Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5/d70716a0-55a6-33cd-be3d-1a61e9134540.roa
File: d70716a0-55a6-33cd-be3d-1a61e9134540.roa (raw, json)
Hash identifier: 2DpUrtFlGKBGINafq2nod4BrD+cBoaLbOZrcESPv7fU=
Subject key identifier: 4E:73:32:93:7B:63:0A:70:6E:9F:4C:BD:44:C3:E4:BD:F1:89:53:CC
Certificate issuer: /CN=65045431-d7a2-4974-ba9e-4c2dd967a5a5
Certificate serial: 010D0C9F4328584862659128EA7194D9A351BA00
Authority key identifier: 3F:A1:86:E4:D1:42:45:8A:3C:B5:B2:BB:F0:F2:61:08:98:79:29:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5/d70716a0-55a6-33cd-be3d-1a61e9134540.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 400920
IP address blocks: 66.132.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:91:28:ea:71:94:d9:a3:51:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65045431-d7a2-4974-ba9e-4c2dd967a5a5
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=46e4354d-6182-4051-8c8d-bb09c7ab8d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:5b:69:aa:49:b0:9c:e4:f0:28:f3:c1:55:
ee:ce:91:d0:ef:4a:d9:3f:91:04:c7:d0:0a:03:18:
82:b0:7b:11:ef:45:90:9f:12:21:47:0c:1c:2a:b5:
f1:bb:de:47:a1:b3:9a:ed:dc:ac:e4:7f:df:ed:33:
e7:34:6b:a9:17:62:d6:7d:21:1e:51:9c:5b:d6:bd:
e2:bd:7c:fe:38:82:1d:41:15:37:fb:15:cd:b6:0d:
e5:c3:b3:67:4d:98:f2:f3:b0:70:3e:34:83:41:f0:
b8:2a:f9:8e:f4:27:89:94:df:f9:7f:60:ba:93:38:
7f:a1:c4:bf:a0:b3:2d:45:32:7e:5d:34:d9:24:b4:
31:6e:e4:94:02:4c:f7:4f:dc:94:e1:40:13:8a:a6:
fc:19:cf:ee:46:70:85:85:00:a8:ec:65:74:d5:57:
33:3e:d7:51:da:7f:d6:cb:90:17:09:f3:6c:18:59:
14:3a:3f:30:7b:72:42:df:91:50:f4:93:a3:cc:cd:
b8:04:54:77:87:c5:ed:5b:28:4b:fe:0f:09:cf:02:
5f:0f:eb:90:67:a6:1c:7c:4b:9a:85:fb:68:20:16:
b9:4d:b4:e1:04:0b:94:fa:fc:7a:d7:c0:1f:a5:b4:
45:8b:50:90:67:4b:cb:7d:26:b0:36:6d:24:17:ad:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:73:32:93:7B:63:0A:70:6E:9F:4C:BD:44:C3:E4:BD:F1:89:53:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5/d70716a0-55a6-33cd-be3d-1a61e9134540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5/65045431-d7a2-4974-ba9e-4c2dd967a5a5.crl
X509v3 Authority Key Identifier:
keyid:3F:A1:86:E4:D1:42:45:8A:3C:B5:B2:BB:F0:F2:61:08:98:79:29:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5.cer
sbgp-ipAddrBlock: critical
IPv4:
66.132.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:1f:8c:1f:db:f4:ce:15:8d:58:e3:74:30:75:59:56:20:99:
d9:d9:8b:e3:b5:35:85:c7:e0:64:99:23:e4:64:f6:ae:59:70:
