Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f521fa28-c00a-3a89-9892-db37105943c5.roa
File: f521fa28-c00a-3a89-9892-db37105943c5.roa (raw, json)
Hash identifier: wkmOOtEyJnWNJK/9cp3rV8gtrwsRyOVc0DFhM17qWmI=
Subject key identifier: D2:47:C9:B1:E7:8C:83:2B:26:7C:0C:43:08:BE:88:94:56:4C:A8:5A
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037A9932C3BD8B08BC3CE080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f521fa28-c00a-3a89-9892-db37105943c5.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16787
IP address blocks: 66.190.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:99:32:c3:bd:8b:08:bc:3c:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=f542fbfb-2c9a-4b9f-ba58-8fc28ec0bc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:8a:7d:52:1d:5f:61:42:8d:51:69:0e:a0:
bd:63:b9:21:9a:9f:37:a3:83:09:21:29:6f:fe:46:
32:66:d7:d5:12:da:22:3f:96:26:94:90:32:56:5c:
43:51:da:bc:3a:1a:35:90:a7:bf:a6:c3:d4:cb:01:
f7:20:44:62:fe:10:6e:8c:b5:c5:97:14:94:c3:54:
15:31:07:51:d6:0a:95:0e:b5:d1:3b:44:51:93:29:
db:6a:be:c7:82:2f:c1:d6:e3:a0:72:44:21:2e:cc:
96:f9:6a:9e:32:95:d2:14:bb:11:af:4f:82:b5:23:
9c:2b:2e:1a:00:93:4e:78:d6:5c:77:84:9d:8a:95:
a0:ae:22:ed:84:70:fc:e6:74:88:6c:76:ec:93:1a:
be:c7:d7:76:1b:df:c5:3a:21:33:1c:87:c5:1f:d4:
24:0e:9b:7e:68:d1:e5:f3:09:e4:7c:91:d9:7d:53:
27:bb:01:5c:f3:06:9f:c3:7b:1f:47:c7:80:93:6d:
15:99:d4:ab:03:dd:e2:f7:c5:f9:04:43:f2:60:87:
6f:45:47:46:7d:d7:ff:80:21:48:8f:9b:98:f0:48:
54:2d:86:f1:c9:cb:ef:a6:dd:81:08:6b:20:80:11:
3e:e5:99:44:b2:66:7c:1b:c0:a5:7f:e5:fd:1e:25:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:C9:B1:E7:8C:83:2B:26:7C:0C:43:08:BE:88:94:56:4C:A8:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f521fa28-c00a-3a89-9892-db37105943c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.190.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:be:4b:aa:c5:17:fa:b9:ed:c6:cf:d6:17:c7:83:d4:93:14:
5e:7a:45:c5:93:db:d5:1c:e7:d1:d2:6f:4a:4f:12:87:b6:47:
b6:10:e9:5d:4a:79:c2:32:f1:49:39:a7:e1:3c:1b:46:26:5f:
46:6d:97:93:fe:0d:21:5f:d3:8a:8e:fd:36:62:89:ce:c7:4a:
c3:0f:f3:e4:a3:7d:20:28:88:de:ea:42:86:d9:d1:d5:9c:00:
f7:08:4e:80:34:94:aa:c4:6e:19:7c:0c:9c:04:4e:54:69:34:
9b:c4:25:d5:cc:08:be:17:5e:c8:79:43:15:ac:d8:cb:e4:47:
d5:f5:8c:15:d2:f2:d1:78:7d:5b:bb:03:c0:f1:92:22:b8:47:
b0:f3:44:ef:b6:51:54:b3:0c:be:be:5c:7b:5f:8d:5e:dd:21:
c5:b6:8c:a8:57:7c:d3:99:49:62:a2:1a:29:27:8d:a3:e3:85:
a9:38:fa:73:7f:2f:22:98:d1:f4:36:3f:cf:a4:0d:78:1d:c0:
08:a8:69:fe:63:21:5b:34:4c:e0:b9:c5:30:c3:84:de:d2:05:
c6:a7:06:95:74:f9:7c:50:81:89:32:f9:50:01:98:92:44:17:
5e:ec:6c:64:4b:7c:73:8a:96:e1:02:f1:29:de:83:80:9a:71:
72:36:97:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDepkyw72LCLw84IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZjU0MmZiZmItMmM5YS00YjlmLWJhNTgtOGZjMjhlYzBiYzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3OKfVIdX2FCjVFpDqC9Y7khmp83o4MJISlv
/kYyZtfVEtoiP5YmlJAyVlxDUdq8Oho1kKe/psPUywH3IERi/hBujLXFlxSUw1QV
MQdR1gqVDrXRO0RRkynbar7Hgi/B1uOgckQhLsyW+WqeMpXSFLsRr0+CtSOcKy4a
AJNOeNZcd4SdipWgriLthHD85nSIbHbskxq+x9d2G9/FOiEzHIfFH9QkDpt+aNHl
8wnkfJHZfVMnuwFc8wafw3sfR8eAk20VmdSrA93i98X5BEPyYIdvRUdGfdf/gCFI
j5uY8EhULYbxycvvpt2BCGsggBE+5ZlEsmZ8G8Clf+X9HiXxZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJHybHnjIMrJnwMQwi+iJRWTKhaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjUyMWZhMjgtYzAwYS0z
YTg5LTk4OTItZGIzNzEwNTk0M2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQr68MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGy+S6rFF/q57cbP1hfHg9STFF56RcWT29Uc59HSb0pPEoe2R7YQ6V1K
ecIy8Uk5p+E8G0YmX0Ztl5P+DSFf04qO/TZiic7HSsMP8+SjfSAoiN7qQobZ0dWc
APcIToA0lKrEbhl8DJwETlRpNJvEJdXMCL4XXsh5QxWs2MvkR9X1jBXS8tF4fVu7
A8DxkiK4R7DzRO+2UVSzDL6+XHtfjV7dIcW2jKhXfNOZSWKiGiknjaPjhak4+nN/
LyKY0fQ2P8+kDXgdwAioaf5jIVs0TOC5xTDDhN7SBcanBpV0+XxQgYky+VABmJJE
F17sbGRLfHOKluEC8Sneg4CacXI2l0o=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:43:29 2025 by rpki-client