Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b0890896-121c-3a15-9770-868d23d5ce6f.roa
File: b0890896-121c-3a15-9770-868d23d5ce6f.roa (raw, json)
Hash identifier: gd/PTFWNefl8OckPMtG5uR2Qfuiz/n9iC5GO86NCv10=
Subject key identifier: F2:F3:6A:2B:E3:1E:AA:13:C6:4B:5F:41:10:1F:7E:C4:45:D4:47:79
Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial: 010D0C9F432858494CC94EC699E19D8BA2E2C400
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b0890896-121c-3a15-9770-868d23d5ce6f.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 19151
IP address blocks: 66.249.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4e:c6:99:e1:9d:8b:a2:e2:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=23666307-95f6-417e-8ba6-ec1fc9b39a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:f7:92:9b:d7:87:df:64:46:e0:46:7a:c0:
7c:50:96:7e:9c:20:10:86:df:ba:66:04:db:2e:d3:
19:2b:e1:11:c7:0a:84:57:94:ae:ee:84:04:c2:f7:
87:97:1d:3c:79:8c:27:36:eb:4a:ad:3f:ba:d4:66:
32:72:61:17:c0:70:d9:6e:09:ca:c7:ce:1e:b0:ff:
1a:6f:b8:e4:26:3f:9b:1b:8a:f3:eb:67:e1:c4:7d:
ca:f9:31:7a:87:0e:12:89:56:fd:e9:69:32:1c:d3:
14:f4:9f:24:e7:16:42:61:7f:56:88:01:e8:84:ab:
5b:4a:55:a4:ef:48:b7:a9:c8:0c:de:af:78:70:8d:
bc:c9:7e:f1:98:29:21:40:71:20:23:52:3e:99:e8:
ab:47:2f:19:22:9f:61:ec:56:c5:61:ba:41:dc:54:
96:0e:4c:10:83:84:87:4e:b9:13:78:12:cb:15:8c:
9e:8d:73:b6:ce:b2:a1:8e:cb:d2:26:14:ff:e4:ce:
9b:e5:37:a6:fe:f6:84:99:c5:6e:bc:9a:f3:94:04:
70:76:a5:03:14:7b:82:16:09:c1:d9:5f:1f:05:88:
0d:96:94:8b:97:41:8b:e0:5b:87:94:8f:18:a1:8e:
5b:19:6d:4e:ab:85:4a:69:69:a7:2b:35:6f:f4:74:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:6A:2B:E3:1E:AA:13:C6:4B:5F:41:10:1F:7E:C4:45:D4:47:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b0890896-121c-3a15-9770-868d23d5ce6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
X509v3 Authority Key Identifier:
keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:7f:63:a2:dc:93:2e:fb:b7:2a:75:d5:10:b5:88:b2:db:ee:
e3:cb:00:8a:70:97:42:1f:b0:a6:35:01:ca:0d:27:8a:21:eb:
25:aa:12:1c:fb:ae:7c:30:d9:39:e3:95:55:08:0f:91:c4:c8:
a6:44:82:76:cf:f5:b3:ba:0b:a3:46:14:d4:82:20:07:ac:24:
3c:21:81:06:fb:e1:68:70:f4:a3:bf:cb:33:3b:b5:5b:f8:cf:
72:61:0b:71:d3:36:f0:df:86:2a:7a:5d:6d:ca:88:35:59:b9:
79:66:bd:9f:40:dc:bc:56:29:8e:72:23:ec:86:29:fa:1d:68:
22:d8:27:87:83:6f:48:db:10:7c:5a:2e:fd:7c:33:e7:be:50:
9e:48:9e:2e:ea:b0:46:43:02:45:3c:48:51:28:65:ea:56:b6:
6c:b4:b0:21:7d:01:67:3d:8d:fc:d6:b8:ee:8e:57:ed:9f:5a:
67:9d:95:5c:4a:38:61:ec:76:7b:fc:ef:9a:51:23:78:7c:ba:
e9:01:92:de:29:b1:65:77:2a:7e:f3:6a:00:01:96:28:5e:2f:
bd:46:88:2e:a3:83:98:ae:ff:56:3d:de:54:ba:67:8d:0d:ba:
56:27:c1:14:8c:34:58:40:63:43:56:d4:1c:ee:c0:1c:80:fa:
12:6e:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:21 2025 by rpki-client