75:dc:b3:fb:26:64:f2:ce:4b:dd:09:0f:d5:52:54:
a4:94:3d:b5:7a:64:f4:6e:47:e7:a8:22:f5:aa:66:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:47:C5:25:BF:9E:DF:CA:71:C6:F2:2B:BF:D8:6F:20:A1:58:26:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f33871ce-64ca-33ec-9576-2176a24bacd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:4f:ad:6e:7e:da:ea:27:c5:e2:02:86:fc:48:23:f9:3d:a2:
8f:e6:b0:b0:1a:ef:10:40:03:dd:99:75:7e:17:e7:73:41:54:
14:57:08:66:5e:1b:f1:2b:66:88:2e:a1:e8:be:0a:e1:a3:9c:
41:74:e5:17:25:23:d7:d4:fc:1e:21:7e:2a:9b:e6:08:e0:4e:
e7:89:60:9e:33:89:df:c6:32:76:0d:8f:f9:b8:3b:e9:4a:59:
4a:4d:1c:38:07:b5:5b:4f:55:91:5f:15:15:94:e5:e8:70:31:
9e:1b:38:56:0f:19:51:58:ca:da:35:23:0e:71:bf:1d:ba:af:
e1:91:46:41:53:88:43:aa:0a:3c:7e:15:81:ea:2d:77:b5:6d:
8d:e9:23:d6:db:04:a9:3a:af:bc:34:b5:90:c4:da:01:da:54:
df:3b:e9:34:ef:be:e1:83:b9:d4:43:14:99:42:86:f7:0b:de:
45:16:dc:e8:15:f3:46:2a:83:3c:c7:bf:ff:b1:50:15:32:9e:
67:fb:fd:5c:dc:fd:be:65:0c:1e:b6:3c:a6:1c:b0:fe:1f:b1:
22:58:bb:fc:b4:fe:bb:f6:af:76:6a:fc:67:f6:b8:e4:be:d1:
9c:0e:b4:8a:b8:f7:3b:e3:87:41:d8:74:72:f5:62:cc:7c:1e:
15:88:4d:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFRc5N8jj1NIysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
YTUzYzhiODEtZjQ3Yi00M2NhLWI1NjQtN2M1NTRjNmY0YTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6zd+2WFptcoz0/sxZNAYOnMkeEMJyv1QP9y
13YrHNpyRBNll+rEdFmmPkBYBMrkCfkXUsEnQAWcSXsxP3FoJDX/n0rn6d7MP6bp
mJqBbF+oiupurmwLI0tVSDcLMZQPNeuAeiiWcGqz1GjaA5T8Q+ucw+fxEKvv6vUu
jSIt6pc5jvHA4RsE/QKa/8dkpHT6VbrUyjzetnqOxADKwaKcdQmzbgINGWwXHo0S
gMjbQJlrQX5nQfDzuN8HMLN6Q2+mpL6hXQ/Xl7bXZxFpI9PBzFAkhB9wGxMuiVCs
5fJ+vmN13LP7JmTyzkvdCQ/VUlSklD21emT0bkfnqCL1qmY9awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNHxSW/nt/KccbyK7/YbyChWCa8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjMzODcxY2UtNjRjYS0z
M2VjLTk1NzYtMjE3NmEyNGJhY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpgC+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNPrW5+2uonxeIChvxII/k9oo/msLAa7xBAA92ZdX4X53NBVBRXCGZe
G/ErZoguoei+CuGjnEF05RclI9fU/B4hfiqb5gjgTueJYJ4zid/GMnYNj/m4O+lK
WUpNHDgHtVtPVZFfFRWU5ehwMZ4bOFYPGVFYyto1Iw5xvx26r+GRRkFTiEOqCjx+
FYHqLXe1bY3pI9bbBKk6r7w0tZDE2gHaVN876TTvvuGDudRDFJlChvcL3kUW3OgV
80YqgzzHv/+xUBUynmf7/Vzc/b5lDB62PKYcsP4fsSJYu/y0/rv2r3Zq/Gf2uOS+
0ZwOtIq49zvjh0HYdHL1Ysx8HhWITTM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:53 2025 by rpki-client