Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa
File: c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa (raw, json)
Hash identifier: 7GiMWBCGcg5mDJvrduZZaGAxDVoSuiwrM4BWOX9sz2o=
Subject key identifier: 0C:B6:25:66:19:94:03:0B:32:FB:63:02:9F:83:24:0D:97:1D:11:D7
Certificate issuer: /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Certificate serial: 010D0C9F432858480118E990082DCE03D19A1520
Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa
Signing time: Tue 26 Nov 2024 05:32:53 +0000
ROA not before: Tue 26 Nov 2024 05:32:53 +0000
ROA not after: Mon 24 Feb 2025 05:32:53 +0000
asID: 21723
IP address blocks: 66.163.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:01:18:e9:90:08:2d:ce:03:d1:9a:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Validity
Not Before: Nov 26 05:32:53 2024 GMT
Not After : Feb 24 05:32:53 2025 GMT
Subject: CN=7410466c-8d77-4a86-aff3-c88c7c7736a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:1e:7f:83:52:58:6e:f2:8a:f9:62:16:e9:
d4:40:68:93:6c:37:67:f5:23:ef:9d:d1:db:a3:0f:
4b:56:56:a6:df:f2:05:25:4c:0d:cb:86:1f:2a:ac:
4e:d2:25:b7:8d:22:21:90:41:61:19:0a:19:b9:4c:
94:07:db:de:c8:8e:cd:27:85:08:7a:52:0e:5b:7d:
b7:df:98:f0:fe:2b:d3:11:bb:46:98:13:31:57:89:
ac:01:bd:07:3e:64:55:76:d7:48:80:bd:0f:e5:21:
15:48:3f:6f:e3:db:cd:fb:ac:ed:a8:fc:18:37:a4:
79:58:f6:df:5b:3a:d3:16:59:d9:d5:20:a8:fc:a9:
15:74:56:d7:b2:2d:cc:a3:c9:75:06:7a:cc:0b:7c:
d3:42:88:aa:22:f7:ab:84:63:f2:4d:4b:a0:01:66:
ee:ba:bc:dc:4c:51:88:fc:c2:26:e9:1e:b0:c7:b5:
3f:1e:6a:98:ea:fc:6c:ba:97:00:bc:1a:61:29:5f:
5f:d8:97:6a:8d:dd:32:ec:4d:2f:e1:53:d0:5f:d2:
7a:5f:0a:54:ea:ac:c3:77:67:e0:39:0d:24:1f:ca:
fe:a8:2c:13:c3:6d:61:39:2a:19:66:da:5b:50:2c:
8d:1d:47:af:bb:00:1f:33:fe:00:c2:07:a2:2d:8a:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:25:66:19:94:03:0B:32:FB:63:02:9F:83:24:0D:97:1D:11:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl
X509v3 Authority Key Identifier:
keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.163.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:a1:db:04:04:32:62:e6:f2:7b:db:da:ce:81:f2:a4:34:12:
66:92:91:25:94:99:fe:24:33:ae:95:58:1d:ca:e7:23:9b:39:
f8:4b:52:44:d9:f0:30:53:85:59:2e:2a:7b:5c:07:6e:2d:6b:
f9:f5:f8:7f:a6:06:99:3b:70:6b:3f:ee:89:1e:b2:13:20:e2:
7d:5a:80:c0:41:16:88:16:4a:c8:1e:1b:a9:2f:13:b0:83:7b:
f5:d5:4c:65:52:2b:b0:42:d6:49:dd:ef:b4:99:4a:9b:85:3d:
fa:dc:c2:db:3d:82:9c:1f:c8:9f:5a:7e:81:c6:73:98:47:01:
cc:f6:f2:0f:9f:8e:ee:8e:b7:b8:4c:e2:70:62:42:04:d7:cb:
50:37:10:35:68:a4:de:70:f8:6e:6e:8b:4e:ce:1b:de:53:58:
b9:8f:42:ae:a9:5f:be:02:be:45:3d:34:ce:da:9f:d7:b6:f7:
ce:48:51:e7:e4:45:e7:9a:b0:8a:5b:e0:5b:df:97:76:c9:1d:
43:70:e4:7f:d8:9b:62:e4:39:d0:a2:7a:c9:52:00:23:ee:c8:
67:d0:fe:6e:fe:d2:e8:8b:52:70:5e:a7:46:62:8d:63:48:1b:
bc:f9:1b:fe:d2:58:05:32:d7:f3:41:71:5a:2d:47:71:83:d0:
c3:d1:d1:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgBGOmQCC3OA9GaFSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAzOGUyZWQtOTBlNC00ODk2LThhNWItMmRiNDMzNzZh
MzJjMB4XDTI0MTEyNjA1MzI1M1oXDTI1MDIyNDA1MzI1M1owLzEtMCsGA1UEAxMk
NzQxMDQ2NmMtOGQ3Ny00YTg2LWFmZjMtYzg4YzdjNzczNmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte4ef4NSWG7yivliFunUQGiTbDdn9SPvndHb
ow9LVlam3/IFJUwNy4YfKqxO0iW3jSIhkEFhGQoZuUyUB9veyI7NJ4UIelIOW323
35jw/ivTEbtGmBMxV4msAb0HPmRVdtdIgL0P5SEVSD9v49vN+6ztqPwYN6R5WPbf
WzrTFlnZ1SCo/KkVdFbXsi3Mo8l1BnrMC3zTQoiqIverhGPyTUugAWbuurzcTFGI
/MIm6R6wx7U/HmqY6vxsupcAvBphKV9f2Jdqjd0y7E0v4VPQX9J6XwpU6qzDd2fg
OQ0kH8r+qCwTw21hOSoZZtpbUCyNHUevuwAfM/4AwgeiLYouDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAy2JWYZlAMLMvtjAp+DJA2XHRHXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4
ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0MzM3NmEzMmMvYzI5NTM1YzAtMzVmOS0z
Y2JkLTgzOTAtMGY0ZjNlNzEyZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAzOGUyZWQtOTBlNC00ODk2LThh
NWItMmRiNDMzNzZhMzJjLzYwMzhlMmVkLTkwZTQtNDg5Ni04YTViLTJkYjQzMzc2
YTMyYy5jcmwwHwYDVR0jBBgwFoAUKQXSFcuRrCTkVNF0V9vyB3VzTUAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0
MzM3NmEzMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGah2wQEMmLm8nvb2s6B8qQ0EmaSkSWUmf4kM66VWB3K5yObOfhLUkTZ
8DBThVkuKntcB24ta/n1+H+mBpk7cGs/7okeshMg4n1agMBBFogWSsgeG6kvE7CD
e/XVTGVSK7BC1knd77SZSpuFPfrcwts9gpwfyJ9afoHGc5hHAcz28g+fju6Ot7hM
4nBiQgTXy1A3EDVopN5w+G5ui07OG95TWLmPQq6pX74CvkU9NM7an9e2985IUefk
ReeasIpb4Fvfl3bJHUNw5H/Ym2LkOdCieslSACPuyGfQ/m7+0uiLUnBep0ZijWNI
G7z5G/7SWAUy1/NBcVotR3GD0MPR0eg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:36 2025 by rpki-client