Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1df4c2e7-dc7e-389b-bf7b-b18ae8d7cf0f.roa
File: 1df4c2e7-dc7e-389b-bf7b-b18ae8d7cf0f.roa (raw, json)
Hash identifier: BypI4BWY6hcDnwxiwZcyBATx20qdcguEq8UOL9bp4jk=
Subject key identifier: CA:6F:C9:D6:DC:39:A0:1C:C6:E1:78:CC:97:A8:36:A8:0A:86:C8:DD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858492E13C96EEAB5828D70D32D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1df4c2e7-dc7e-389b-bf7b-b18ae8d7cf0f.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 138997
IP address blocks: 108.165.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c9:6e:ea:b5:82:8d:70:d3:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=d032be4c-fbfb-4697-b6de-fe20b524fbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:92:65:5a:3e:58:da:b9:ed:eb:db:e7:6a:
aa:46:5a:07:1c:14:ac:71:35:bb:10:5f:39:c0:75:
32:f5:65:6b:23:57:d7:c8:9c:6a:ef:4d:79:76:fd:
20:ce:49:72:0c:db:a6:87:e1:b0:ac:62:64:eb:6f:
46:57:63:dd:97:11:59:79:dd:0e:0b:b5:d2:26:e4:
e6:b0:b0:ca:cb:71:90:ee:ee:43:55:e4:bb:2d:4c:
78:5e:5c:7a:0d:e7:21:d1:0b:dc:83:3e:2d:0a:50:
7e:4d:af:5e:43:04:12:08:1a:12:11:30:1e:6e:a8:
f9:8e:71:46:a2:89:3f:db:fa:44:7c:5a:06:a8:c1:
15:c9:5c:67:b3:cd:9c:38:b1:4c:dc:48:74:a1:7b:
24:4d:04:77:49:72:53:2b:41:11:08:e4:e4:b2:ec:
ca:1b:46:15:e7:4c:8f:3e:a6:62:23:2a:fa:16:68:
49:c4:75:38:ee:18:1c:c5:4e:5f:a9:e5:75:bc:4a:
fa:6f:3f:18:e6:0e:62:42:b5:ed:ce:d3:9c:7f:38:
e8:0d:32:66:a9:4e:13:43:f1:6b:3d:3e:c0:c6:93:
c1:fc:a5:43:42:e0:cd:84:b6:3b:9e:b4:4a:04:95:
ab:4c:f7:2e:cb:59:3f:bc:7b:54:cc:aa:31:07:78:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:C9:D6:DC:39:A0:1C:C6:E1:78:CC:97:A8:36:A8:0A:86:C8:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1df4c2e7-dc7e-389b-bf7b-b18ae8d7cf0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:1d:43:79:9e:d8:33:61:e1:20:47:df:75:69:4b:c4:1c:48:
37:36:c0:e1:b4:9c:44:c4:84:29:0f:e3:45:85:32:64:c4:60:
10:25:79:8b:9a:8b:94:26:95:ea:e9:2d:ba:0b:64:68:07:9c:
d8:2a:2e:f9:08:48:42:9d:e9:ab:44:6d:6c:6a:ee:f6:25:01:
f4:89:6d:e5:ee:0f:ea:53:31:ae:ff:eb:92:6b:fc:14:db:ad:
ae:d6:9d:f2:28:2a:2a:6a:d1:86:5f:06:84:8f:2d:88:8d:32:
41:d6:20:3a:47:fa:70:57:71:cc:b6:98:9a:1a:94:07:b9:56:
29:15:aa:71:28:a1:e4:36:5d:54:ad:19:d1:2d:c4:3e:5f:19:
db:d6:b9:0d:ff:cc:78:de:b3:b2:e4:78:06:12:27:e8:50:66:
3c:73:b8:3f:96:4d:cb:68:d2:12:74:ca:cd:c6:15:4e:8b:e7:
09:7c:5e:7f:3e:c0:37:8b:80:27:db:3d:e8:c6:aa:1f:a2:17:
ed:ab:8d:62:39:ec:18:3f:45:67:af:1d:0b:ef:3a:25:ec:99:
82:28:3a:26:0a:ff:03:f5:89:1d:aa:93:7c:b4:73:1e:6e:a1:
0a:80:b8:51:8e:f2:e0:16:d4:58:10:2c:05:db:5d:1d:54:4c:
a6:e0:b5:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8lu6rWCjXDTLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZDAzMmJlNGMtZmJmYi00Njk3LWI2ZGUtZmUyMGI1MjRmYmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8iSZVo+WNq57evb52qqRloHHBSscTW7EF85
wHUy9WVrI1fXyJxq7015dv0gzklyDNumh+GwrGJk629GV2PdlxFZed0OC7XSJuTm
sLDKy3GQ7u5DVeS7LUx4Xlx6Dech0Qvcgz4tClB+Ta9eQwQSCBoSETAebqj5jnFG
ook/2/pEfFoGqMEVyVxns82cOLFM3Eh0oXskTQR3SXJTK0ERCOTksuzKG0YV50yP
PqZiIyr6FmhJxHU47hgcxU5fqeV1vEr6bz8Y5g5iQrXtztOcfzjoDTJmqU4TQ/Fr
PT7AxpPB/KVDQuDNhLY7nrRKBJWrTPcuy1k/vHtUzKoxB3jtfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpvydbcOaAcxuF4zJeoNqgKhsjdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWRmNGMyZTctZGM3ZS0z
ODliLWJmN2ItYjE4YWU4ZDdjZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKU4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQdQ3me2DNh4SBH33VpS8QcSDc2wOG0nETEhCkP40WFMmTEYBAleYua
i5QmlerpLboLZGgHnNgqLvkISEKd6atEbWxq7vYlAfSJbeXuD+pTMa7/65Jr/BTb
ra7WnfIoKipq0YZfBoSPLYiNMkHWIDpH+nBXccy2mJoalAe5VikVqnEooeQ2XVSt
GdEtxD5fGdvWuQ3/zHjes7LkeAYSJ+hQZjxzuD+WTcto0hJ0ys3GFU6L5wl8Xn8+
wDeLgCfbPejGqh+iF+2rjWI57Bg/RWevHQvvOiXsmYIoOiYK/wP1iR2qk3y0cx5u
oQqAuFGO8uAW1FgQLAXbXR1UTKbgtf4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:52:54 2025 by rpki-client