Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa
File: 70b491ba-5507-36ed-97d1-864053a80150.roa (raw, json)
Hash identifier: 7x18sMWadDJQQQyudFq2Ag3smYjOmt52upSsHz/W81A=
Subject key identifier: F5:A9:9A:03:0F:E7:93:C6:3F:CD:47:3B:C4:94:C8:D4:6D:52:48:04
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DBEADF2584014CD4E79EE980
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa
Signing time: Tue 12 Nov 2024 21:55:13 +0000
ROA not before: Tue 12 Nov 2024 21:55:13 +0000
ROA not after: Mon 10 Feb 2025 21:55:13 +0000
asID: 394437
IP address blocks: 66.249.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:ea:df:25:84:01:4c:d4:e7:9e:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 21:55:13 2024 GMT
Not After : Feb 10 21:55:13 2025 GMT
Subject: CN=79f06e65-3831-4567-9055-3066c9f9cc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:69:4c:a1:70:61:c3:f6:85:90:d2:40:c7:
97:af:07:01:8f:2a:2d:ae:e1:d9:c0:1d:e3:57:f7:
d4:66:c8:a1:68:5a:56:cb:41:92:fd:a6:8b:8a:ce:
84:bb:e4:9e:6a:b7:ed:44:35:70:66:26:11:a8:85:
6d:f2:3f:53:3b:8f:26:3f:e0:2e:b0:67:83:67:81:
21:8d:83:a0:c6:65:ce:7a:b2:f3:c3:87:3c:ac:9a:
1b:81:4f:8d:5d:67:26:e5:6b:fe:10:7e:c1:c1:45:
68:7e:af:d7:c2:86:fc:0c:45:12:ab:b7:d7:6f:3f:
7e:8b:ac:eb:a2:bd:27:87:cf:e5:85:bd:1a:c8:74:
b7:b5:5f:a0:0f:4a:0a:dd:9b:b6:e6:3d:5f:97:19:
46:ba:47:dc:2d:0b:7f:af:a1:7a:f5:5d:ba:93:ba:
25:18:df:cd:eb:3e:9f:2b:11:a0:01:7a:e9:6a:a7:
dd:59:39:a1:2a:d2:2e:e6:cf:40:11:08:6d:a9:55:
df:a6:62:5f:a3:d1:df:e4:c0:c2:6b:8f:ad:bc:0a:
35:a1:47:76:6a:5c:4c:4a:83:75:01:eb:d2:d5:55:
15:25:ec:53:d4:a2:41:79:f5:8e:d0:7f:a6:fc:88:
c9:eb:9a:ba:d7:54:58:db:7e:c0:35:7e:20:29:df:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:9A:03:0F:E7:93:C6:3F:CD:47:3B:C4:94:C8:D4:6D:52:48:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:50:4f:14:85:39:2a:4d:91:ff:f0:9a:5a:3b:2e:26:6b:ff:
6d:fe:c2:79:db:2a:96:ef:ca:58:7c:88:a9:b3:f1:88:01:17:
69:c2:91:be:28:c6:09:d7:0b:5d:e4:08:0c:be:4b:2b:19:03:
83:60:56:29:f9:d8:c9:31:2c:87:7f:c1:84:5e:8a:6b:8f:4a:
d4:45:5f:c8:b0:c8:51:a2:a5:71:5a:95:08:8b:a2:e5:c3:68:
cb:e9:e5:97:61:ac:ca:c5:3c:e5:83:4b:36:6f:78:98:ce:96:
17:e3:c3:c4:fe:08:19:8a:42:17:17:f7:5e:b0:66:4f:fd:f5:
9b:22:bb:40:96:ec:5e:b0:0e:13:08:96:a5:e2:1b:b7:91:c1:
56:a1:19:5d:a5:e6:d5:19:b3:9b:fa:fb:18:60:2f:cb:ba:f6:
05:cd:29:ed:bf:65:54:6f:23:a2:4e:cd:00:b0:2b:74:5f:43:
47:fd:b8:3f:9e:5c:15:dd:53:fa:67:a8:20:45:fd:59:cc:50:
8a:62:04:e5:6f:4c:02:c2:6e:a9:ea:05:56:fc:8e:45:ca:f4:
08:74:00:97:ff:46:45:eb:9c:e6:3f:78:0d:f0:dd:2f:dc:41:
4a:9b:5a:b7:ec:de:e9:95:76:85:9a:f5:ef:4c:0a:08:1d:57:
c3:82:56:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfb6t8lhAFM1Oee6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI0MTExMjIxNTUxM1oXDTI1MDIxMDIxNTUxM1owLzEtMCsGA1UEAxMk
NzlmMDZlNjUtMzgzMS00NTY3LTkwNTUtMzA2NmM5ZjljYzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbdpTKFwYcP2hZDSQMeXrwcBjyotruHZwB3j
V/fUZsihaFpWy0GS/aaLis6Eu+SearftRDVwZiYRqIVt8j9TO48mP+AusGeDZ4Eh
jYOgxmXOerLzw4c8rJobgU+NXWcm5Wv+EH7BwUVofq/Xwob8DEUSq7fXbz9+i6zr
or0nh8/lhb0ayHS3tV+gD0oK3Zu25j1flxlGukfcLQt/r6F69V26k7olGN/N6z6f
KxGgAXrpaqfdWTmhKtIu5s9AEQhtqVXfpmJfo9Hf5MDCa4+tvAo1oUd2alxMSoN1
AevS1VUVJexT1KJBefWO0H+m/IjJ65q611RY237ANX4gKd9kWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWpmgMP55PGP81HO8SUyNRtUkgEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNzBiNDkxYmEtNTUwNy0z
NmVkLTk3ZDEtODY0MDUzYTgwMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvlvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFQTxSFOSpNkf/wmlo7LiZr/23+wnnbKpbvylh8iKmz8YgBF2nCkb4o
xgnXC13kCAy+SysZA4NgVin52MkxLId/wYReimuPStRFX8iwyFGipXFalQiLouXD
aMvp5ZdhrMrFPOWDSzZveJjOlhfjw8T+CBmKQhcX916wZk/99Zsiu0CW7F6wDhMI
lqXiG7eRwVahGV2l5tUZs5v6+xhgL8u69gXNKe2/ZVRvI6JOzQCwK3RfQ0f9uD+e
XBXdU/pnqCBF/VnMUIpiBOVvTALCbqnqBVb8jkXK9Ah0AJf/RkXrnOY/eA3w3S/c
QUqbWrfs3umVdoWa9e9MCggdV8OCVgY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:53:43 2025 by rpki-client