Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/3d0cc7c8-a51f-3f83-9c84-3e72362f4b6a.roa
File: 3d0cc7c8-a51f-3f83-9c84-3e72362f4b6a.roa (raw, json)
Hash identifier: pk1b2FgwwjxHSS8L3nGz6gU/K4cC5fEgTAWxHyPTW34=
Subject key identifier: AF:CA:7B:74:DD:F2:E7:F9:67:2A:E0:30:4F:CE:91:B7:64:CF:D4:1A
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F4328584812D531863881543CBF0D3300
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/3d0cc7c8-a51f-3f83-9c84-3e72362f4b6a.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 62537
IP address blocks: 66.85.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:31:86:38:81:54:3c:bf:0d:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=a5cf6213-98df-4d49-ba12-b0fa4ac0f311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:43:c3:ea:c1:1d:f7:f7:3c:e3:60:83:df:
c6:bf:c7:f5:3b:f5:d4:f4:a6:b3:0b:eb:ee:86:fe:
fa:5e:82:e7:f0:72:71:ee:80:07:31:52:a9:07:d8:
b3:a0:0f:76:c5:ec:77:0e:71:ef:90:a9:a3:8d:c6:
42:7b:f6:35:79:9f:30:69:2e:7e:50:e0:94:79:f8:
fa:bc:28:6f:08:98:f8:56:a3:71:85:ae:86:89:4e:
6d:ce:df:9d:30:13:d5:f5:15:a4:7a:c5:49:33:d6:
bf:af:a5:d7:94:e0:a5:b8:8c:8b:21:de:2f:47:0c:
69:35:38:a6:98:5e:42:d0:d7:98:96:82:05:ce:c5:
5d:6a:58:eb:ab:a2:7e:36:2c:22:db:a4:0e:7c:3d:
cc:6e:6e:f4:22:77:66:b1:dd:e6:13:70:d1:4b:f7:
3e:79:12:20:12:2b:d8:2c:9e:e9:b7:d0:74:94:f6:
f6:28:be:9e:a0:ee:83:a6:03:73:1e:82:6b:58:e0:
76:bb:df:c3:7c:3a:c1:3c:c6:4c:31:1c:24:b2:64:
f6:ad:96:a2:0d:4b:49:cb:89:77:d1:e7:8a:d0:38:
1f:29:0f:95:ca:84:51:3b:6f:6e:df:84:fd:6d:34:
72:2e:53:2a:d9:a1:d2:a5:0a:5a:66:74:e1:4a:25:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CA:7B:74:DD:F2:E7:F9:67:2A:E0:30:4F:CE:91:B7:64:CF:D4:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/3d0cc7c8-a51f-3f83-9c84-3e72362f4b6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:91:14:a3:97:e0:bc:74:8f:9c:07:66:8a:48:d3:98:46:f4:
b6:9b:41:d9:5f:d2:e5:8b:dd:62:bc:0e:4c:2b:f3:6e:fa:3f:
1a:2a:50:d9:c5:9c:28:94:ae:a8:5f:4b:9c:72:38:94:00:f5:
25:6c:19:a1:3b:ae:ec:86:c0:22:63:aa:fa:c4:a7:f9:a5:64:
b0:b6:6f:19:dd:18:c1:9d:ef:c0:c5:9b:90:3d:3d:40:11:e2:
63:44:88:fc:38:6e:6a:d6:66:6b:dd:c5:e6:2f:61:02:61:18:
92:62:05:cf:c0:85:0d:c2:f5:47:a2:ad:06:86:29:3b:68:b8:
88:0f:20:96:0d:1c:df:e1:43:0b:2e:1e:73:79:bb:9a:05:8c:
6c:ba:a0:3c:83:71:15:96:bf:d8:85:da:e8:5a:93:07:1e:9f:
17:d3:02:31:a0:d3:4a:c2:1e:45:6a:a0:c8:52:bd:fb:68:1d:
71:35:55:8e:b9:f6:67:a4:29:1e:9e:08:10:0f:38:b3:1f:42:
3a:23:23:1f:6b:6f:ce:2b:dd:d1:ac:d4:5c:d7:b2:24:a7:8b:
c8:83:c1:3f:82:d9:ec:4f:81:82:dd:74:dc:a5:e8:97:44:34:
48:3d:d6:b9:ce:3f:33:97:76:7b:4c:c9:11:b5:c0:24:f8:66:
da:59:1d:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1TGGOIFUPL8NMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx
NTZmMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
YTVjZjYyMTMtOThkZi00ZDQ5LWJhMTItYjBmYTRhYzBmMzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ9Dw+rBHff3PONgg9/Gv8f1O/XU9KazC+vu
hv76XoLn8HJx7oAHMVKpB9izoA92xex3DnHvkKmjjcZCe/Y1eZ8waS5+UOCUefj6
vChvCJj4VqNxha6GiU5tzt+dMBPV9RWkesVJM9a/r6XXlOCluIyLId4vRwxpNTim
mF5C0NeYloIFzsVdaljrq6J+Niwi26QOfD3Mbm70Indmsd3mE3DRS/c+eRIgEivY
LJ7pt9B0lPb2KL6eoO6DpgNzHoJrWOB2u9/DfDrBPMZMMRwksmT2rZaiDUtJy4l3
0eeK0DgfKQ+VyoRRO29u34T9bTRyLlMq2aHSpQpaZnThSiUY3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/Ke3Td8uf5ZyrgME/Okbdkz9QaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj
YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvM2QwY2M3YzgtYTUxZi0z
ZjgzLTljODQtM2U3MjM2MmY0YjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2
ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk
MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk
NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQlU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFORFKOX4Lx0j5wHZopI05hG9LabQdlf0uWL3WK8Dkwr8276PxoqUNnF
nCiUrqhfS5xyOJQA9SVsGaE7ruyGwCJjqvrEp/mlZLC2bxndGMGd78DFm5A9PUAR
4mNEiPw4bmrWZmvdxeYvYQJhGJJiBc/AhQ3C9UeirQaGKTtouIgPIJYNHN/hQwsu
HnN5u5oFjGy6oDyDcRWWv9iF2uhakwcenxfTAjGg00rCHkVqoMhSvftoHXE1VY65
9mekKR6eCBAPOLMfQjojIx9rb84r3dGs1FzXsiSni8iDwT+C2exPgYLddNyl6JdE
NEg91rnOPzOXdntMyRG1wCT4ZtpZHXY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:24 2025 by rpki-client