Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/90cfa271-a36a-3e4e-852c-006b4d9a19be.roa
File: 90cfa271-a36a-3e4e-852c-006b4d9a19be.roa (raw, json)
Hash identifier: Xe5CQarSQnlEomZob1EhDYqXVSDA9t27u9wbyiqyIGo=
Subject key identifier: F2:96:EE:99:48:58:3A:3C:CD:F7:0D:94:AA:03:D0:AF:80:12:BA:CD
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858486C58E915E1C68182A3238F00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/90cfa271-a36a-3e4e-852c-006b4d9a19be.roa
Signing time: Fri 03 Jan 2025 15:33:20 +0000
ROA not before: Fri 03 Jan 2025 15:33:20 +0000
ROA not after: Thu 03 Apr 2025 14:33:20 +0000
asID: 394437
IP address blocks: 66.249.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:58:e9:15:e1:c6:81:82:a3:23:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Jan 3 15:33:20 2025 GMT
Not After : Apr 3 14:33:20 2025 GMT
Subject: CN=2d5e0f1a-c8c4-4e6c-b23c-f671fe37b15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:38:13:2b:c9:d4:9a:17:6f:3a:bd:a0:fe:
b0:01:2f:e2:7d:d6:6d:d9:98:63:9c:09:4d:d7:91:
ac:7d:c6:80:cd:a0:8f:3e:47:22:8e:2d:4c:82:3e:
5c:4f:7e:63:95:d7:7e:64:79:f7:c4:f2:bc:90:16:
34:48:66:97:20:a6:b6:8c:f3:36:bb:ad:30:39:6d:
fd:ac:1f:05:c6:2d:84:86:94:b7:3b:86:58:d9:d5:
21:4c:53:3c:5f:2e:0e:d0:5a:34:9e:c9:a5:9c:ef:
c4:e7:89:0d:f4:b8:94:8c:0a:71:a0:09:6a:44:bc:
71:5c:fb:aa:66:8d:b4:d1:40:6c:32:13:75:23:8d:
39:33:dd:39:5e:71:e9:3a:78:d1:7b:6d:4c:51:8b:
d5:2c:fb:5b:75:48:11:d6:d4:2c:cd:c6:e4:38:1e:
df:16:32:43:52:9f:4c:2a:79:81:15:65:40:64:74:
89:65:79:3d:9d:48:dd:c4:46:75:37:2b:0a:30:7d:
20:d3:98:96:a5:1f:ae:5e:14:81:9e:f1:c0:c9:aa:
c9:f7:0b:82:ca:6e:9c:a4:3f:38:fa:9f:dc:bd:57:
87:1d:24:53:d5:3d:74:53:08:8c:d1:e4:8e:2e:4a:
72:6f:71:1f:50:ff:6e:95:5d:05:12:23:24:f0:a3:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:EE:99:48:58:3A:3C:CD:F7:0D:94:AA:03:D0:AF:80:12:BA:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/90cfa271-a36a-3e4e-852c-006b4d9a19be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:8d:8a:65:d7:62:42:df:ff:8d:7a:e4:bf:0b:1b:09:d6:69:
8d:5b:dc:9d:f1:ec:51:df:32:e4:1d:9a:33:aa:e3:16:3c:9e:
05:98:25:14:e5:b2:a2:60:08:42:7b:2a:a2:19:13:82:04:4c:
11:49:96:24:cd:05:e3:0b:ee:ab:0d:69:ea:01:21:1d:0d:e2:
c7:28:07:c0:94:1a:ba:dc:bc:7f:d6:76:2c:d3:38:18:c8:b4:
5f:6e:73:64:c0:8c:69:1d:1c:17:bb:76:9a:96:61:62:56:1c:
01:28:d4:e7:69:a7:33:e5:43:c7:1a:4f:45:3f:8c:a4:ea:a6:
21:f7:77:aa:40:95:2b:b0:4f:95:ee:5b:ad:20:e9:f6:cd:3b:
a6:43:4e:71:56:c1:65:91:89:89:5a:09:50:0a:65:e7:90:21:
d7:a3:bb:69:76:e9:77:11:1e:23:d6:b2:3a:22:f6:f3:f1:65:
2e:22:dc:cb:05:fa:ef:12:dc:d2:51:61:02:ff:4b:bd:f4:b4:
e9:cf:9c:4e:2e:87:4f:2c:d1:75:49:42:2e:e6:06:2c:87:55:
4f:b0:33:63:f1:13:db:6b:07:a5:cd:8e:02:c5:3e:82:a0:c7:
60:b4:9b:90:e2:64:d5:59:65:ea:0d:5e:bd:f4:c8:37:44:7a:
e0:c0:e6:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsWOkV4caBgqMjjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI1MDEwMzE1MzMyMFoXDTI1MDQwMzE0MzMyMFowLzEtMCsGA1UEAxMk
MmQ1ZTBmMWEtYzhjNC00ZTZjLWIyM2MtZjY3MWZlMzdiMTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg444EyvJ1JoXbzq9oP6wAS/ifdZt2ZhjnAlN
15GsfcaAzaCPPkciji1Mgj5cT35jldd+ZHn3xPK8kBY0SGaXIKa2jPM2u60wOW39
rB8Fxi2EhpS3O4ZY2dUhTFM8Xy4O0Fo0nsmlnO/E54kN9LiUjApxoAlqRLxxXPuq
Zo200UBsMhN1I405M905XnHpOnjRe21MUYvVLPtbdUgR1tQszcbkOB7fFjJDUp9M
KnmBFWVAZHSJZXk9nUjdxEZ1NysKMH0g05iWpR+uXhSBnvHAyarJ9wuCym6cpD84
+p/cvVeHHSRT1T10UwiM0eSOLkpyb3EfUP9ulV0FEiMk8KOrvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKW7plIWDo8zfcNlKoD0K+AErrNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOTBjZmEyNzEtYTM2YS0z
ZTRlLTg1MmMtMDA2YjRkOWExOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvllMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+NimXXYkLf/4165L8LGwnWaY1b3J3x7FHfMuQdmjOq4xY8ngWYJRTl
sqJgCEJ7KqIZE4IETBFJliTNBeML7qsNaeoBIR0N4scoB8CUGrrcvH/WdizTOBjI
tF9uc2TAjGkdHBe7dpqWYWJWHAEo1OdppzPlQ8caT0U/jKTqpiH3d6pAlSuwT5Xu
W60g6fbNO6ZDTnFWwWWRiYlaCVAKZeeQIdeju2l26XcRHiPWsjoi9vPxZS4i3MsF
+u8S3NJRYQL/S730tOnPnE4uh08s0XVJQi7mBiyHVU+wM2PxE9trB6XNjgLFPoKg
x2C0m5DiZNVZZeoNXr30yDdEeuDA5vs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:28:07 2025 by rpki-client