Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/83afb060-369e-3c11-a2c4-05037fea8dbe.roa
File: 83afb060-369e-3c11-a2c4-05037fea8dbe.roa (raw, json)
Hash identifier: ioYimnAAe0KdgEBmKqmdMZhvEvD6AV9YkebgqckSm28=
Subject key identifier: 8A:BA:33:FE:73:3F:3E:CC:8D:7A:4B:8F:12:AF:1A:74:B3:5E:A7:77
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584832F0353BE8670B246079BD00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/83afb060-369e-3c11-a2c4-05037fea8dbe.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 66.128.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:35:3b:e8:67:0b:24:60:79:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b997736c-3083-4e5b-a199-94336f551031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:87:fa:e3:4f:89:91:1d:75:a5:dc:f7:1b:
c7:eb:d3:43:82:4b:87:2f:66:98:5a:54:b0:53:9f:
8a:1b:85:54:4d:6b:2b:c2:9f:b0:cb:e8:98:43:f6:
60:a5:42:af:7f:02:d3:3a:1a:2e:7e:b1:70:3f:61:
23:3d:0d:2c:89:63:c3:48:40:97:78:0f:e1:af:8d:
8e:4f:7d:b7:ba:4d:ed:53:3e:9d:a9:1e:03:af:c7:
6a:2a:a6:c1:76:d6:5a:06:4b:ed:b6:01:d1:d1:70:
db:02:17:5d:47:d3:da:20:03:15:b4:33:31:d1:ce:
29:27:da:01:67:f6:79:c4:e0:8d:b8:84:ae:bd:f3:
a7:00:2d:bb:ee:19:53:3e:b0:c3:b4:99:b8:c2:2c:
42:28:77:56:dc:0d:8e:60:3d:75:ac:f7:04:cd:e4:
17:c1:2d:6d:76:07:6a:e2:79:39:a6:6b:00:4a:ab:
74:5c:26:70:53:65:55:07:c2:2e:20:03:fd:e5:86:
0f:af:e2:19:44:d6:d8:6b:81:e9:f5:69:9f:fa:69:
bf:86:9c:3d:54:71:56:6e:c0:56:98:29:89:d9:c1:
3b:11:94:e6:11:88:ed:30:37:92:a4:01:8f:a1:2e:
e9:72:eb:ec:fa:17:14:cf:0a:d5:70:47:fd:4a:07:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BA:33:FE:73:3F:3E:CC:8D:7A:4B:8F:12:AF:1A:74:B3:5E:A7:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/83afb060-369e-3c11-a2c4-05037fea8dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:4f:d7:89:97:b4:89:60:36:de:d0:81:25:17:2a:76:34:12:
4d:e7:f3:27:4b:78:1f:ff:b6:3a:b0:fd:68:bf:8b:73:11:81:
01:e3:9d:13:71:6e:a8:3f:7e:74:59:bc:69:77:2d:bf:b4:6d:
8f:11:57:78:71:00:68:93:e4:32:db:71:b4:30:71:e6:dc:8d:
5b:4c:0f:97:eb:51:a7:14:9a:ab:62:00:51:3e:63:31:cf:16:
92:6a:77:ba:35:3e:d3:79:cc:0f:9b:60:46:6b:e7:89:51:8f:
17:68:c4:e7:05:15:b3:75:06:37:9e:0f:75:cf:6a:77:9b:a2:
e9:54:9a:f8:bb:66:08:bc:39:14:f3:35:82:7f:05:e1:7f:c9:
3a:b2:83:7c:86:78:07:af:de:f8:62:4c:72:5c:e1:ac:98:6d:
9f:8f:7e:8d:15:b7:d7:08:0f:8d:5c:b0:f6:2b:60:11:a1:cc:
22:ee:10:6d:10:84:d0:32:b3:c4:b5:60:79:a6:5d:b4:7e:96:
55:6f:4c:24:2e:81:ad:2b:db:00:04:25:b3:0c:80:a8:64:9b:
8d:64:d1:4f:da:44:5b:f2:f6:92:64:91:e9:62:6f:ce:e5:78:
84:89:6f:a0:04:36:5c:d0:0e:21:7b:41:ae:17:81:86:9c:9e:
30:53:89:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DU76GcLJGB5vQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
Yjk5NzczNmMtMzA4My00ZTViLWExOTktOTQzMzZmNTUxMDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguGH+uNPiZEddaXc9xvH69NDgkuHL2aYWlSw
U5+KG4VUTWsrwp+wy+iYQ/ZgpUKvfwLTOhoufrFwP2EjPQ0siWPDSECXeA/hr42O
T323uk3tUz6dqR4Dr8dqKqbBdtZaBkvttgHR0XDbAhddR9PaIAMVtDMx0c4pJ9oB
Z/Z5xOCNuISuvfOnAC277hlTPrDDtJm4wixCKHdW3A2OYD11rPcEzeQXwS1tdgdq
4nk5pmsASqt0XCZwU2VVB8IuIAP95YYPr+IZRNbYa4Hp9Wmf+mm/hpw9VHFWbsBW
mCmJ2cE7EZTmEYjtMDeSpAGPoS7pcuvs+hcUzwrVcEf9SgeymQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIq6M/5zPz7MjXpLjxKvGnSzXqd3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODNhZmIwNjAtMzY5ZS0z
YzExLWEyYzQtMDUwMzdmZWE4ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoCkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM9P14mXtIlgNt7QgSUXKnY0Ek3n8ydLeB//tjqw/Wi/i3MRgQHjnRNx
bqg/fnRZvGl3Lb+0bY8RV3hxAGiT5DLbcbQwcebcjVtMD5frUacUmqtiAFE+YzHP
FpJqd7o1PtN5zA+bYEZr54lRjxdoxOcFFbN1BjeeD3XPaneboulUmvi7Zgi8ORTz
NYJ/BeF/yTqyg3yGeAev3vhiTHJc4ayYbZ+Pfo0Vt9cID41csPYrYBGhzCLuEG0Q
hNAys8S1YHmmXbR+llVvTCQuga0r2wAEJbMMgKhkm41k0U/aRFvy9pJkkelib87l
eISJb6AENlzQDiF7Qa4XgYacnjBTifI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:28:16 2025 by rpki-client