Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa
File: afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa (raw, json)
Hash identifier: tk+qANR8j1f5erVRkK6PRrJEvvknqYxum+i9QLc5J9Q=
Subject key identifier: 17:FE:13:92:94:AA:31:1E:49:83:BB:51:F3:9E:50:A1:2F:4E:15:32
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F432858484D758714A7A89695E8FB8698
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 398351
IP address blocks: 66.51.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:87:14:a7:a8:96:95:e8:fb:86:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=17f7aaaf-ce43-4120-98b0-4c66d176f8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bf:1a:40:6d:ea:89:01:d7:7e:86:ba:65:e5:
c0:eb:fa:1c:db:23:99:2f:a2:7e:e0:30:7f:18:6d:
59:40:60:a1:7d:53:98:2b:d8:6f:ea:dd:da:a3:d7:
99:29:77:76:54:13:a2:37:b6:ec:a9:4a:50:a8:0f:
ec:f6:83:2d:d5:ee:56:de:40:75:e0:08:59:14:c7:
7e:04:61:44:01:66:39:37:b9:85:1f:2a:0b:cb:fd:
96:eb:2a:6b:ff:00:9c:7c:6b:3b:dd:f1:a8:0b:73:
f2:4b:69:82:24:f9:ac:b4:56:6d:46:94:5c:0d:db:
c6:20:89:05:e4:2e:3c:91:c7:23:d0:40:16:27:8e:
cf:6c:b5:f3:fd:33:25:e9:f4:9d:3d:a9:ce:28:0f:
c8:31:35:ea:9d:64:56:c0:42:ca:ed:6c:f2:2f:90:
19:ad:83:1d:47:e9:8a:c6:88:85:4c:f0:54:18:da:
de:91:79:67:c4:cc:95:e9:f1:b4:8a:a7:bf:09:d7:
c8:7e:73:79:07:9a:73:57:b6:76:dd:27:09:47:1a:
7a:c7:17:a2:48:67:e5:a7:05:74:1c:55:f7:98:51:
53:7c:40:e0:8d:1a:9e:42:99:47:01:6e:10:a5:4c:
80:ed:36:76:ff:7c:6f:2b:ea:20:02:91:38:18:d3:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FE:13:92:94:AA:31:1E:49:83:BB:51:F3:9E:50:A1:2F:4E:15:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
66.51.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:39:c1:8d:88:52:bb:10:d3:4f:df:2a:e3:24:a3:52:22:93:
0f:02:94:91:c4:c8:5b:ee:92:4b:cb:7f:c0:88:47:71:a8:a6:
6b:ae:da:0e:c7:e1:69:f9:29:71:f3:0d:ce:9d:37:5d:a6:0c:
64:b6:ff:b1:9a:d7:07:da:59:a3:f7:c7:26:ab:b8:8d:cf:16:
29:61:ea:56:47:9f:3a:6a:64:65:84:b9:e0:4d:42:63:fa:32:
e7:fd:5f:6b:0a:ff:b4:26:d8:bb:8c:ac:91:46:81:5d:cd:9e:
07:80:70:9f:94:db:7e:4a:3f:c9:b0:44:3d:2f:a4:78:9e:73:
c1:43:45:76:90:cc:bd:8d:2e:03:7a:a4:f5:2f:52:be:3d:9d:
a0:82:d7:84:5a:db:1a:03:06:d1:66:80:1b:1b:23:52:ca:65:
f1:23:15:0d:1d:37:f1:3c:09:b2:91:83:81:95:e1:90:cc:4a:
29:02:fb:23:01:c8:a8:f8:e5:ee:31:2a:a5:41:d5:68:23:ce:
d8:42:82:50:a2:3d:29:d6:f5:12:dd:99:83:fb:6f:71:93:b5:
be:18:ac:9f:fa:48:70:89:cc:b1:75:8e:b3:c1:43:5d:de:d9:
7a:d2:19:88:cf:f6:b5:47:8a:f4:f3:b3:68:60:8c:53:da:48:
7a:9f:55:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdYcUp6iWlej7hpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
MTdmN2FhYWYtY2U0My00MTIwLTk4YjAtNGM2NmQxNzZmOGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg78aQG3qiQHXfoa6ZeXA6/oc2yOZL6J+4DB/
GG1ZQGChfVOYK9hv6t3ao9eZKXd2VBOiN7bsqUpQqA/s9oMt1e5W3kB14AhZFMd+
BGFEAWY5N7mFHyoLy/2W6ypr/wCcfGs73fGoC3PyS2mCJPmstFZtRpRcDdvGIIkF
5C48kccj0EAWJ47PbLXz/TMl6fSdPanOKA/IMTXqnWRWwELK7WzyL5AZrYMdR+mK
xoiFTPBUGNrekXlnxMyV6fG0iqe/CdfIfnN5B5pzV7Z23ScJRxp6xxeiSGflpwV0
HFX3mFFTfEDgjRqeQplHAW4QpUyA7TZ2/3xvK+ogApE4GNOpjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBf+E5KUqjEeSYO7UfOeUKEvThUyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvYWZjYzE5NjMtMGI1Yi0z
NjY5LThkNWQtNDg1Yjc3YWEzYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjOUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ45wY2IUrsQ00/fKuMko1Iikw8ClJHEyFvukkvLf8CIR3Gopmuu2g7H
4Wn5KXHzDc6dN12mDGS2/7Ga1wfaWaP3xyaruI3PFilh6lZHnzpqZGWEueBNQmP6
Muf9X2sK/7Qm2LuMrJFGgV3NngeAcJ+U235KP8mwRD0vpHiec8FDRXaQzL2NLgN6
pPUvUr49naCC14Ra2xoDBtFmgBsbI1LKZfEjFQ0dN/E8CbKRg4GV4ZDMSikC+yMB
yKj45e4xKqVB1WgjzthCglCiPSnW9RLdmYP7b3GTtb4YrJ/6SHCJzLF1jrPBQ13e
2XrSGYjP9rVHivTzs2hgjFPaSHqfVRo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:14 2025 by rpki-client