Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/f479998a-2c3e-3951-8579-6a3e9079ce11.roa
File: f479998a-2c3e-3951-8579-6a3e9079ce11.roa (raw, json)
Hash identifier: 20mtec4eDxnKOGIvleVhtr7bDkbf58cpO1ApAAGbl2s=
Subject key identifier: 1E:AA:54:0B:03:B6:86:0A:B3:AD:36:A1:74:F4:45:3C:F6:8B:D7:31
Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial: 010D0C9F432858493243E530494393F9EE153240
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/f479998a-2c3e-3951-8579-6a3e9079ce11.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 396417
IP address blocks: 66.203.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e5:30:49:43:93:f9:ee:15:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=e92e7fad-32a2-41c9-bf0f-2a92e66cca8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:2a:91:48:5f:96:ff:b5:4a:09:85:25:bf:
2c:41:d5:06:cf:4a:f2:4f:d4:cb:c1:dd:a7:f9:29:
ad:ed:36:d6:8f:78:f4:1e:90:02:ce:fc:15:11:21:
4c:03:9f:fd:00:0e:1e:61:2c:ae:14:65:fb:d8:1c:
fe:da:5a:52:6f:de:cc:36:bb:2f:99:d3:ff:a9:22:
61:98:0b:b9:4e:2c:6c:33:46:0e:f2:4b:51:db:2f:
89:55:54:6b:26:60:c5:b6:01:af:67:c2:a5:af:48:
28:38:ca:b1:cc:9f:73:26:f6:1d:c6:79:60:40:9f:
12:23:34:6f:c6:b3:29:5e:99:7d:01:72:5e:48:ed:
9f:f3:99:69:cd:7d:a8:b2:28:ba:b8:95:43:8d:89:
80:35:61:82:25:7b:28:11:9f:4a:af:c3:c4:30:c6:
91:10:fc:68:6d:42:8a:13:f6:44:1d:0d:5c:ff:23:
2e:84:bf:1f:51:09:fd:a4:b0:20:26:cf:fa:26:8b:
1f:17:51:46:c4:b1:e5:e6:2f:24:1f:69:2c:75:74:
0b:9c:ec:50:2d:4f:3d:59:43:65:fb:79:74:58:82:
06:fc:14:9c:83:d2:5a:2d:de:ae:c7:cf:87:36:8e:
31:08:cc:85:1d:1b:8a:3d:54:1f:2b:60:c5:f6:28:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AA:54:0B:03:B6:86:0A:B3:AD:36:A1:74:F4:45:3C:F6:8B:D7:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/f479998a-2c3e-3951-8579-6a3e9079ce11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
X509v3 Authority Key Identifier:
keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
sbgp-ipAddrBlock: critical
IPv4:
66.203.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:cb:e4:c0:9d:fd:3f:b9:3d:ec:5c:f0:61:4e:21:6e:39:d3:
6f:df:c7:19:e7:1d:7c:7c:1f:9f:ff:dc:e6:8d:6a:43:ec:26:
b3:ba:43:57:37:20:35:c2:cb:2e:ca:7e:5e:b7:64:19:a6:3f:
16:69:46:da:43:01:b7:19:a4:ad:ea:34:99:1e:92:e2:f9:01:
ed:0d:ea:db:7f:e0:18:11:52:3f:80:d6:16:df:21:45:25:57:
bd:94:e3:fb:12:ec:bb:23:98:0e:8f:a2:a2:09:34:2a:5c:af:
31:f8:b2:d9:19:84:35:dc:2d:1a:5f:47:6b:29:f2:78:94:6e:
c2:0d:32:02:71:cc:ad:0b:99:05:0c:5d:90:ad:09:8c:76:f7:
c3:cc:77:e2:87:10:4a:9f:ac:64:66:f5:89:bb:60:b8:dc:ca:
d9:b9:d7:d9:78:c7:33:7f:f6:7c:13:a1:70:80:f6:e5:40:cd:
2e:b3:f0:cb:0f:fd:0d:31:27:ab:41:cb:33:aa:59:d3:75:ed:
63:66:b3:80:71:64:44:1e:52:79:f6:ee:f5:9f:56:b9:d5:7f:
d9:c1:e9:2d:c5:11:47:97:41:34:24:04:ad:81:08:8d:01:7c:
d1:ba:1c:64:17:bb:df:d5:6b:2f:ea:98:dc:f0:91:b1:bf:5c:
fa:82:58:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+UwSUOT+e4VMkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx
MTI3MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZTkyZTdmYWQtMzJhMi00MWM5LWJmMGYtMmE5MmU2NmNjYThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyREqkUhflv+1SgmFJb8sQdUGz0ryT9TLwd2n
+Smt7TbWj3j0HpACzvwVESFMA5/9AA4eYSyuFGX72Bz+2lpSb97MNrsvmdP/qSJh
mAu5TixsM0YO8ktR2y+JVVRrJmDFtgGvZ8Klr0goOMqxzJ9zJvYdxnlgQJ8SIzRv
xrMpXpl9AXJeSO2f85lpzX2osii6uJVDjYmANWGCJXsoEZ9Kr8PEMMaREPxobUKK
E/ZEHQ1c/yMuhL8fUQn9pLAgJs/6JosfF1FGxLHl5i8kH2ksdXQLnOxQLU89WUNl
+3l0WIIG/BScg9JaLd6ux8+HNo4xCMyFHRuKPVQfK2DF9iidUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6qVAsDtoYKs602oXT0RTz2i9cxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0
OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvZjQ3OTk5OGEtMmMzZS0z
OTUxLTg1NzktNmEzZTkwNzljZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl
ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz
MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl
ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQstyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzL5MCd/T+5Pexc8GFOIW4502/fxxnnHXx8H5//3OaNakPsJrO6Q1c3
IDXCyy7Kfl63ZBmmPxZpRtpDAbcZpK3qNJkekuL5Ae0N6tt/4BgRUj+A1hbfIUUl
V72U4/sS7LsjmA6PoqIJNCpcrzH4stkZhDXcLRpfR2sp8niUbsINMgJxzK0LmQUM
XZCtCYx298PMd+KHEEqfrGRm9Ym7YLjcytm519l4xzN/9nwToXCA9uVAzS6z8MsP
/Q0xJ6tByzOqWdN17WNms4BxZEQeUnn27vWfVrnVf9nB6S3FEUeXQTQkBK2BCI0B
fNG6HGQXu9/Vay/qmNzwkbG/XPqCWPg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:25 2025 by rpki-client