79:ec:a4:d0:fe:ab:9c:a8:00:3a:59:d8:97:ff:13:19:41:9d:
8d:5f:c3:71:d8:1e:08:4f:1f:d0:24:29:43:38:87:ac:c9:44:
48:66:c6:b5:1d:23:bf:52:a3:c9:39:a9:e1:44:7d:ab:cf:df:
9e:70:55:ee:12:ec:bd:1f:c3:75:e9:51:c8:d7:27:60:2e:3e:
77:66:5d:1b:da:00:85:6d:c6:f2:2c:e7:9e:38:95:81:e4:7e:
29:07:a8:c1:4c:68:2f:ec:8a:92:b7:27:d8:11:09:40:f5:07:
94:b1:68:f8:27:87:75:6a:dc:ee:03:b2:f6:0e:a1:f6:f7:0c:
2d:a7:00:2c:81:6f:a8:d3:90:16:e0:a5:45:30:cb:6a:df:53:
ed:7c:de:fe:f0:2c:d6:bc:6b:14:8b:8a:db:63:53:c6:d6:e5:
38:b1:c7:cf:26:f4:7d:2e:98:1b:e7:14:42:1e:f5:c0:ff:69:
ec:a5:2e:bf:36:59:9a:1e:33:5d:b1:96:cc:21:8a:92:50:6e:
a4:f0:b5:d2:5e:d0:e0:de:ad:c5:f3:1d:c3:94:1d:5c:6e:d5:
17:ed:60:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhiZZEo6nGU2aNRugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUwNDU0MzEtZDdhMi00OTc0LWJhOWUtNGMyZGQ5Njdh
NWE1MB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk
NDZlNDM1NGQtNjE4Mi00MDUxLThjOGQtYmIwOWM3YWI4ZDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixpbaapJsJzk8CjzwVXuzpHQ70rZP5EEx9AK
AxiCsHsR70WQnxIhRwwcKrXxu95HobOa7dys5H/f7TPnNGupF2LWfSEeUZxb1r3i
vXz+OIIdQRU3+xXNtg3lw7NnTZjy87BwPjSDQfC4KvmO9CeJlN/5f2C6kzh/ocS/
oLMtRTJ+XTTZJLQxbuSUAkz3T9yU4UATiqb8Gc/uRnCFhQCo7GV01VczPtdR2n/W
y5AXCfNsGFkUOj8we3JC35FQ9JOjzM24BFR3h8XtWyhL/g8JzwJfD+uQZ6YcfEua
hftoIBa5TbThBAuU+vx618AfpbRFi1CQZ0vLfSawNm0kF611iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5zMpN7Ywpwbp9MvUTD5L3xiVPMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NTA0
NTQzMS1kN2EyLTQ5NzQtYmE5ZS00YzJkZDk2N2E1YTUvZDcwNzE2YTAtNTVhNi0z
M2NkLWJlM2QtMWE2MWU5MTM0NTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjUwNDU0MzEtZDdhMi00OTc0LWJh
OWUtNGMyZGQ5NjdhNWE1LzY1MDQ1NDMxLWQ3YTItNDk3NC1iYTllLTRjMmRkOTY3
YTVhNS5jcmwwHwYDVR0jBBgwFoAUP6GG5NFCRYo8tbK78PJhCJh5KVcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NTA0NTQzMS1kN2EyLTQ5NzQtYmE5ZS00YzJk
ZDk2N2E1YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoTiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFofjB/b9M4VjVjjdDB1WVYgmdnZi+O1NYXH4GSZI+Rk9q5ZcHnspND+
q5yoADpZ2Jf/ExlBnY1fw3HYHghPH9AkKUM4h6zJREhmxrUdI79So8k5qeFEfavP
355wVe4S7L0fw3XpUcjXJ2AuPndmXRvaAIVtxvIs5544lYHkfikHqMFMaC/sipK3
J9gRCUD1B5SxaPgnh3Vq3O4DsvYOofb3DC2nACyBb6jTkBbgpUUwy2rfU+183v7w
LNa8axSLittjU8bW5Tixx88m9H0umBvnFEIe9cD/aeylLr82WZoeM12xlswhipJQ
bqTwtdJe0ODercXzHcOUHVxu1RftYJk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:57 2025 by rpki-client