Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/abefec7b-87e4-3b6c-936e-d2d7a1a8cf8c.roa
File: abefec7b-87e4-3b6c-936e-d2d7a1a8cf8c.roa (raw, json)
Hash identifier: llbbRF+vIucj0mYrv+PUIl7LKMNxIng6R/h2dx7P7zc=
Subject key identifier: E8:B0:7E:5C:7B:AB:8F:91:4D:E5:AD:24:2D:D7:A1:0E:99:10:64:0B
Certificate issuer: /CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
Certificate serial: 010D0C9F432858480BDA6E774BEDF8CC627FD5E0
Authority key identifier: 48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/abefec7b-87e4-3b6c-936e-d2d7a1a8cf8c.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 6082
IP address blocks: 66.182.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:6e:77:4b:ed:f8:cc:62:7f:d5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=bf9f94aa-a468-469c-8777-63156d828a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:2d:0d:58:76:d0:60:16:1d:ba:86:b7:13:
93:7f:de:cf:a4:c1:32:ec:86:67:6c:82:0d:5a:d2:
c9:60:d5:a7:8a:41:be:3e:2b:2c:8f:09:29:4c:c8:
c4:7b:2b:98:87:64:00:a8:83:1a:92:8d:63:ff:3b:
06:38:a4:8b:cc:96:c6:1f:ca:d9:4e:47:2b:5b:26:
39:db:0c:63:a1:46:06:c8:be:f2:02:37:d4:94:9b:
dc:f9:59:25:3c:29:1c:49:4a:96:53:5a:5a:d1:70:
32:c9:bc:d3:bc:57:ef:26:8e:ab:b3:40:52:0b:c9:
f7:2b:d3:ed:e5:45:58:df:62:20:9b:e5:be:7d:e9:
56:da:44:93:0d:c3:a3:e7:37:02:b6:1c:f0:09:3b:
53:b3:46:fb:d2:cc:e0:ea:2b:87:9e:7b:4f:bc:8e:
29:33:cd:0d:e0:94:76:ce:08:00:69:bd:8e:d8:12:
80:5d:6b:85:53:ca:1e:2f:f8:4c:83:6f:4d:b5:c1:
b4:d5:b4:d7:8f:a6:da:af:99:7c:8c:a5:37:02:75:
b5:f1:d2:1e:16:d7:79:e5:4d:9b:02:c2:77:0f:eb:
84:0c:5f:4c:a2:94:96:fb:cd:3f:cc:56:1a:99:35:
29:47:16:31:6b:f8:0f:1d:1f:28:45:d3:b2:cf:61:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:7E:5C:7B:AB:8F:91:4D:E5:AD:24:2D:D7:A1:0E:99:10:64:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/abefec7b-87e4-3b6c-936e-d2d7a1a8cf8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl
X509v3 Authority Key Identifier:
keyid:48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
sbgp-ipAddrBlock: critical
IPv4:
66.182.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:f2:22:e6:1d:e5:ad:6a:a0:a2:69:7b:18:37:a6:9d:18:d0:
2a:e5:e6:f3:e2:09:55:43:e8:fc:52:f5:af:5c:f3:c0:d5:48:
4a:98:5c:ab:1e:00:df:68:09:6e:6f:d5:5d:7a:02:8c:5a:1f:
cd:7c:da:5d:01:56:9b:4c:e2:60:05:0f:eb:5b:2a:1a:fb:73:
28:1d:9a:0d:4f:3c:a2:c6:52:95:e8:1b:af:d5:d5:cb:b1:84:
68:1d:98:b4:58:7e:0c:da:f3:7e:c1:52:26:d3:c2:5c:3a:7a:
b3:fb:96:e4:b7:80:d1:f2:50:47:a3:c4:d7:ce:c1:3d:25:6b:
72:a2:f8:7b:ea:e3:04:71:ee:f4:61:c6:0a:fe:31:45:b9:69:
cd:00:dd:ab:88:a9:8d:9b:52:ce:74:50:a3:05:6a:ea:43:de:
95:1b:15:8f:1b:8a:b1:fe:2d:c1:63:8e:b1:3f:3e:5a:89:5e:
f5:01:3d:44:d9:27:f4:39:94:94:96:db:83:03:e3:1b:d9:8a:
02:1f:7a:5a:c8:67:d4:58:07:71:24:a8:92:c6:3e:b9:51:bc:
dd:90:b3:08:8c:42:35:fc:a8:47:96:da:f4:ab:5f:c0:bb:52:
b7:72:be:c4:df:c6:46:f8:47:d6:fc:bd:80:02:8d:c6:c0:27:
54:45:a0:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2m53S+34zGJ/1eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGY2NWNjNjEtMmI0YS00ZjQ4LWFlNWQtMjgzNjZhYTJk
Y2IwMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
YmY5Zjk0YWEtYTQ2OC00NjljLTg3NzctNjMxNTZkODI4YTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWotDVh20GAWHbqGtxOTf97PpMEy7IZnbIIN
WtLJYNWnikG+PissjwkpTMjEeyuYh2QAqIMako1j/zsGOKSLzJbGH8rZTkcrWyY5
2wxjoUYGyL7yAjfUlJvc+VklPCkcSUqWU1pa0XAyybzTvFfvJo6rs0BSC8n3K9Pt
5UVY32Igm+W+felW2kSTDcOj5zcCthzwCTtTs0b70szg6iuHnntPvI4pM80N4JR2
zggAab2O2BKAXWuFU8oeL/hMg29NtcG01bTXj6bar5l8jKU3AnW18dIeFtd55U2b
AsJ3D+uEDF9MopSW+80/zFYamTUpRxYxa/gPHR8oRdOyz2EqZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOiwflx7q4+RTeWtJC3XoQ6ZEGQLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZjY1
Y2M2MS0yYjRhLTRmNDgtYWU1ZC0yODM2NmFhMmRjYjAvYWJlZmVjN2ItODdlNC0z
YjZjLTkzNmUtZDJkN2ExYThjZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGY2NWNjNjEtMmI0YS00ZjQ4LWFl
NWQtMjgzNjZhYTJkY2IwLzBmNjVjYzYxLTJiNGEtNGY0OC1hZTVkLTI4MzY2YWEy
ZGNiMC5jcmwwHwYDVR0jBBgwFoAUSCC3o2IZFe1+Qr9kQZNPTMzuz+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZjY1Y2M2MS0yYjRhLTRmNDgtYWU1ZC0yODM2
NmFhMmRjYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQraEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMXyIuYd5a1qoKJpexg3pp0Y0Crl5vPiCVVD6PxS9a9c88DVSEqYXKse
AN9oCW5v1V16AoxaH8182l0BVptM4mAFD+tbKhr7cygdmg1PPKLGUpXoG6/V1cux
hGgdmLRYfgza837BUibTwlw6erP7luS3gNHyUEejxNfOwT0la3Ki+Hvq4wRx7vRh
xgr+MUW5ac0A3auIqY2bUs50UKMFaupD3pUbFY8birH+LcFjjrE/PlqJXvUBPUTZ
J/Q5lJSW24MD4xvZigIfelrIZ9RYB3EkqJLGPrlRvN2QswiMQjX8qEeW2vSrX8C7
UrdyvsTfxkb4R9b8vYACjcbAJ1RFoMY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:56 2025 by rpki-client