Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/0fbc7760-8d2d-3877-bbbe-559392540a69.roa
File: 0fbc7760-8d2d-3877-bbbe-559392540a69.roa (raw, json)
Hash identifier: DfJxKw8twIFqqyS5iYkesqCjr2Vz3VOrBtr5d1WJmIw=
Subject key identifier: 3B:B5:74:D3:8B:FE:7B:BC:B7:B6:8B:D9:FF:6B:E8:1E:C3:58:84:E4
Certificate issuer: /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial: 010D0C9F43285848100A8E98AA9B23D9331B9537
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/0fbc7760-8d2d-3877-bbbe-559392540a69.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 63290
IP address blocks: 66.245.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:8e:98:aa:9b:23:d9:33:1b:95:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=70d0c4e2-f437-4844-ae66-2fb5bacaa251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:2d:aa:f2:36:75:7b:65:8f:dc:cf:0e:e3:
94:5c:b6:03:bd:c5:25:6b:ea:4c:c0:c0:56:b5:74:
9e:0f:34:66:43:91:a6:96:39:37:58:43:9d:14:96:
1f:7d:71:8f:7f:2b:11:5b:e4:3a:7a:6d:96:d7:d7:
17:dd:c6:70:e6:4b:5f:36:dd:d8:fd:ab:8b:25:97:
c8:80:d2:d5:58:fd:39:64:09:63:58:f6:4f:34:95:
dd:54:49:eb:59:96:46:dc:be:0a:12:29:d7:af:3f:
00:66:ca:3f:6b:fb:20:a0:30:d3:48:87:94:2e:07:
94:1a:c5:a5:bc:22:d7:b0:8e:a3:ba:51:a0:3a:54:
e3:1d:db:9d:d8:8e:97:96:2c:f6:b7:d2:a7:bc:11:
af:dc:4c:54:f6:bf:18:50:33:2f:5d:20:7e:24:77:
0b:28:b6:3b:e4:ca:50:d2:55:77:c7:2d:43:96:a6:
7d:4d:05:43:ee:26:4b:d3:b9:42:42:a2:57:14:ac:
ea:c7:25:df:1f:31:bc:c3:78:7e:09:c8:99:6e:3a:
c7:50:30:f5:cf:13:71:20:93:3e:ed:37:b4:f1:82:
37:c2:d6:bc:79:7d:d8:94:97:e9:4a:5c:b2:06:a1:
66:0b:ad:46:f6:ab:79:8c:0c:c3:37:e3:e7:0e:8d:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B5:74:D3:8B:FE:7B:BC:B7:B6:8B:D9:FF:6B:E8:1E:C3:58:84:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/0fbc7760-8d2d-3877-bbbe-559392540a69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl
X509v3 Authority Key Identifier:
keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
sbgp-ipAddrBlock: critical
IPv4:
66.245.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:3f:af:76:6a:b4:e5:64:9b:f2:3b:9d:ec:cf:47:09:22:c2:
f9:1e:c2:09:9b:b0:71:1a:de:d8:4e:5d:38:f6:de:cd:1f:5a:
96:5a:c8:2e:af:99:98:3b:4d:9c:c1:01:c5:f0:c9:4a:78:c0:
15:30:cd:7c:58:ff:41:9c:6a:85:92:55:2b:aa:66:d8:58:b5:
5e:47:29:81:16:b1:79:ae:94:cb:90:f8:a8:20:e5:47:c9:a7:
d9:68:87:be:af:ca:df:77:66:29:91:dd:cf:83:39:df:6c:03:
a5:66:43:8a:29:7a:e2:f6:32:0a:9a:93:aa:20:74:66:33:4c:
db:f7:6e:d6:23:35:d2:55:de:05:e3:89:10:13:da:1a:31:08:
25:f9:94:f5:67:63:74:ff:ac:dc:11:27:e2:38:2d:7c:63:7a:
2d:f1:8c:4c:93:f9:67:df:43:59:c8:a7:97:a5:54:05:fd:88:
3d:83:18:64:1b:76:00:4b:e7:67:8a:e9:fc:35:49:b2:f1:2e:
cc:f6:a5:27:13:eb:8b:39:04:ea:25:da:67:ba:0f:45:84:9d:
d6:73:8f:77:46:9e:3c:d0:c9:77:91:9f:07:72:fe:83:fe:40:
d7:f8:2a:92:9e:a2:c6:ad:2f:f1:d0:f9:1c:17:51:f5:1f:3a:
bd:63:46:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCo6Yqpsj2TMblTcwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzBkOWU0NGUtOWEyZi00YWUzLWI4MGItNTUwZjkwZjE1
ZjY0MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
NzBkMGM0ZTItZjQzNy00ODQ0LWFlNjYtMmZiNWJhY2FhMjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsMtqvI2dXtlj9zPDuOUXLYDvcUla+pMwMBW
tXSeDzRmQ5Gmljk3WEOdFJYffXGPfysRW+Q6em2W19cX3cZw5ktfNt3Y/auLJZfI
gNLVWP05ZAljWPZPNJXdVEnrWZZG3L4KEinXrz8AZso/a/sgoDDTSIeULgeUGsWl
vCLXsI6julGgOlTjHdud2I6Xliz2t9KnvBGv3ExU9r8YUDMvXSB+JHcLKLY75MpQ
0lV3xy1DlqZ9TQVD7iZL07lCQqJXFKzqxyXfHzG8w3h+CciZbjrHUDD1zxNxIJM+
7Te08YI3wta8eX3YlJfpSlyyBqFmC61G9qt5jAzDN+PnDo1ijQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDu1dNOL/nu8t7aL2f9r6B7DWITkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5
ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBmOTBmMTVmNjQvMGZiYzc3NjAtOGQyZC0z
ODc3LWJiYmUtNTU5MzkyNTQwYTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzBkOWU0NGUtOWEyZi00YWUzLWI4
MGItNTUwZjkwZjE1ZjY0LzMwZDllNDRlLTlhMmYtNGFlMy1iODBiLTU1MGY5MGYx
NWY2NC5jcmwwHwYDVR0jBBgwFoAUK0zB0+E17IWkg8WIud8sdPkUMb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBm
OTBmMTVmNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAE/r3ZqtOVkm/I7nezPRwkiwvkewgmbsHEa3thOXTj23s0fWpZayC6v
mZg7TZzBAcXwyUp4wBUwzXxY/0GcaoWSVSuqZthYtV5HKYEWsXmulMuQ+Kgg5UfJ
p9loh76vyt93ZimR3c+DOd9sA6VmQ4opeuL2Mgqak6ogdGYzTNv3btYjNdJV3gXj
iRAT2hoxCCX5lPVnY3T/rNwRJ+I4LXxjei3xjEyT+WffQ1nIp5elVAX9iD2DGGQb
dgBL52eK6fw1SbLxLsz2pScT64s5BOol2me6D0WEndZzj3dGnjzQyXeRnwdy/oP+
QNf4KpKeosatL/HQ+RwXUfUfOr1jRuM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:50:19 2025 by rpki-client