Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa
File: 72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa (raw, json)
Hash identifier: E1wmclO5+RZilcdTGChc/3luYs+P2APZrq9J6QjfBOw=
Subject key identifier: 87:7F:26:E6:08:36:B7:95:A5:34:25:41:1E:FE:E5:22:25:D7:17:A9
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F432858480214F3A640B52806CDAF5B40
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 14618
IP address blocks: 66.178.140.0/24 maxlen: 24
66.178.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f3:a6:40:b5:28:06:cd:af:5b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=b52c0d46-50df-474c-9a4f-2b0b16197964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:c3:04:b9:eb:00:62:b0:04:33:83:e4:53:
ac:e8:87:f9:a1:3c:b4:4e:e5:61:1c:42:56:63:aa:
f0:99:9b:41:19:c2:71:40:6d:33:d1:94:3d:ac:8e:
33:10:89:66:64:62:db:28:fc:1c:d9:c3:0c:4b:a5:
02:9a:4f:5c:db:10:62:38:aa:7c:2e:ad:34:99:06:
e3:67:18:3e:65:de:a0:37:57:4e:19:03:d9:56:7c:
c9:f5:a4:66:e2:e5:83:ab:5e:31:21:96:8e:a3:9f:
0d:dd:a8:f4:31:8d:c4:8c:26:7e:41:ba:50:55:37:
40:75:66:fe:75:c3:e8:4f:ee:1d:99:5c:fa:d2:da:
1d:03:5f:a9:c1:9d:fd:df:a5:db:b2:f8:02:f7:5d:
0b:57:aa:69:c3:34:8c:ff:57:86:fd:e3:89:34:00:
28:7c:bb:3d:a5:13:be:37:b6:74:ee:b5:d6:40:71:
0c:1b:f2:61:dd:23:90:3b:61:07:78:42:2f:52:6b:
33:6b:92:9a:0c:36:a9:1e:43:53:ec:d7:03:d0:1e:
22:40:86:c4:e7:45:a9:25:5c:d7:10:7b:bf:3f:cb:
f8:83:34:c4:6f:0e:2e:46:93:83:cd:9c:4f:7a:fb:
86:4a:f3:37:08:b7:9b:34:b3:45:71:0d:38:b0:98:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7F:26:E6:08:36:B7:95:A5:34:25:41:1E:FE:E5:22:25:D7:17:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:32:57:c1:0d:05:b7:fa:8e:b1:94:59:1b:96:fd:aa:30:0f:
50:64:1b:93:09:ce:b2:04:59:af:77:22:9d:e7:ba:2a:27:88:
18:ed:33:f9:67:fd:16:d6:a1:a7:1d:bc:68:2f:5f:0a:b6:5e:
18:28:b7:c2:10:87:d5:e4:24:1a:0d:9d:be:5e:72:aa:06:e5:
b6:1d:b5:c7:e3:27:4d:cc:f8:4d:96:84:8f:68:db:6a:5e:c6:
16:d0:d5:4e:4f:ba:23:b4:f7:09:ec:a3:f4:42:a6:0e:bd:89:
1d:a8:15:72:46:6b:56:7c:41:27:a8:46:2e:41:05:ef:46:6c:
49:6c:bf:12:e3:67:95:c0:e4:c8:8f:1b:b7:b0:00:94:e3:c5:
09:54:4b:14:5b:d6:be:50:3c:33:ec:f1:54:aa:27:c7:5f:2f:
9c:20:32:83:e2:6f:23:30:8c:fd:94:37:52:e5:6c:d0:d4:ba:
a6:bd:04:8e:12:03:da:7d:06:ac:29:24:3e:e5:2e:59:e1:72:
fc:8e:e4:47:aa:8a:05:07:3e:8d:49:2d:b2:b8:9e:e8:f2:29:
2e:34:1d:3f:78:36:ee:3c:0f:19:c4:e3:f1:06:4e:22:8d:4e:
32:bd:58:22:85:fb:f9:0e:64:4b:09:90:5d:e6:dc:9b:f8:11:
0a:e1:31:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCFPOmQLUoBs2vW0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj
ZmUyMB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
YjUyYzBkNDYtNTBkZi00NzRjLTlhNGYtMmIwYjE2MTk3OTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/DDBLnrAGKwBDOD5FOs6If5oTy0TuVhHEJW
Y6rwmZtBGcJxQG0z0ZQ9rI4zEIlmZGLbKPwc2cMMS6UCmk9c2xBiOKp8Lq00mQbj
Zxg+Zd6gN1dOGQPZVnzJ9aRm4uWDq14xIZaOo58N3aj0MY3EjCZ+QbpQVTdAdWb+
dcPoT+4dmVz60todA1+pwZ3936XbsvgC910LV6ppwzSM/1eG/eOJNAAofLs9pRO+
N7Z07rXWQHEMG/Jh3SOQO2EHeEIvUmsza5KaDDapHkNT7NcD0B4iQIbE50WpJVzX
EHu/P8v4gzTEbw4uRpODzZxPevuGSvM3CLebNLNFcQ04sJih9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFId/JuYINreVpTQlQR7+5SIl1xepMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw
ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvNzI5MzBlZTAtZjA0OC0z
YTI0LTliZDItNTRjZmE2YjRhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk
YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx
Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi
YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrKMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0yV8ENBbf6jrGUWRuW/aowD1BkG5MJzrIEWa93Ip3nuioniBjtM/ln
/RbWoacdvGgvXwq2Xhgot8IQh9XkJBoNnb5ecqoG5bYdtcfjJ03M+E2WhI9o22pe
xhbQ1U5PuiO09wnso/RCpg69iR2oFXJGa1Z8QSeoRi5BBe9GbElsvxLjZ5XA5MiP
G7ewAJTjxQlUSxRb1r5QPDPs8VSqJ8dfL5wgMoPibyMwjP2UN1LlbNDUuqa9BI4S
A9p9BqwpJD7lLlnhcvyO5EeqigUHPo1JLbK4nujyKS40HT94Nu48DxnE4/EGTiKN
TjK9WCKF+/kOZEsJkF3m3Jv4EQrhMfo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:02 2025 by rpki-client