Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/37d0f7d0-bcd9-3ed3-8719-896146ca3f99.roa
File: 37d0f7d0-bcd9-3ed3-8719-896146ca3f99.roa (raw, json)
Hash identifier: 5ViOYwBSz1ls5XnuYfqN7Al0aYDQrd8IwoiTv5D2T2Q=
Subject key identifier: 0C:F1:99:05:85:BA:3B:A6:D3:BC:3C:D2:18:81:39:B6:B3:A3:8B:41
Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial: 010D0C9F432858495638186EEB2A7DD81CCE9E10
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/37d0f7d0-bcd9-3ed3-8719-896146ca3f99.roa
Signing time: Fri 28 Mar 2025 10:06:22 +0000
ROA not before: Fri 28 Mar 2025 10:06:22 +0000
ROA not after: Thu 26 Jun 2025 10:06:22 +0000
asID: 199527
IP address blocks: 66.17.136.0/22 maxlen: 24
66.17.156.0/24 maxlen: 24
66.17.158.0/23 maxlen: 24
66.17.254.0/24 maxlen: 24
66.227.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:56:38:18:6e:eb:2a:7d:d8:1c:ce:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Validity
Not Before: Mar 28 10:06:22 2025 GMT
Not After : Jun 26 10:06:22 2025 GMT
Subject: CN=3d982c09-95ac-45a6-ae52-029bcefbb252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:30:bb:67:1e:67:b7:94:cf:4a:d3:cd:5b:
5b:0f:b0:b2:72:2a:bc:46:b4:ff:06:30:09:ed:6c:
ef:56:2f:2f:ab:ab:13:bb:22:ee:e1:55:a9:51:41:
2c:47:94:9e:02:16:23:6f:2a:bb:d3:e5:df:46:ca:
27:ff:da:ac:64:9a:bf:69:0c:f0:f7:5d:ae:0c:60:
d6:b7:02:42:02:c3:5b:46:84:88:a5:c4:ba:46:9f:
96:fb:90:6d:b6:02:fa:4a:a2:6f:56:bb:76:40:df:
11:8c:84:f0:f6:e9:90:0a:e0:16:cb:2b:4c:d6:bb:
5e:01:2b:ad:ab:ec:be:e0:68:be:3a:11:88:38:04:
c2:c3:eb:ca:3f:b4:b9:d4:c8:62:a4:8d:98:97:0a:
ac:b9:62:9c:d4:5c:32:89:68:fd:fa:b4:74:da:b9:
a0:8c:6c:f5:2f:bb:42:df:a6:a7:90:e5:07:07:29:
57:45:6c:34:ef:a5:90:7a:e8:d1:d7:62:2e:5f:6b:
7a:8f:f3:e4:93:58:ec:5a:9b:fa:e3:24:e8:0a:b7:
3a:dd:ee:f5:11:0c:8a:c4:df:38:5e:fc:21:e2:d7:
dd:91:70:31:bf:57:b1:c8:6c:49:6b:db:87:13:d6:
d4:94:5d:dc:01:c5:81:27:3c:a1:1d:d6:e4:7f:75:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F1:99:05:85:BA:3B:A6:D3:BC:3C:D2:18:81:39:B6:B3:A3:8B:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/37d0f7d0-bcd9-3ed3-8719-896146ca3f99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl
X509v3 Authority Key Identifier:
keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
sbgp-ipAddrBlock: critical
IPv4:
66.17.136.0/22
66.17.156.0/24
66.17.158.0/23
66.17.254.0/24
66.227.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:98:d0:52:83:24:61:e7:ed:60:5a:f1:48:d7:8d:7f:c1:92:
84:a4:29:7d:3d:bc:cd:66:63:b2:c3:12:48:c9:87:50:0b:62:
75:f1:84:38:da:e0:be:ff:a5:92:0c:40:eb:5f:55:7b:76:7e:
4b:69:e3:e0:a2:06:00:d8:60:28:0d:72:a3:62:9c:25:6d:73:
e9:26:cb:71:7e:77:28:b5:23:f3:f4:1a:cb:82:89:0f:28:35:
34:b4:67:71:f1:b4:33:af:bf:ed:1f:f0:8e:8d:c7:ad:ff:ae:
0d:24:41:39:13:a5:14:0f:c2:cc:2f:45:d9:e1:ad:27:ad:13:
eb:c7:48:05:ad:6c:32:3f:96:34:4a:84:e0:28:68:55:d5:29:
75:0f:7e:a8:fe:20:12:63:14:8e:3d:25:ed:90:a1:d9:7a:5d:
48:e4:8c:6f:e0:7d:e3:52:36:7f:73:98:fc:fb:3f:90:5e:a5:
2d:44:9f:d2:ec:3a:d6:a0:d4:05:86:56:06:d2:e4:fb:e4:f0:
84:2b:48:f2:15:9b:ed:eb:27:82:82:e1:a3:ed:cc:02:e9:e1:
dd:5f:ed:01:8e:6d:db:62:da:79:24:6f:3a:3c:0c:53:c3:6d:
fb:ac:08:d0:60:1d:44:8e:e7:36:0e:c3:73:f4:38:44:66:62:
3f:e1:86:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:15:24 2025 by rpki-client