Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d483c70-e0c4-3c7a-9047-aa919c1cdb2a.roa
File: 1d483c70-e0c4-3c7a-9047-aa919c1cdb2a.roa (raw, json)
Hash identifier: FhkY+sDilx7kBm4z4n38RQWo8XLprN0JLAKvZBj8Mbc=
Subject key identifier: 79:E1:FD:E8:0D:E3:CB:3E:97:1A:85:E2:01:11:F8:79:06:66:E5:4B
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858486AC59DC4B89A3FCB442BFC00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d483c70-e0c4-3c7a-9047-aa919c1cdb2a.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 13576
IP address blocks: 66.115.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9d:c4:b8:9a:3f:cb:44:2b:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=d45278a9-e679-4dc0-a4aa-2a7d75202836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:5f:e9:b0:50:aa:cf:41:20:35:5d:f0:9f:
ef:2c:d9:63:d9:27:82:65:da:70:9e:e0:04:2e:47:
0c:d0:26:de:82:a1:54:1f:4d:dc:65:db:90:89:5d:
df:86:d0:49:bb:14:cd:c9:a7:b5:41:9f:b1:36:3b:
6f:cb:91:da:b0:df:dd:68:65:0f:a4:a6:ae:10:50:
15:07:e8:08:82:c5:b2:c1:89:8f:45:52:7f:8a:83:
46:29:78:46:89:23:72:19:69:96:e9:61:95:3c:5d:
af:11:6a:ce:86:cd:d3:42:99:2a:55:2c:c0:9e:61:
6a:49:ec:69:26:ad:1d:22:8a:0c:20:0b:93:90:36:
f8:5d:0d:5b:a0:15:24:a5:b4:a4:2b:98:5c:43:5e:
1a:9c:9e:d9:ea:7e:29:a4:32:05:26:9e:12:1c:58:
53:62:6a:cf:c6:d9:4e:d5:96:42:22:43:13:98:5a:
17:74:b7:12:79:c2:6b:7c:51:d2:a2:45:a9:66:a0:
48:e7:00:81:66:e6:a1:cd:0e:16:c5:fb:19:92:b0:
b0:d1:f3:20:fb:66:3c:9d:5a:7a:3f:e4:f3:dc:70:
a5:91:26:fe:b2:a5:bb:63:f8:48:e9:c5:a6:00:42:
ac:6b:69:b6:cd:fe:fe:b2:bc:64:df:da:23:53:e1:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:FD:E8:0D:E3:CB:3E:97:1A:85:E2:01:11:F8:79:06:66:E5:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d483c70-e0c4-3c7a-9047-aa919c1cdb2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:cb:5e:11:6b:3c:78:e2:0d:91:d6:91:61:e6:fe:9b:54:b9:
57:70:56:1f:e8:eb:87:0a:5b:a6:f3:b8:fb:cc:24:5b:a6:b5:
31:c3:0b:14:0d:5f:9a:85:5d:09:10:af:7e:75:7e:8a:04:c7:
bc:68:8d:16:62:70:e6:bd:54:07:b7:a3:ea:24:8b:9c:03:e5:
10:28:08:67:34:29:f9:da:9c:ab:9a:1e:c7:1f:a2:6b:15:ed:
b2:b9:6b:9a:2f:2c:b1:e6:b5:58:7d:b0:9e:f1:02:1c:81:0e:
87:23:e3:1f:bc:39:c8:0c:9b:17:30:03:22:1d:b9:df:e6:da:
6a:02:f5:57:8b:58:e9:97:29:eb:ac:ef:57:fa:7d:c3:63:7f:
45:d2:3f:f2:eb:f0:f6:b9:44:03:be:9d:80:3b:4d:98:d1:ca:
fb:36:00:6e:76:2d:ae:4f:c4:79:0f:d6:57:0b:56:a5:31:fd:
b5:9e:1e:aa:c7:47:23:8e:6c:51:8e:86:4d:ca:78:82:68:38:
72:ce:f6:a6:d4:ec:fc:1c:d5:92:2b:66:1f:3f:af:4a:22:13:
3c:3e:6c:9f:08:dd:82:2c:80:19:5c:05:fa:cc:e5:1e:53:27:
48:a2:13:62:b5:b9:8e:7f:50:ad:e9:97:ad:e5:9b:19:e4:27:
c9:71:13:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZ3EuJo/y0Qr/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDQ1Mjc4YTktZTY3OS00ZGMwLWE0YWEtMmE3ZDc1MjAyODM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxpf6bBQqs9BIDVd8J/vLNlj2SeCZdpwnuAE
LkcM0CbegqFUH03cZduQiV3fhtBJuxTNyae1QZ+xNjtvy5HasN/daGUPpKauEFAV
B+gIgsWywYmPRVJ/ioNGKXhGiSNyGWmW6WGVPF2vEWrOhs3TQpkqVSzAnmFqSexp
Jq0dIooMIAuTkDb4XQ1boBUkpbSkK5hcQ14anJ7Z6n4ppDIFJp4SHFhTYmrPxtlO
1ZZCIkMTmFoXdLcSecJrfFHSokWpZqBI5wCBZuahzQ4WxfsZkrCw0fMg+2Y8nVp6
P+Tz3HClkSb+sqW7Y/hI6cWmAEKsa2m2zf7+srxk39ojU+FNjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHnh/egN48s+lxqF4gER+HkGZuVLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMWQ0ODNjNzAtZTBjNC0z
YzdhLTkwNDctYWE5MTljMWNkYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTLXhFrPHjiDZHWkWHm/ptUuVdwVh/o64cKW6bzuPvMJFumtTHDCxQN
X5qFXQkQr351fooEx7xojRZicOa9VAe3o+oki5wD5RAoCGc0KfnanKuaHscfomsV
7bK5a5ovLLHmtVh9sJ7xAhyBDocj4x+8OcgMmxcwAyIdud/m2moC9VeLWOmXKeus
71f6fcNjf0XSP/Lr8Pa5RAO+nYA7TZjRyvs2AG52La5PxHkP1lcLVqUx/bWeHqrH
RyOObFGOhk3KeIJoOHLO9qbU7Pwc1ZIrZh8/r0oiEzw+bJ8I3YIsgBlcBfrM5R5T
J0iiE2K1uY5/UK3pl63lmxnkJ8lxE7s=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:50 2025 by rpki-client