Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20f995fd-154b-3856-aa41-3a06888e2b0e.roa
File: 20f995fd-154b-3856-aa41-3a06888e2b0e.roa (raw, json)
Hash identifier: Su1YZCPwBZeEAnjUJ6+WFKJVF54fY6yyyLVRA2xXfYQ=
Subject key identifier: 39:5E:9B:4E:BF:6F:23:A6:F1:07:72:3D:7C:C8:02:61:85:83:79:D0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00889892F14346F36E01C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20f995fd-154b-3856-aa41-3a06888e2b0e.roa
Signing time: Wed 19 Feb 2025 19:38:06 +0000
ROA not before: Wed 19 Feb 2025 19:38:06 +0000
ROA not after: Tue 20 May 2025 18:38:06 +0000
asID: 44477
IP address blocks: 166.1.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:08:89:89:2f:14:34:6f:36:e0:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:38:06 2025 GMT
Not After : May 20 18:38:06 2025 GMT
Subject: CN=0cd81a99-8f04-4890-a768-c1fb7368beb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:f2:0e:12:19:79:48:6e:4c:49:df:3d:3e:
33:81:12:b9:b8:ac:d4:b8:48:03:bb:95:a1:7f:15:
e9:d4:da:7e:e6:9c:82:2d:dc:18:ce:31:2d:f2:49:
83:fb:e5:7b:dd:e0:e7:6e:2f:0a:f6:55:63:bf:42:
14:df:dc:e8:f0:ad:be:e6:36:ef:22:19:ef:e7:90:
29:96:ae:54:8b:b1:f3:52:f6:23:37:bf:83:64:85:
5d:f4:3c:89:e5:72:02:8d:4c:da:de:e9:72:17:07:
6b:ef:f7:a6:91:73:1e:8e:23:76:14:1b:81:08:ad:
69:a8:47:dd:bf:07:13:85:ca:e0:e0:64:33:f0:34:
90:20:19:33:6b:37:14:44:fc:7c:29:31:84:59:b3:
ef:d3:51:7f:9b:b8:70:09:79:ce:4b:0e:10:56:f7:
9b:58:06:1a:8a:9a:23:aa:f5:4d:91:97:93:e2:52:
65:88:3b:f7:cd:a3:c4:8f:83:49:2e:e7:02:67:f0:
01:a2:09:ca:d8:c4:f4:7f:3c:12:b2:d9:2d:ff:27:
c0:96:2b:cb:49:56:76:5a:54:68:49:ce:ac:47:fe:
25:26:e0:06:1a:79:26:e3:31:04:db:e0:9a:64:51:
0d:f3:52:d0:16:73:8b:2f:6e:48:71:25:90:fd:39:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5E:9B:4E:BF:6F:23:A6:F1:07:72:3D:7C:C8:02:61:85:83:79:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20f995fd-154b-3856-aa41-3a06888e2b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:54:76:ae:8e:c5:09:ec:19:84:92:40:4a:16:20:2b:37:ae:
9e:c6:a9:00:b4:22:76:fb:9a:ef:28:06:a6:21:c6:c8:db:e6:
9c:9d:9e:e0:9d:da:d5:c5:ef:69:ea:13:28:38:bd:59:1c:09:
21:e4:28:c5:f5:c7:d3:be:32:c4:04:5f:65:e1:04:c0:d5:cc:
73:89:0c:86:07:98:8d:88:d1:4f:bf:7e:0a:ae:a6:9b:27:94:
39:8d:46:1b:cb:27:06:7a:cd:d4:98:57:b9:15:f5:a2:55:e7:
5c:38:c3:99:a5:a9:87:a2:2e:74:f9:fd:da:04:42:ae:0e:3e:
c8:8d:3f:30:83:b2:65:04:72:25:8f:9e:e7:30:76:72:ec:f1:
02:a8:c5:c5:45:ae:2b:c1:78:2b:a4:38:9c:c8:b6:03:13:ab:
09:7d:14:aa:6b:31:4f:cb:0c:8d:43:fc:38:ac:d3:15:17:a2:
54:83:62:15:05:b8:c0:0a:ce:23:6e:86:35:bb:fb:d3:7d:22:
9e:57:97:61:ab:c9:53:ff:a2:44:a9:c9:4c:4c:ea:39:cf:f8:
2e:53:af:ea:49:16:db:1c:5e:cd:3c:1e:1a:87:74:88:23:58:
df:a8:25:e8:d7:80:d2:f9:f3:94:f5:36:75:02:f5:3c:87:26:
b4:57:ac:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwCImJLxQ0bzbgHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxOTE5MzgwNloXDTI1MDUyMDE4MzgwNlowLzEtMCsGA1UEAxMk
MGNkODFhOTktOGYwNC00ODkwLWE3NjgtYzFmYjczNjhiZWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArETyDhIZeUhuTEnfPT4zgRK5uKzUuEgDu5Wh
fxXp1Np+5pyCLdwYzjEt8kmD++V73eDnbi8K9lVjv0IU39zo8K2+5jbvIhnv55Ap
lq5Ui7HzUvYjN7+DZIVd9DyJ5XICjUza3ulyFwdr7/emkXMejiN2FBuBCK1pqEfd
vwcThcrg4GQz8DSQIBkzazcURPx8KTGEWbPv01F/m7hwCXnOSw4QVvebWAYaipoj
qvVNkZeT4lJliDv3zaPEj4NJLucCZ/ABognK2MT0fzwSstkt/yfAlivLSVZ2WlRo
Sc6sR/4lJuAGGnkm4zEE2+CaZFEN81LQFnOLL25IcSWQ/TkxdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlem06/byOm8QdyPXzIAmGFg3nQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjBmOTk1ZmQtMTU0Yi0z
ODU2LWFhNDEtM2EwNjg4OGUyYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANUdq6OxQnsGYSSQEoWICs3rp7GqQC0Inb7mu8oBqYhxsjb5pydnuCd
2tXF72nqEyg4vVkcCSHkKMX1x9O+MsQEX2XhBMDVzHOJDIYHmI2I0U+/fgquppsn
lDmNRhvLJwZ6zdSYV7kV9aJV51w4w5mlqYeiLnT5/doEQq4OPsiNPzCDsmUEciWP
nucwdnLs8QKoxcVFrivBeCukOJzItgMTqwl9FKprMU/LDI1D/Dis0xUXolSDYhUF
uMAKziNuhjW7+9N9Ip5Xl2GryVP/okSpyUxM6jnP+C5Tr+pJFtscXs08HhqHdIgj
WN+oJejXgNL585T1NnUC9TyHJrRXrK0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:14 2025 by rpki-client