Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/854f8298-32f1-3ea4-910e-0bed477faff2.roa
File: 854f8298-32f1-3ea4-910e-0bed477faff2.roa (raw, json)
Hash identifier: FiejdF3BRj7wL37cjCUrVdSqvcqw9maE2xiIB5q+7Ro=
Subject key identifier: A3:27:99:44:75:C6:43:1C:E9:E9:B0:B1:EB:72:19:9A:ED:9F:F8:D0
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F43285847FF4A7D7BB0198038555F3800
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/854f8298-32f1-3ea4-910e-0bed477faff2.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 21928
IP address blocks: 66.94.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7d:7b:b0:19:80:38:55:5f:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=c14e86b1-3827-47c3-aa32-22068681332e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:c1:6c:b9:84:45:9b:24:2d:58:64:ac:3d:
52:7f:11:94:27:85:0c:96:5f:b3:02:d7:4e:a1:63:
c0:97:ea:0e:4e:6c:07:61:6a:95:50:f5:2c:fe:82:
24:7d:45:2e:7d:bf:d3:12:b6:83:4f:03:f2:3d:2f:
6f:01:50:ac:41:aa:9c:e8:40:2c:0f:6a:e3:28:57:
75:2f:4b:33:1d:57:56:cc:b8:19:f1:aa:07:dd:2c:
4f:88:bf:bf:eb:42:79:45:49:f8:77:be:b4:22:e4:
4f:4a:81:34:8f:e1:a1:bd:30:38:88:f4:14:78:b1:
6b:11:66:de:e4:ad:0c:dc:e2:79:f4:cf:19:03:f8:
0f:fe:ea:9c:7d:46:73:73:5c:6f:c0:f7:f1:1c:f5:
1b:69:d9:b4:da:b8:2b:35:a5:56:b1:4b:8b:e9:a8:
0f:ca:13:d5:ad:ed:1f:d0:7a:9f:be:f4:17:10:92:
4e:31:96:88:84:a7:90:50:a8:a8:55:a1:a5:a3:1e:
31:0c:a8:8d:f3:e5:47:d5:96:66:60:20:7d:b6:97:
0f:6a:27:d5:41:67:5a:93:61:0e:40:11:ef:ee:85:
36:11:9e:34:7f:cc:1a:08:4d:b4:b0:be:98:1f:16:
04:30:2d:2e:75:84:fa:45:65:72:34:a8:23:22:29:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:27:99:44:75:C6:43:1C:E9:E9:B0:B1:EB:72:19:9A:ED:9F:F8:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/854f8298-32f1-3ea4-910e-0bed477faff2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.94.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:93:c7:66:4f:3b:2c:d5:b8:db:f3:4c:e1:d3:93:59:e0:43:
be:0c:3c:27:8c:8d:50:21:d9:38:91:a8:b2:61:01:aa:da:4f:
c6:2c:0f:e7:b2:0d:13:c9:74:35:63:d0:5c:da:84:81:39:4a:
39:91:b9:34:ba:dc:a6:7f:fc:7a:31:78:2a:b8:7d:0f:53:67:
ae:fb:9b:f6:c2:c8:b6:db:97:a8:1b:3d:15:53:61:29:ff:c3:
82:04:b4:7c:3d:68:24:86:03:b7:e7:76:21:6f:c3:06:59:7f:
c6:98:9d:c9:e6:6b:d6:77:f9:a2:6f:0f:bf:e9:8c:b0:a3:94:
26:a4:c0:26:af:cb:21:94:af:19:b6:2b:43:15:1e:a0:dc:84:
56:be:9a:bd:e8:d4:4d:43:42:03:d0:05:c7:9d:bf:5f:93:51:
26:fc:fb:65:6c:6e:ba:12:1f:4e:ee:49:48:ab:99:de:5f:2f:
e0:f8:96:ed:17:03:0b:eb:22:45:f8:35:6d:e6:dd:5a:78:10:
f4:55:02:78:74:9f:ff:08:1b:5e:c3:1b:d4:08:21:29:a9:43:
cd:9e:3d:18:20:13:d0:1f:ed:f6:13:27:9e:3d:78:3c:9a:e6:
4d:6e:06:28:60:83:22:ee:d5:fa:57:47:b8:be:99:bf:8a:1b:
79:52:1c:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/Sn17sBmAOFVfOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
YzE0ZTg2YjEtMzgyNy00N2MzLWFhMzItMjIwNjg2ODEzMzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYTBbLmERZskLVhkrD1SfxGUJ4UMll+zAtdO
oWPAl+oOTmwHYWqVUPUs/oIkfUUufb/TEraDTwPyPS9vAVCsQaqc6EAsD2rjKFd1
L0szHVdWzLgZ8aoH3SxPiL+/60J5RUn4d760IuRPSoE0j+GhvTA4iPQUeLFrEWbe
5K0M3OJ59M8ZA/gP/uqcfUZzc1xvwPfxHPUbadm02rgrNaVWsUuL6agPyhPVre0f
0HqfvvQXEJJOMZaIhKeQUKioVaGlox4xDKiN8+VH1ZZmYCB9tpcPaifVQWdak2EO
QBHv7oU2EZ40f8waCE20sL6YHxYEMC0udYT6RWVyNKgjIin6awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMnmUR1xkMc6emwsetyGZrtn/jQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvODU0ZjgyOTgtMzJmMS0z
ZWE0LTkxMGUtMGJlZDQ3N2ZhZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQl4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAuTx2ZPOyzVuNvzTOHTk1ngQ74MPCeMjVAh2TiRqLJhAaraT8YsD+ey
DRPJdDVj0FzahIE5SjmRuTS63KZ//HoxeCq4fQ9TZ677m/bCyLbbl6gbPRVTYSn/
w4IEtHw9aCSGA7fndiFvwwZZf8aYncnma9Z3+aJvD7/pjLCjlCakwCavyyGUrxm2
K0MVHqDchFa+mr3o1E1DQgPQBcedv1+TUSb8+2VsbroSH07uSUirmd5fL+D4lu0X
AwvrIkX4NW3m3Vp4EPRVAnh0n/8IG17DG9QIISmpQ82ePRggE9Af7fYTJ549eDya
5k1uBihggyLu1fpXR7i+mb+KG3lSHDw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:51 2025 by rpki-client