Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6d5a4e0-7a33-30bf-bcde-355639b7a799.roa
File: f6d5a4e0-7a33-30bf-bcde-355639b7a799.roa (raw, json)
Hash identifier: KSL2p9n+zj1h5IJpPcBRjeQFmZQUMMMLXCHWTD2NEew=
Subject key identifier: C8:0E:23:ED:7D:74:F6:3A:6E:B7:D9:80:D9:17:5F:AA:85:F9:4F:7F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B35B667B0312891D5A90B800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6d5a4e0-7a33-30bf-bcde-355639b7a799.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 212238
IP address blocks: 166.1.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:66:7b:03:12:89:1d:5a:90:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=33604057-9254-405d-b2e3-e188bee8337f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:92:66:25:30:37:b3:a8:c0:06:f2:fc:49:
12:5b:2e:3f:94:cf:08:ae:77:fa:69:50:68:6b:c7:
77:b5:2d:d0:ce:91:9e:16:25:f1:29:cf:a3:00:63:
5c:91:94:e0:19:58:23:1e:ba:1d:ac:dc:c4:28:55:
f4:18:21:aa:e7:79:9c:71:06:a5:46:42:74:fe:63:
f4:0c:16:62:bc:ee:9f:b1:f9:ef:b1:ec:ae:25:f3:
ce:94:ec:2a:6e:b5:72:14:77:a1:02:5e:d7:61:01:
8b:8d:88:37:71:d3:69:bf:72:6a:30:d8:e6:f2:1a:
d7:ab:23:91:5e:c0:0d:d6:bb:0b:64:ad:15:67:0d:
f6:7b:08:ce:1f:a1:37:ad:c3:95:ec:df:ef:41:db:
b4:99:3e:ff:2f:5a:b8:d4:a7:ac:ec:50:5d:de:4e:
f0:ae:e2:12:45:f4:bb:de:31:49:de:37:65:42:51:
d9:3d:dc:b5:06:cb:e2:80:cc:66:e4:43:14:b2:d5:
fb:4f:51:20:9d:b5:b4:63:d4:27:03:60:42:c5:53:
95:21:00:54:ac:f6:ae:49:82:75:f9:9f:1a:f2:65:
e9:b4:d4:b9:9f:af:8a:39:34:d5:36:f0:90:6e:05:
ac:00:09:f9:1e:83:64:d6:ed:6f:c2:61:a0:c8:81:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0E:23:ED:7D:74:F6:3A:6E:B7:D9:80:D9:17:5F:AA:85:F9:4F:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6d5a4e0-7a33-30bf-bcde-355639b7a799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:67:2b:24:fe:85:f1:4a:d1:d0:7f:bb:d2:67:ec:bf:be:16:
84:ad:f7:d7:da:be:e3:ed:a4:9c:36:3c:b3:75:4c:f5:88:b5:
5f:2a:c4:72:b3:03:06:a9:3d:5e:70:2e:53:22:24:45:b5:e5:
a2:b8:9c:84:c1:52:23:bf:14:70:e0:95:b5:44:03:8f:14:1a:
93:fc:4b:b3:c2:c2:e3:03:a3:d7:7e:3c:5c:27:a3:08:c1:85:
44:32:a4:0c:72:90:80:26:b5:00:07:4f:0a:a3:cd:22:43:44:
34:a1:e8:7c:4f:3b:52:c8:85:3d:b9:94:f3:d5:14:32:f3:11:
a6:8d:d8:26:05:65:94:ed:be:4f:f6:08:16:c5:3f:82:77:e7:
7d:fd:05:e1:32:a6:94:ca:55:e4:95:48:e8:49:9a:f0:b2:68:
f7:85:6c:9e:df:b6:51:0c:d0:08:cc:58:af:01:9e:a5:cf:0b:
00:a2:77:de:6b:92:bd:ea:65:b2:29:49:b7:cc:ee:49:a3:07:
52:71:06:c9:b4:64:44:80:83:ce:df:49:37:62:44:d0:0e:72:
55:86:78:af:b5:d7:92:f5:77:44:80:d5:6f:5e:93:e5:2c:ba:
c6:a7:20:5c:ee:7c:48:3b:7a:d9:2e:b2:bf:55:f4:d0:3d:de:
f0:26:88:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2Z7AxKJHVqQuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
MzM2MDQwNTctOTI1NC00MDVkLWIyZTMtZTE4OGJlZTgzMzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxGSZiUwN7OowAby/EkSWy4/lM8Irnf6aVBo
a8d3tS3QzpGeFiXxKc+jAGNckZTgGVgjHrodrNzEKFX0GCGq53mccQalRkJ0/mP0
DBZivO6fsfnvseyuJfPOlOwqbrVyFHehAl7XYQGLjYg3cdNpv3JqMNjm8hrXqyOR
XsAN1rsLZK0VZw32ewjOH6E3rcOV7N/vQdu0mT7/L1q41Kes7FBd3k7wruISRfS7
3jFJ3jdlQlHZPdy1BsvigMxm5EMUstX7T1EgnbW0Y9QnA2BCxVOVIQBUrPauSYJ1
+Z8a8mXptNS5n6+KOTTVNvCQbgWsAAn5HoNk1u1vwmGgyIFkLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMgOI+19dPY6brfZgNkXX6qF+U9/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjZkNWE0ZTAtN2EzMy0z
MGJmLWJjZGUtMzU1NjM5YjdhNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpgEIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRnKyT+hfFK0dB/u9Jn7L++FoSt99favuPtpJw2PLN1TPWItV8qxHKz
AwapPV5wLlMiJEW15aK4nITBUiO/FHDglbVEA48UGpP8S7PCwuMDo9d+PFwnowjB
hUQypAxykIAmtQAHTwqjzSJDRDSh6HxPO1LIhT25lPPVFDLzEaaN2CYFZZTtvk/2
CBbFP4J35339BeEyppTKVeSVSOhJmvCyaPeFbJ7ftlEM0AjMWK8BnqXPCwCid95r
kr3qZbIpSbfM7kmjB1JxBsm0ZESAg87fSTdiRNAOclWGeK+115L1d0SA1W9ek+Us
usanIFzufEg7etkusr9V9NA93vAmiKg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:26:28 2025 by rpki-client