Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa
File: 3480552e-78d8-3380-996d-dd3f947bb79c.roa (raw, json)
Hash identifier: UryR6sXrUUbtVfA7dZZ93qaevDG3+nt9i/qPBUow0So=
Subject key identifier: E9:64:ED:B6:7F:31:B1:C5:15:C8:58:92:9E:DB:72:EA:80:9E:54:1B
Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Certificate serial: 010D0C9F432858482EC00C198403779E678DFA80
Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 209242
IP address blocks: 66.118.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:0c:19:84:03:77:9e:67:8d:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=893fd7e1-f7c9-4314-8baa-3ba4ec5fdfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:e0:c8:e3:b7:e6:2d:51:f6:c9:d9:cb:92:
44:60:7e:dc:c5:08:4c:eb:59:79:0f:41:01:c0:98:
02:c0:6b:cd:56:a8:d7:96:be:76:63:42:82:27:02:
de:9e:2c:cc:ca:81:8d:7e:7f:cd:57:7a:b4:d0:db:
f8:4f:74:45:a4:cb:2d:73:a4:e1:a0:cd:2e:01:8d:
bf:96:32:16:d5:0e:c2:5b:0d:3f:b2:de:04:90:4b:
cb:a2:78:93:f9:d4:ab:21:44:56:46:78:98:5d:b4:
1a:2c:c8:c5:f7:b5:89:ce:25:6d:86:c4:de:e7:12:
4c:cf:42:e4:81:28:5e:57:8b:30:ad:43:a7:95:fd:
72:6d:d4:be:bc:e3:4c:d4:29:ad:d8:84:67:93:fc:
06:bb:46:99:f9:6d:74:44:37:73:30:c4:db:4e:09:
d1:4b:44:43:5c:fd:41:03:20:de:6d:ab:4c:00:bc:
64:ea:dc:ff:9c:20:33:f8:1f:3a:c8:36:bf:7d:a1:
73:b4:1d:06:6f:87:07:95:2f:46:1a:1f:34:ad:6f:
b6:b1:1c:6f:42:8b:64:4e:4a:42:bd:68:70:84:6d:
05:65:6c:3d:0e:1e:6f:45:da:3f:41:b4:ed:21:44:
85:80:ff:57:42:2b:7f:ee:5c:9a:60:5c:d1:f3:a3:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:ED:B6:7F:31:B1:C5:15:C8:58:92:9E:DB:72:EA:80:9E:54:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl
X509v3 Authority Key Identifier:
keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:23:de:b9:bc:34:50:95:e7:cc:65:56:49:4d:22:9f:59:11:
5c:23:f5:dd:37:ca:8a:9c:76:30:ab:c5:80:1e:4a:3a:e6:7e:
d8:04:bf:14:db:73:0f:8f:f8:7d:9d:80:dd:7c:86:d2:e9:fb:
69:4a:6a:72:98:88:50:ff:ce:7b:83:63:dc:7e:8d:09:f2:e0:
1d:f8:a4:99:f9:e9:9f:84:3f:e2:2b:a5:8d:cb:9c:be:93:af:
82:74:f2:1e:9e:fa:8a:f9:74:9c:12:ba:11:89:02:22:6a:7d:
78:b5:a2:0a:d5:78:50:49:88:16:f0:26:39:c9:51:21:8d:d7:
3d:1b:88:01:24:bf:fb:20:77:16:96:9c:fc:1a:31:a2:3e:cb:
8f:dc:b0:c8:5d:23:a2:2d:36:b9:23:23:12:b2:55:0d:cb:1e:
fc:aa:26:3a:1b:42:bf:3a:54:38:90:b0:fa:60:28:45:ad:a2:
8b:15:34:5f:d2:a3:1e:9f:fd:8c:2d:ad:95:89:65:c8:92:98:
10:c5:5f:7d:b2:4c:e2:70:36:76:50:31:2f:62:6e:69:4a:c7:
e3:2c:10:e9:c1:a5:ff:f7:7b:d0:a5:11:17:ed:e0:41:b5:06:
34:ea:1c:12:51:48:75:11:cc:09:5d:58:46:73:9d:1d:fc:b5:
b8:c5:99:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwAwZhAN3nmeN+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj
NDAzMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
ODkzZmQ3ZTEtZjdjOS00MzE0LThiYWEtM2JhNGVjNWZkZmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY7gyOO35i1R9snZy5JEYH7cxQhM61l5D0EB
wJgCwGvNVqjXlr52Y0KCJwLenizMyoGNfn/NV3q00Nv4T3RFpMstc6ThoM0uAY2/
ljIW1Q7CWw0/st4EkEvLoniT+dSrIURWRniYXbQaLMjF97WJziVthsTe5xJMz0Lk
gSheV4swrUOnlf1ybdS+vONM1Cmt2IRnk/wGu0aZ+W10RDdzMMTbTgnRS0RDXP1B
AyDebatMALxk6tz/nCAz+B86yDa/faFztB0Gb4cHlS9GGh80rW+2sRxvQotkTkpC
vWhwhG0FZWw9Dh5vRdo/QbTtIUSFgP9XQit/7lyaYFzR86NSHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlk7bZ/MbHFFchYkp7bcuqAnlQbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh
MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvMzQ4MDU1MmUtNzhkOC0z
MzgwLTk5NmQtZGQzZjk0N2JiNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw
YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj
YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0
YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYj3rm8NFCV58xlVklNIp9ZEVwj9d03yoqcdjCrxYAeSjrmftgEvxTb
cw+P+H2dgN18htLp+2lKanKYiFD/znuDY9x+jQny4B34pJn56Z+EP+IrpY3LnL6T
r4J08h6e+or5dJwSuhGJAiJqfXi1ogrVeFBJiBbwJjnJUSGN1z0biAEkv/sgdxaW
nPwaMaI+y4/csMhdI6ItNrkjIxKyVQ3LHvyqJjobQr86VDiQsPpgKEWtoosVNF/S
ox6f/YwtrZWJZciSmBDFX32yTOJwNnZQMS9ibmlKx+MsEOnBpf/3e9ClERft4EG1
BjTqHBJRSHURzAldWEZznR38tbjFmYM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:38:15 2025 by rpki-client