Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d1642c26-d4e7-3bae-8a67-50056aaa9d43.roa
File: d1642c26-d4e7-3bae-8a67-50056aaa9d43.roa (raw, json)
Hash identifier: NXPL6lC2I5XyXlOtOZ2aZFVSN5xYjzlVvzq64Ci8cRQ=
Subject key identifier: CF:25:13:58:3C:B0:66:C1:DA:F7:2B:81:4D:A4:8E:91:25:3F:FA:8E
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B324DBDF374040123BAC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d1642c26-d4e7-3bae-8a67-50056aaa9d43.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 66.189.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:32:4d:bd:f3:74:04:01:23:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=a8f143fa-9786-448f-b07e-ac5b8e6a2ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:60:49:cd:6f:23:04:92:67:6b:8e:b6:5d:
2a:ea:4a:10:d6:47:1d:dd:a6:87:0d:dd:ec:af:57:
09:54:6a:d0:53:1d:a0:63:35:fc:79:ab:a5:cb:c2:
52:38:46:29:cb:55:6b:f9:21:f2:e5:af:46:a6:4a:
63:56:fd:4b:c4:07:fc:7c:0a:12:77:38:34:7c:f7:
c1:8a:08:02:d3:24:98:9b:13:da:ba:8b:4e:28:2e:
be:e6:2a:a1:98:c1:49:b7:e9:f6:09:ea:72:39:e8:
01:0a:9a:68:9b:dc:85:7b:3f:b6:bd:5b:bf:4d:49:
e1:ff:13:05:d5:ba:2d:dc:67:a6:ce:a3:61:03:eb:
79:a4:f7:b7:9a:7c:83:d6:aa:dc:4e:b9:a0:c1:07:
e9:f2:22:6c:da:43:86:0e:5b:03:51:8c:c5:2e:26:
b3:62:27:bd:1e:97:a1:11:fe:ee:c6:48:db:49:43:
2d:33:cb:5c:4b:ea:ac:82:c7:80:11:2a:e8:ac:41:
9a:cd:c3:e4:a9:ba:0a:b9:c1:c9:f0:b4:e4:68:6d:
fe:45:f7:d8:28:fa:85:a4:44:da:af:ae:51:27:49:
d7:a1:3a:3f:01:f3:32:6b:99:3e:96:78:54:f3:b5:
c1:3a:8f:5a:f8:90:b9:75:fa:2a:26:85:76:61:af:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:25:13:58:3C:B0:66:C1:DA:F7:2B:81:4D:A4:8E:91:25:3F:FA:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d1642c26-d4e7-3bae-8a67-50056aaa9d43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.189.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:f0:7d:75:b0:76:73:06:9d:2e:20:ad:6a:1d:2e:58:e7:73:
2f:50:fd:6f:7f:ab:fc:fb:61:ba:ff:54:b5:6d:d1:ba:63:21:
4b:39:57:26:cc:87:97:e9:70:43:bb:96:4a:3e:8f:bf:5a:ec:
88:71:4f:f4:1b:f5:81:8e:c4:bb:90:ad:dd:34:55:f1:ba:e7:
ae:3b:59:25:9f:3c:f5:fa:fb:a4:77:a9:ec:41:2f:32:11:6d:
74:af:52:6c:97:59:cf:c3:e2:85:a3:79:01:1e:6c:ed:d1:44:
ed:c3:92:be:53:6b:22:27:9a:d5:3e:31:a3:ff:8b:39:89:31:
ee:1f:16:62:f1:34:95:1b:93:9a:91:d7:0e:e6:4d:ed:cf:6a:
34:4f:a7:82:58:2b:e2:eb:d2:4e:80:34:bb:ba:93:32:f6:4f:
c8:69:d8:9f:4b:1f:2c:f9:17:ff:69:ed:03:b0:6f:51:32:05:
69:75:b3:27:ff:70:a2:90:d8:3e:e8:78:08:54:5f:63:ed:4b:
d9:d6:08:37:a3:da:24:91:e8:30:7e:ef:41:8e:dc:3c:54:d9:
5c:04:8f:37:4b:33:aa:50:23:1e:27:c8:40:ca:19:a8:6f:e8:
bf:65:f6:1c:7f:b7:b7:94:26:ef:e1:6c:83:fc:33:7a:4d:b8:
3f:97:a2:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDezJNvfN0BAEjusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
YThmMTQzZmEtOTc4Ni00NDhmLWIwN2UtYWM1YjhlNmEyZWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaRgSc1vIwSSZ2uOtl0q6koQ1kcd3aaHDd3s
r1cJVGrQUx2gYzX8eauly8JSOEYpy1Vr+SHy5a9GpkpjVv1LxAf8fAoSdzg0fPfB
iggC0ySYmxPauotOKC6+5iqhmMFJt+n2CepyOegBCppom9yFez+2vVu/TUnh/xMF
1bot3GemzqNhA+t5pPe3mnyD1qrcTrmgwQfp8iJs2kOGDlsDUYzFLiazYie9Hpeh
Ef7uxkjbSUMtM8tcS+qsgseAESrorEGazcPkqboKucHJ8LTkaG3+RffYKPqFpETa
r65RJ0nXoTo/AfMya5k+lnhU87XBOo9a+JC5dfoqJoV2Ya/JOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8lE1g8sGbB2vcrgU2kjpElP/qOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDE2NDJjMjYtZDRlNy0z
YmFlLThhNjctNTAwNTZhYWE5ZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQr2DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL3wfXWwdnMGnS4grWodLljncy9Q/W9/q/z7Ybr/VLVt0bpjIUs5VybM
h5fpcEO7lko+j79a7IhxT/Qb9YGOxLuQrd00VfG65647WSWfPPX6+6R3qexBLzIR
bXSvUmyXWc/D4oWjeQEebO3RRO3Dkr5TayInmtU+MaP/izmJMe4fFmLxNJUbk5qR
1w7mTe3PajRPp4JYK+Lr0k6ANLu6kzL2T8hp2J9LHyz5F/9p7QOwb1EyBWl1syf/
cKKQ2D7oeAhUX2PtS9nWCDej2iSR6DB+70GO3DxU2VwEjzdLM6pQIx4nyEDKGahv
6L9l9hx/t7eUJu/hbIP8M3pNuD+XoiQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:24:07 2025 by rpki-client