Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa
File: 4e206120-21a0-3b6c-80db-62308ac9e02c.roa (raw, json)
Hash identifier: V04tIzPGhkzGXpvZUG4PlFyN4kkxuD6OuknhX0yyZ14=
Subject key identifier: CD:5C:66:2C:5B:83:47:C4:5E:2F:42:64:CF:AC:63:6F:5E:12:67:E3
Certificate issuer: /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
Certificate serial: 010D0C9F4328584894A5EA7CAFDF3CA44A7FC098
Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 394456
IP address blocks: 66.223.49.0/24 maxlen: 24
209.196.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ea:7c:af:df:3c:a4:4a:7f:c0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=78177eb3-daf8-4ab4-9aa3-551eafd45e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:d2:88:e4:28:fe:b9:b6:a1:34:1f:ef:55:
a3:69:8b:db:e3:da:93:34:6a:46:ef:87:60:2b:05:
f7:a5:ab:a0:73:a9:b8:d2:72:52:be:a9:0f:33:38:
97:7a:4d:f5:fe:20:d3:ce:ab:5e:ae:f3:eb:a5:71:
9d:b6:18:f4:01:dd:cc:cc:52:fc:5b:23:ee:0c:2a:
cb:b2:99:f6:52:aa:49:3f:3b:23:c0:43:32:e5:7c:
28:bf:9b:13:77:94:10:f7:bf:2d:aa:ef:da:18:89:
14:df:ab:5c:b8:b8:e1:f9:55:18:e7:3f:2a:06:57:
25:b7:9e:d8:84:e5:e3:11:fb:b0:22:41:96:13:3d:
49:95:ba:57:3b:6b:94:e1:fa:f3:a1:bd:ce:16:41:
29:ef:c8:3f:b9:bd:43:da:9f:ac:a3:25:90:9f:0a:
12:21:a6:7f:ce:4e:9f:a3:a7:0e:cc:5d:5e:3b:80:
6f:fa:55:2c:28:b0:b7:dd:40:ae:30:a0:93:79:6e:
28:78:b2:e2:67:a5:49:ea:9e:73:d7:6a:1b:79:b0:
f9:5e:21:74:02:c0:87:ea:cb:1d:3f:7c:54:55:b5:
26:8d:69:97:9f:94:17:84:de:80:46:7c:61:d8:39:
e1:b4:f5:00:22:61:2f:6e:eb:e3:e5:c2:1b:88:bf:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5C:66:2C:5B:83:47:C4:5E:2F:42:64:CF:AC:63:6F:5E:12:67:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl
X509v3 Authority Key Identifier:
keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
sbgp-ipAddrBlock: critical
IPv4:
66.223.49.0/24
209.196.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:6a:35:2b:2e:51:ef:b6:81:60:04:16:39:2f:2c:6b:89:c0:
50:9a:f7:b0:09:db:6a:80:85:a6:55:6d:7d:f4:39:a0:f9:7c:
bb:7c:de:40:e1:53:e1:2e:53:ee:7a:93:c0:dd:76:1b:cf:dc:
27:cd:90:8b:b0:1e:18:78:05:f6:d5:5f:0d:40:02:c8:db:db:
33:66:e6:2a:7c:b4:a0:e9:51:67:74:d7:89:20:e9:4e:61:42:
32:ce:7e:84:d7:03:12:1d:21:98:59:99:8f:12:a2:92:4f:78:
39:45:69:12:f8:56:b2:76:a5:f0:76:a5:0d:4a:2c:12:82:80:
24:d3:46:4a:0a:08:fb:09:24:15:e8:4a:61:8b:d2:4d:fa:47:
89:e2:47:08:a2:66:bf:fb:d5:d3:0d:b3:a0:35:1f:dc:37:0e:
ea:5e:f1:32:50:de:42:74:04:86:4b:1d:26:9c:4f:9e:60:81:
36:48:31:04:59:2d:fe:29:bd:47:d9:e8:30:2a:9d:32:52:29:
68:e7:6d:3f:4e:4b:06:7a:2a:43:9f:48:e2:e5:31:24:30:db:
f9:b3:fb:a1:c9:04:18:d5:2a:80:0f:31:8a:ba:06:9f:bb:a8:
e4:d0:c2:94:78:5f:07:6b:a8:f0:5f:89:c5:36:4e:26:4e:4e:
24:ff:58:9a
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiUpep8r988pEp/wJgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdiM2NmNGMtYmJhMC00ODFjLThlODItNzRmMDUwYzVm
YTJlMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
NzgxNzdlYjMtZGFmOC00YWI0LTlhYTMtNTUxZWFmZDQ1ZTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQfSiOQo/rm2oTQf71WjaYvb49qTNGpG74dg
KwX3paugc6m40nJSvqkPMziXek31/iDTzqtervPrpXGdthj0Ad3MzFL8WyPuDCrL
spn2UqpJPzsjwEMy5Xwov5sTd5QQ978tqu/aGIkU36tcuLjh+VUY5z8qBlclt57Y
hOXjEfuwIkGWEz1JlbpXO2uU4frzob3OFkEp78g/ub1D2p+soyWQnwoSIaZ/zk6f
o6cOzF1eO4Bv+lUsKLC33UCuMKCTeW4oeLLiZ6VJ6p5z12obebD5XiF0AsCH6ssd
P3xUVbUmjWmXn5QXhN6ARnxh2DnhtPUAImEvbuvj5cIbiL+raQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFM1cZixbg0fEXi9CZM+sY29eEmfjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jN2Iz
Y2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYwNTBjNWZhMmUvNGUyMDYxMjAtMjFhMC0z
YjZjLTgwZGItNjIzMDhhYzllMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzdiM2NmNGMtYmJhMC00ODFjLThl
ODItNzRmMDUwYzVmYTJlL2M3YjNjZjRjLWJiYTAtNDgxYy04ZTgyLTc0ZjA1MGM1
ZmEyZS5jcmwwHwYDVR0jBBgwFoAU/7ynqLDJPgswXH1AXm0eDyu6kwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jN2IzY2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYw
NTBjNWZhMmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQt8xAwQA
0cSQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABNqNSsuUe+2gWAEFjkvLGuJwFCa97AJ22qAhaZVbX30OaD5
fLt83kDhU+EuU+56k8DddhvP3CfNkIuwHhh4BfbVXw1AAsjb2zNm5ip8tKDpUWd0
14kg6U5hQjLOfoTXAxIdIZhZmY8SopJPeDlFaRL4VrJ2pfB2pQ1KLBKCgCTTRkoK
CPsJJBXoSmGL0k36R4niRwiiZr/71dMNs6A1H9w3Dupe8TJQ3kJ0BIZLHSacT55g
gTZIMQRZLf4pvUfZ6DAqnTJSKWjnbT9OSwZ6KkOfSOLlMSQw2/mz+6HJBBjVKoAP
MYq6Bp+7qOTQwpR4XwdrqPBficU2TiZOTiT/WJo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:38:57 2025 by rpki-client