Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/b1de0819-c12d-3ec5-8904-714ba843d1b3.roa
File: b1de0819-c12d-3ec5-8904-714ba843d1b3.roa (raw, json)
Hash identifier: 6WdNtxvzSNE6I43M4UAkPt/kr4FI5UYqFe6Yxd4veRk=
Subject key identifier: A5:BD:FB:5F:1D:C8:68:C2:3D:54:FD:C5:16:99:74:7D:4E:FA:40:C2
Certificate issuer: /CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
Certificate serial: 010D0C9F432858489FD09B8B425766ECD2AB5400
Authority key identifier: 47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/b1de0819-c12d-3ec5-8904-714ba843d1b3.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 19935
IP address blocks: 66.45.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:9b:8b:42:57:66:ec:d2:ab:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=5e200aa3-2399-45c2-8745-0fed127311a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:94:46:8b:23:58:cd:c3:4e:28:aa:a4:12:
3e:c5:2a:3e:eb:18:02:e5:7e:eb:c2:17:48:93:0d:
48:96:4a:ff:57:2c:9b:ec:6e:1c:03:56:ee:da:d3:
ff:0a:76:34:77:85:c1:50:db:96:02:3e:36:e4:51:
9e:70:b8:36:fc:7d:08:6e:83:18:f8:68:b8:ba:56:
e7:3c:af:52:9b:da:64:d8:ed:8d:45:84:6f:ab:1b:
2d:f6:74:7b:4e:7d:3e:9f:a4:18:a8:4f:41:9f:d5:
bb:27:f7:38:ef:e2:fd:b3:ec:f7:c9:40:95:87:4d:
89:8c:97:e4:13:ca:6e:ed:5a:69:5c:b9:a6:4a:cf:
8d:ec:b2:b0:d0:75:9b:34:3d:ae:28:a8:17:b9:ac:
6c:39:bb:6d:d9:da:ca:76:fc:c0:3f:ae:ac:e4:9a:
e0:83:a8:e9:59:bd:6f:3f:13:eb:21:90:9e:df:8a:
8f:9c:82:69:d3:e3:67:88:cc:79:96:d2:92:26:b1:
dc:5c:b5:5b:a3:ac:b9:87:08:8f:73:8a:a6:3d:cc:
66:ed:b7:b4:5c:c7:48:e1:73:44:8f:a5:9f:36:be:
21:99:27:20:d4:2c:b7:0e:22:1a:24:55:22:72:17:
c0:bf:06:2b:34:77:93:3f:11:f4:74:8b:d9:29:f7:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BD:FB:5F:1D:C8:68:C2:3D:54:FD:C5:16:99:74:7D:4E:FA:40:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/b1de0819-c12d-3ec5-8904-714ba843d1b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl
X509v3 Authority Key Identifier:
keyid:47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.45.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:cf:29:23:70:67:1f:c0:ae:be:8a:e2:b3:c6:64:69:01:af:
57:00:c5:63:b1:18:2b:a0:bd:71:c4:f6:1f:87:77:78:fa:c9:
9e:0f:4f:b8:2c:ee:8b:fc:6a:2e:6b:6f:4f:d8:fe:1d:07:da:
24:cf:70:02:52:10:cd:57:10:2d:8f:90:25:35:d3:fd:91:34:
26:02:90:4d:e0:96:d1:35:b1:cc:bd:f6:27:52:8e:48:8b:a1:
44:59:5d:4e:e5:d6:36:eb:20:d8:de:18:72:90:e5:3a:5e:bc:
0f:f3:81:09:d7:81:61:33:e1:6e:68:e8:0d:33:ab:28:11:ad:
86:f6:83:1a:75:e5:71:c9:a1:8c:ee:80:ab:a9:4a:c5:74:6b:
5b:24:70:33:b7:9f:84:cc:b9:dd:0d:ac:32:2a:1a:37:8e:32:
c4:03:ff:b1:8d:0d:09:5e:21:b1:e2:1e:c6:fe:ce:df:7d:45:
a0:74:b6:5e:3a:61:22:38:b0:95:5c:b1:35:f7:5a:be:e4:e5:
f8:e5:1b:c1:9a:f6:14:24:51:1f:9e:62:4f:db:9b:ed:a1:df:
5d:61:70:a8:73:ea:ac:22:1d:61:26:5a:31:06:58:39:17:21:
e7:ea:de:2a:0d:8f:56:68:87:e4:b6:02:90:1f:f8:09:32:da:
ef:85:4e:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0JuLQldm7NKrVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmQ4YjY4NjMtZWY4MS00ZGU0LWJjOWUtYWU5ZDFkMmUx
MWU4MB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk
NWUyMDBhYTMtMjM5OS00NWMyLTg3NDUtMGZlZDEyNzMxMWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/+URosjWM3DTiiqpBI+xSo+6xgC5X7rwhdI
kw1Ilkr/Vyyb7G4cA1bu2tP/CnY0d4XBUNuWAj425FGecLg2/H0IboMY+Gi4ulbn
PK9Sm9pk2O2NRYRvqxst9nR7Tn0+n6QYqE9Bn9W7J/c47+L9s+z3yUCVh02JjJfk
E8pu7VppXLmmSs+N7LKw0HWbND2uKKgXuaxsObtt2drKdvzAP66s5Jrgg6jpWb1v
PxPrIZCe34qPnIJp0+NniMx5ltKSJrHcXLVbo6y5hwiPc4qmPcxm7be0XMdI4XNE
j6WfNr4hmScg1Cy3DiIaJFUichfAvwYrNHeTPxH0dIvZKfc4RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKW9+18dyGjCPVT9xRaZdH1O+kDCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iZDhi
Njg2My1lZjgxLTRkZTQtYmM5ZS1hZTlkMWQyZTExZTgvYjFkZTA4MTktYzEyZC0z
ZWM1LTg5MDQtNzE0YmE4NDNkMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmQ4YjY4NjMtZWY4MS00ZGU0LWJj
OWUtYWU5ZDFkMmUxMWU4L2JkOGI2ODYzLWVmODEtNGRlNC1iYzllLWFlOWQxZDJl
MTFlOC5jcmwwHwYDVR0jBBgwFoAUR5n1J+QfBHRaPzvXgcmAGFnpdWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iZDhiNjg2My1lZjgxLTRkZTQtYmM5ZS1hZTlk
MWQyZTExZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi13MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/PKSNwZx/Arr6K4rPGZGkBr1cAxWOxGCugvXHE9h+Hd3j6yZ4PT7gs
7ov8ai5rb0/Y/h0H2iTPcAJSEM1XEC2PkCU10/2RNCYCkE3gltE1scy99idSjkiL
oURZXU7l1jbrINjeGHKQ5TpevA/zgQnXgWEz4W5o6A0zqygRrYb2gxp15XHJoYzu
gKupSsV0a1skcDO3n4TMud0NrDIqGjeOMsQD/7GNDQleIbHiHsb+zt99RaB0tl46
YSI4sJVcsTX3Wr7k5fjlG8Ga9hQkUR+eYk/bm+2h311hcKhz6qwiHWEmWjEGWDkX
Iefq3ioNj1Zoh+S2ApAf+Aky2u+FTuY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:39:16 2025 by rpki-client