Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/b351831f-f083-322c-9363-e1e701b1714d.roa
File: b351831f-f083-322c-9363-e1e701b1714d.roa (raw, json)
Hash identifier: O/HA7r0cuCRhqJbc1/5YP0Rc82cmYkF23i3uCSkM3qE=
Subject key identifier: 0F:E1:11:C3:99:8A:AC:16:86:8C:2A:C7:BA:AE:5C:BA:5B:8F:AA:56
Certificate issuer: /CN=d64341ea-4a31-4684-bf89-237774f5a468
Certificate serial: 010D0C9F432858487A20827BE5ED83FFD865FC98
Authority key identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/b351831f-f083-322c-9363-e1e701b1714d.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 66.22.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:82:7b:e5:ed:83:ff:d8:65:fc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64341ea-4a31-4684-bf89-237774f5a468
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ae846b4c-154b-42b8-8b38-388368fecddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:7b:66:bd:2c:6b:6e:f8:a5:df:e1:db:11:
94:bc:25:1f:43:a6:8b:35:5d:4a:56:ad:f0:d3:18:
fe:ee:95:d4:ac:9d:aa:34:99:cc:73:f6:c8:ad:c6:
36:a7:aa:4a:e9:70:54:0f:b4:f2:48:00:0a:95:4b:
5c:14:f2:9e:bb:b3:53:0d:d4:ef:99:dd:bb:84:89:
4f:8e:c2:55:17:f4:4f:58:eb:d2:75:fd:1a:85:0d:
40:81:76:4d:be:e8:0a:8e:50:07:fe:03:27:1a:c5:
87:de:00:3a:3d:18:b0:be:77:e6:d1:4e:53:97:89:
af:c4:2b:3f:01:01:11:d0:d1:fa:a2:b0:8e:35:61:
a2:61:7e:77:07:2f:09:61:75:f4:6e:d2:69:bd:68:
97:09:42:44:38:f1:2b:ec:63:9a:7a:95:93:d6:3e:
d9:4a:52:ff:04:ac:05:34:ae:98:30:79:66:b9:66:
b1:69:75:a5:ec:4e:fe:67:5b:a8:2f:00:b2:b9:ee:
e2:33:ff:a4:ee:9e:f9:cf:39:3a:17:05:63:32:2b:
21:36:c5:05:0b:c7:bb:71:6a:8b:7b:2c:b2:08:ac:
d8:65:45:bb:cc:95:e7:79:db:d6:df:9e:53:36:2a:
3f:8b:9e:c1:e6:29:a2:15:de:38:54:5e:d9:d5:49:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:11:C3:99:8A:AC:16:86:8C:2A:C7:BA:AE:5C:BA:5B:8F:AA:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/b351831f-f083-322c-9363-e1e701b1714d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl
X509v3 Authority Key Identifier:
keyid:A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer
sbgp-ipAddrBlock: critical
IPv4:
66.22.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:49:2e:e6:02:59:50:a8:b9:dd:7a:61:4f:b7:52:fc:a2:ac:
8c:a6:6d:94:d5:f5:5f:8f:aa:e7:4c:6b:b9:75:90:21:a0:ae:
6f:79:c9:24:bb:30:f5:b0:9b:70:bc:63:d3:85:9d:3e:3a:a1:
ef:62:64:d1:39:45:e7:5d:37:2a:1e:f3:0c:df:02:81:59:7f:
e9:92:08:fa:78:81:06:cb:ad:77:df:b7:14:df:1c:43:e2:2a:
f4:65:fc:3b:ff:ee:49:ac:bd:f2:3f:78:65:1d:fe:fa:4a:24:
4f:e0:b9:c6:f7:f5:35:07:ce:59:70:0e:3f:ac:ff:e7:a7:9e:
34:e2:c3:05:bf:eb:a7:09:32:a7:a0:d5:79:60:62:ba:f5:3d:
c2:45:51:46:12:4d:33:17:7e:9b:c0:3f:68:60:b3:66:cf:d5:
18:2a:0a:87:ce:53:76:bc:eb:4b:a6:a5:d2:a1:42:d5:a8:ec:
c7:37:f4:5b:89:ac:4a:38:fb:4b:b7:97:db:c6:97:9d:c7:24:
61:95:e7:3e:e6:f5:95:2a:54:0b:59:09:65:2e:e6:9d:3a:10:
f0:4e:83:61:3d:d5:b5:7c:d1:aa:96:cf:68:a4:19:2e:d1:2a:
6d:85:37:df:51:a0:6e:39:48:89:0b:bc:f1:2e:07:49:2f:e9:
a8:96:6a:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IIJ75e2D/9hl/JgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDY0MzQxZWEtNGEzMS00Njg0LWJmODktMjM3Nzc0ZjVh
NDY4MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
YWU4NDZiNGMtMTU0Yi00MmI4LThiMzgtMzg4MzY4ZmVjZGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgN7Zr0sa274pd/h2xGUvCUfQ6aLNV1KVq3w
0xj+7pXUrJ2qNJnMc/bIrcY2p6pK6XBUD7TySAAKlUtcFPKeu7NTDdTvmd27hIlP
jsJVF/RPWOvSdf0ahQ1AgXZNvugKjlAH/gMnGsWH3gA6PRiwvnfm0U5Tl4mvxCs/
AQER0NH6orCONWGiYX53By8JYXX0btJpvWiXCUJEOPEr7GOaepWT1j7ZSlL/BKwF
NK6YMHlmuWaxaXWl7E7+Z1uoLwCyue7iM/+k7p75zzk6FwVjMishNsUFC8e7cWqL
eyyyCKzYZUW7zJXnedvW355TNio/i57B5imiFd44VF7Z1UnjgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/hEcOZiqwWhowqx7quXLpbj6pWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNjQz
NDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3NzRmNWE0NjgvYjM1MTgzMWYtZjA4My0z
MjJjLTkzNjMtZTFlNzAxYjE3MTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDY0MzQxZWEtNGEzMS00Njg0LWJm
ODktMjM3Nzc0ZjVhNDY4L2Q2NDM0MWVhLTRhMzEtNDY4NC1iZjg5LTIzNzc3NGY1
YTQ2OC5jcmwwHwYDVR0jBBgwFoAUoO8vnwBda9ZyIfSWE7ac8RT9OlQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kNjQzNDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3
NzRmNWE0NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZJLuYCWVCoud16YU+3UvyirIymbZTV9V+PqudMa7l1kCGgrm95ySS7
MPWwm3C8Y9OFnT46oe9iZNE5ReddNyoe8wzfAoFZf+mSCPp4gQbLrXfftxTfHEPi
KvRl/Dv/7kmsvfI/eGUd/vpKJE/gucb39TUHzllwDj+s/+ennjTiwwW/66cJMqeg
1XlgYrr1PcJFUUYSTTMXfpvAP2hgs2bP1RgqCofOU3a860umpdKhQtWo7Mc39FuJ
rEo4+0u3l9vGl53HJGGV5z7m9ZUqVAtZCWUu5p06EPBOg2E91bV80aqWz2ikGS7R
Km2FN99RoG45SIkLvPEuB0kv6aiWar0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:58 2025 by rpki-client