Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3a6675c8-6417-35b8-85a7-596abd53023b.roa
File: 3a6675c8-6417-35b8-85a7-596abd53023b.roa (raw, json)
Hash identifier: LmbiAVqEhwsa6WBCUuwydR+Nh6Gm6jl9P+PAzd1EkP8=
Subject key identifier: DE:1E:D0:A9:6D:CD:31:89:54:9C:15:1B:D9:FF:CF:21:7D:FE:57:D2
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584818933F299A6C34FF8EE7E860
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3a6675c8-6417-35b8-85a7-596abd53023b.roa
Signing time: Wed 04 Dec 2024 15:22:58 +0000
ROA not before: Wed 04 Dec 2024 15:22:58 +0000
ROA not after: Tue 04 Mar 2025 15:22:58 +0000
asID: 6312
IP address blocks: 66.231.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:93:3f:29:9a:6c:34:ff:8e:e7:e8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 4 15:22:58 2024 GMT
Not After : Mar 4 15:22:58 2025 GMT
Subject: CN=ccca06a1-ad34-4adb-9b31-cd0b5955c092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:06:55:bb:23:4b:ad:2a:8c:4a:e8:00:4e:
35:fc:51:ea:04:ca:8b:17:03:ef:c3:c3:fa:ea:1e:
e1:10:4b:6b:04:0b:0c:8b:f1:f8:3e:a7:c0:d0:ff:
fe:e3:9b:12:86:46:62:03:00:df:e3:60:b6:8b:9f:
cc:76:15:bf:26:35:88:15:0d:e0:c4:89:a8:86:94:
37:82:70:e1:61:97:53:95:d3:42:14:0b:1b:fc:bf:
cd:fe:76:fc:a4:d6:a2:08:48:1a:ee:ba:5e:af:fd:
08:2c:77:ab:51:c0:0c:3d:1c:d4:d2:ad:62:1d:a9:
5a:3f:fc:25:3d:6e:df:4f:ad:ea:f8:61:81:0f:9b:
e6:e8:5e:9d:47:0d:aa:bf:55:c6:45:da:95:7d:1e:
2f:5b:96:89:59:e9:87:47:f6:49:6a:e0:95:36:e4:
e9:7b:c2:58:4c:e6:73:d9:9c:d7:8d:da:28:8e:9f:
1e:6c:26:b3:0b:70:c0:99:35:e4:85:9e:a5:09:99:
b0:d0:57:1a:5f:ca:0e:48:44:84:32:54:c3:31:03:
66:f8:83:77:6c:5a:64:37:db:f4:52:74:d7:78:25:
00:c0:bc:8a:7c:1d:03:4c:c0:65:d7:11:d5:c2:64:
dd:d9:db:37:5f:34:15:90:91:ab:fe:19:b3:b3:fc:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:D0:A9:6D:CD:31:89:54:9C:15:1B:D9:FF:CF:21:7D:FE:57:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3a6675c8-6417-35b8-85a7-596abd53023b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:58:a1:ed:de:66:dc:b3:67:fe:ec:00:1f:e8:66:5e:01:f1:
da:26:3b:a2:9a:47:4d:cb:df:5d:00:14:bc:2e:f3:20:b5:2a:
b2:fb:4e:d9:f3:a6:13:af:9e:37:6c:1c:75:cb:c7:03:b7:f0:
2f:09:8f:51:32:fe:58:a2:48:4b:f6:64:84:2c:53:9b:81:b5:
c7:6c:2f:7f:ab:17:6c:51:b3:ae:54:f7:73:0c:3c:19:02:ab:
65:34:d9:a3:89:8e:26:36:ae:d5:6a:cd:56:0c:db:9c:d7:32:
de:54:5b:bf:a9:15:de:3a:44:36:8b:01:3b:cd:51:29:5d:d1:
c4:8c:40:f9:fc:31:48:bd:90:95:42:73:db:16:05:e2:d1:be:
de:ff:4b:52:db:ed:52:d8:8e:4e:d5:ed:8d:ea:62:87:61:65:
df:f9:38:21:4a:79:72:78:57:7a:72:57:76:d3:42:60:2a:b9:
f4:30:3a:fe:d5:aa:da:a8:b3:6c:bf:82:4e:9f:bb:a9:ab:01:
17:17:46:74:32:4b:c2:58:06:33:5c:3f:6c:77:1a:ae:74:a6:
9b:71:23:c6:91:cd:ba:cf:89:97:33:f6:6a:16:c9:2e:ba:f9:
56:86:72:cf:d5:97:b3:93:f0:34:bf:e5:26:67:e9:d0:02:be:
f2:a9:9b:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgYkz8pmmw0/47n6GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTIwNDE1MjI1OFoXDTI1MDMwNDE1MjI1OFowLzEtMCsGA1UEAxMk
Y2NjYTA2YTEtYWQzNC00YWRiLTliMzEtY2QwYjU5NTVjMDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSYGVbsjS60qjEroAE41/FHqBMqLFwPvw8P6
6h7hEEtrBAsMi/H4PqfA0P/+45sShkZiAwDf42C2i5/MdhW/JjWIFQ3gxImohpQ3
gnDhYZdTldNCFAsb/L/N/nb8pNaiCEga7rper/0ILHerUcAMPRzU0q1iHalaP/wl
PW7fT63q+GGBD5vm6F6dRw2qv1XGRdqVfR4vW5aJWemHR/ZJauCVNuTpe8JYTOZz
2ZzXjdoojp8ebCazC3DAmTXkhZ6lCZmw0FcaX8oOSESEMlTDMQNm+IN3bFpkN9v0
UnTXeCUAwLyKfB0DTMBl1xHVwmTd2ds3XzQVkJGr/hmzs/ydKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4e0KltzTGJVJwVG9n/zyF9/lfSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2E2Njc1YzgtNjQxNy0z
NWI4LTg1YTctNTk2YWJkNTMwMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL5Yoe3eZtyzZ/7sAB/oZl4B8domO6KaR03L310AFLwu8yC1KrL7Ttnz
phOvnjdsHHXLxwO38C8Jj1Ey/liiSEv2ZIQsU5uBtcdsL3+rF2xRs65U93MMPBkC
q2U02aOJjiY2rtVqzVYM25zXMt5UW7+pFd46RDaLATvNUSld0cSMQPn8MUi9kJVC
c9sWBeLRvt7/S1Lb7VLYjk7V7Y3qYodhZd/5OCFKeXJ4V3pyV3bTQmAqufQwOv7V
qtqos2y/gk6fu6mrARcXRnQyS8JYBjNcP2x3Gq50pptxI8aRzbrPiZcz9moWyS66
+VaGcs/Vl7OT8DS/5SZn6dACvvKpm5w=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:05 2025 by rpki-client