Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa
File: 461aabaf-95c0-3092-b23c-127e90c3f101.roa (raw, json)
Hash identifier: KWjDHyGN80+nomqJNlfX8ckRl1i5fAlmp7av8/7CTlQ=
Subject key identifier: 65:6C:90:29:7C:79:FE:18:BE:A6:B3:2B:62:3B:43:DB:50:96:A2:8D
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858489A3B4B0497D6A3C8EEF9E740
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 74.126.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4b:04:97:d6:a3:c8:ee:f9:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=85999f32-3765-4d8f-b7c6-e408711c8d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:f4:03:6e:20:f8:86:c4:05:2b:16:f0:89:
d6:a5:70:16:52:bb:14:3d:eb:e7:1d:f4:7e:3e:64:
d9:7f:f7:e1:11:ab:63:e0:8e:b0:f5:e7:2f:b1:6a:
1a:fc:9e:a2:39:b5:74:fb:5c:52:bb:ae:f3:2c:9b:
93:e6:d2:12:10:e6:6e:ca:0a:5d:51:3d:76:e0:b2:
4e:54:bc:4c:1f:73:c2:4f:f6:5e:ea:c1:00:d9:0c:
e1:1c:b1:72:2c:71:96:1a:6c:5a:45:95:4a:e0:e4:
d6:52:c2:1e:4c:12:13:25:f0:c0:91:5a:62:bf:75:
ba:7e:ad:4b:2d:f5:dc:d2:63:34:5b:ad:1d:df:38:
56:26:81:1e:b2:98:95:1d:33:a3:4c:11:bd:e3:0c:
49:27:f2:40:5a:a6:5e:9b:d5:88:2f:51:1a:fd:8a:
1d:90:e2:a3:36:61:5d:38:5b:4d:07:c7:ef:ba:85:
22:5d:9e:93:96:6e:74:fd:c2:6c:4c:e0:cd:78:81:
21:b6:31:25:5b:89:c0:46:52:48:a8:36:d1:1e:f6:
1c:70:3c:af:24:7a:d6:4a:24:84:41:cd:2b:2d:6d:
e2:92:39:13:c0:8a:d2:a5:21:7e:8f:be:b5:6f:c3:
4b:53:f1:83:a2:b4:49:51:0b:80:f0:4e:7a:c1:1e:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:90:29:7C:79:FE:18:BE:A6:B3:2B:62:3B:43:DB:50:96:A2:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:f4:fe:ee:fb:4c:7c:a1:75:13:e2:dd:87:1e:f2:ce:05:23:
ec:60:93:8f:8c:9f:a2:05:94:e3:f2:4b:76:83:9d:0e:1f:33:
21:47:da:1d:49:1e:9f:34:25:5a:e2:f7:f5:00:ad:79:89:82:
45:92:6d:6d:b2:21:58:bf:54:98:c7:96:71:b6:4a:3c:08:13:
c6:51:21:0d:13:00:5f:87:cf:19:1b:7d:a3:4f:00:d2:71:ca:
af:45:26:bf:43:36:05:b8:50:36:c3:6e:d5:2d:c2:92:ca:f8:
4d:01:31:d6:8c:f1:f3:e4:d3:bd:eb:bb:d3:c2:7b:b7:6b:d4:
22:e2:1e:6d:64:ef:66:9f:2f:d1:31:ff:5c:c5:72:af:db:91:
a9:b8:ff:b5:0c:f6:b4:2d:cb:c7:18:bb:ee:9b:bd:c8:8d:b9:
a7:ef:a3:4f:01:63:c7:62:5d:61:aa:ac:62:7f:65:e6:67:ad:
fd:bc:4e:de:6b:c0:6f:77:4b:32:94:71:dc:df:c6:f1:ba:aa:
e4:ed:63:72:1f:0f:b3:be:04:f0:e9:a2:5c:e9:b9:61:e1:8f:
dd:c9:a8:ce:70:d7:ef:13:a7:87:2d:02:93:86:c4:62:c9:d4:
d2:09:8b:14:8d:89:52:97:c5:d6:fa:7f:a9:c8:46:fa:be:cd:
6a:89:72:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0sEl9ajyO7550AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3
OTU5MB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ODU5OTlmMzItMzc2NS00ZDhmLWI3YzYtZTQwODcxMWM4ZDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv670A24g+IbEBSsW8InWpXAWUrsUPevnHfR+
PmTZf/fhEatj4I6w9ecvsWoa/J6iObV0+1xSu67zLJuT5tISEOZuygpdUT124LJO
VLxMH3PCT/Ze6sEA2QzhHLFyLHGWGmxaRZVK4OTWUsIeTBITJfDAkVpiv3W6fq1L
LfXc0mM0W60d3zhWJoEespiVHTOjTBG94wxJJ/JAWqZem9WIL1Ea/YodkOKjNmFd
OFtNB8fvuoUiXZ6Tlm50/cJsTODNeIEhtjElW4nARlJIqDbRHvYccDyvJHrWSiSE
Qc0rLW3ikjkTwIrSpSF+j761b8NLU/GDorRJUQuA8E56wR6XzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVskCl8ef4YvqazK2I7Q9tQlqKNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz
ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNDYxYWFiYWYtOTVjMC0z
MDkyLWIyM2MtMTI3ZTkwYzNmMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0
ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0
Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw
M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJj0/u77THyhdRPi3Yce8s4FI+xgk4+Mn6IFlOPyS3aDnQ4fMyFH2h1J
Hp80JVri9/UArXmJgkWSbW2yIVi/VJjHlnG2SjwIE8ZRIQ0TAF+HzxkbfaNPANJx
yq9FJr9DNgW4UDbDbtUtwpLK+E0BMdaM8fPk073ru9PCe7dr1CLiHm1k72afL9Ex
/1zFcq/bkam4/7UM9rQty8cYu+6bvciNuafvo08BY8diXWGqrGJ/ZeZnrf28Tt5r
wG93SzKUcdzfxvG6quTtY3IfD7O+BPDpolzpuWHhj93JqM5w1+8Tp4ctApOGxGLJ
1NIJixSNiVKXxdb6f6nIRvq+zWqJclI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:38:27 2025 by rpki-client