Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/f1a94dda-f220-3073-b4a9-f61ce74f2305.roa
File: f1a94dda-f220-3073-b4a9-f61ce74f2305.roa (raw, json)
Hash identifier: mj8HT+WhBm739yMWgX7a71cKVPEwbomsKS4trJFMakc=
Subject key identifier: C2:6A:65:F0:DD:C6:58:08:CE:0C:C8:53:89:90:6A:39:18:E6:91:64
Certificate issuer: /CN=37bfcea0-cd68-469f-9e84-ccc3f1f40b42
Certificate serial: 010D0C9F4328584830253878CD90CA275175B3A0
Authority key identifier: 2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/f1a94dda-f220-3073-b4a9-f61ce74f2305.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 31989
IP address blocks: 66.179.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:38:78:cd:90:ca:27:51:75:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37bfcea0-cd68-469f-9e84-ccc3f1f40b42
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=cf987d89-b725-4c6d-9d31-7656dd7acb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:1c:98:37:99:cc:83:05:7f:75:1f:e7:75:
07:50:7b:8e:03:f4:6f:08:70:79:d8:84:09:8c:a7:
d9:31:8a:76:07:d6:77:45:8f:2d:bf:d7:6a:5d:4b:
98:81:0b:5f:a6:4d:7f:8c:c1:5a:e3:02:53:b4:cb:
f6:aa:d0:d8:c0:ca:09:73:10:bb:2c:20:6c:6c:20:
51:b2:e0:bf:ee:15:1e:c4:8e:51:d1:7a:38:ef:30:
20:69:8d:f2:16:9a:85:17:27:8e:77:67:34:0b:0a:
66:51:28:6b:50:bc:e4:aa:dc:1c:9f:3d:65:2c:e8:
b0:6c:f5:81:01:44:fa:df:51:36:64:88:c7:13:c4:
85:1a:cd:81:05:70:8b:67:c4:13:1e:b9:d4:29:77:
3b:31:26:d0:66:77:3e:19:20:7a:4a:9b:eb:7a:68:
d9:3b:e1:d5:33:96:22:4a:48:4f:a9:d6:9c:ed:ae:
1b:88:54:e3:34:a1:b2:83:92:bc:18:23:d5:b7:a9:
39:9d:76:56:14:21:56:b9:88:a7:20:c0:8c:bd:5c:
7d:8a:53:fa:72:03:59:6c:d7:77:c8:39:ba:a6:98:
4d:1e:5a:0f:c9:7e:26:9e:f8:16:d4:62:fc:09:20:
27:07:90:8c:ba:52:6c:0c:ab:1e:8a:31:9c:29:12:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6A:65:F0:DD:C6:58:08:CE:0C:C8:53:89:90:6A:39:18:E6:91:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/f1a94dda-f220-3073-b4a9-f61ce74f2305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.crl
X509v3 Authority Key Identifier:
keyid:2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer
sbgp-ipAddrBlock: critical
IPv4:
66.179.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:f1:42:4a:22:2f:b7:ef:2b:be:eb:a8:8b:92:d4:a5:b0:92:
31:32:f4:3c:e2:45:bb:03:d6:b6:ab:50:e0:53:e4:82:10:cb:
c4:6a:a0:a6:6b:bc:13:d4:c4:8d:6a:7b:07:e1:2d:de:2a:da:
14:de:70:f8:c4:17:32:bd:5b:de:2f:77:7d:84:80:e4:c0:3a:
f6:cc:fb:93:f3:08:f9:52:87:61:1c:70:27:c1:83:10:27:24:
89:f7:eb:1d:43:f7:01:32:6f:65:5b:2d:28:1e:a4:d6:4c:54:
a0:86:5a:33:24:a2:a3:2b:21:24:94:12:23:3e:6c:a6:df:36:
5b:d6:94:40:b3:d3:da:1a:dd:a2:81:e5:de:30:3b:e9:f3:ce:
1e:cf:32:f2:3f:0e:54:35:56:a7:e3:f2:48:fa:9d:a1:f8:19:
e0:6b:84:89:b5:28:21:df:2f:e7:33:c8:42:f1:52:01:b1:14:
eb:4d:99:10:77:1f:07:ce:01:a3:e7:04:97:da:43:ea:63:89:
5c:80:19:5e:22:8c:6c:c4:88:99:27:62:f6:1d:d8:c2:0e:80:
17:7f:e1:cf:66:11:ed:f2:56:40:2e:90:5c:f8:1b:3b:12:00:
9f:2a:9b:e4:47:c5:88:92:9b:f0:ad:8c:4b:63:bb:8e:a4:a8:
3e:8c:ad:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJTh4zZDKJ1F1s6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdiZmNlYTAtY2Q2OC00NjlmLTllODQtY2NjM2YxZjQw
YjQyMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk
Y2Y5ODdkODktYjcyNS00YzZkLTlkMzEtNzY1NmRkN2FjYjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphkcmDeZzIMFf3Uf53UHUHuOA/RvCHB52IQJ
jKfZMYp2B9Z3RY8tv9dqXUuYgQtfpk1/jMFa4wJTtMv2qtDYwMoJcxC7LCBsbCBR
suC/7hUexI5R0Xo47zAgaY3yFpqFFyeOd2c0CwpmUShrULzkqtwcnz1lLOiwbPWB
AUT631E2ZIjHE8SFGs2BBXCLZ8QTHrnUKXc7MSbQZnc+GSB6SpvremjZO+HVM5Yi
SkhPqdac7a4biFTjNKGyg5K8GCPVt6k5nXZWFCFWuYinIMCMvVx9ilP6cgNZbNd3
yDm6pphNHloPyX4mnvgW1GL8CSAnB5CMulJsDKseijGcKRIwzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJqZfDdxlgIzgzIU4mQajkY5pFkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zN2Jm
Y2VhMC1jZDY4LTQ2OWYtOWU4NC1jY2MzZjFmNDBiNDIvZjFhOTRkZGEtZjIyMC0z
MDczLWI0YTktZjYxY2U3NGYyMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzdiZmNlYTAtY2Q2OC00NjlmLTll
ODQtY2NjM2YxZjQwYjQyLzM3YmZjZWEwLWNkNjgtNDY5Zi05ZTg0LWNjYzNmMWY0
MGI0Mi5jcmwwHwYDVR0jBBgwFoAUK5Ht3C6M/Blj6k5Zaeg66a6Jq7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zN2JmY2VhMC1jZDY4LTQ2OWYtOWU4NC1jY2Mz
ZjFmNDBiNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrNEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjxQkoiL7fvK77rqIuS1KWwkjEy9DziRbsD1rarUOBT5IIQy8RqoKZr
vBPUxI1qewfhLd4q2hTecPjEFzK9W94vd32EgOTAOvbM+5PzCPlSh2EccCfBgxAn
JIn36x1D9wEyb2VbLSgepNZMVKCGWjMkoqMrISSUEiM+bKbfNlvWlECz09oa3aKB
5d4wO+nzzh7PMvI/DlQ1Vqfj8kj6naH4GeBrhIm1KCHfL+czyELxUgGxFOtNmRB3
HwfOAaPnBJfaQ+pjiVyAGV4ijGzEiJknYvYd2MIOgBd/4c9mEe3yVkAukFz4GzsS
AJ8qm+RHxYiSm/CtjEtju46kqD6MrXk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:12 2025 by rpki-client