Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38427bfc-c0ba-3d7d-abcc-be238c4302d3.roa
File: 38427bfc-c0ba-3d7d-abcc-be238c4302d3.roa (raw, json)
Hash identifier: 7ClV5ccuihkHG3tuz7eLcNn9M9jNGyqDavwxdYZHCDI=
Subject key identifier: D8:B6:73:FE:9F:82:C7:04:BA:30:92:3B:84:E1:C1:DF:B1:3A:4C:68
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A9962EBD91556B9E35785C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38427bfc-c0ba-3d7d-abcc-be238c4302d3.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 21859
IP address blocks: 108.165.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:2e:bd:91:55:6b:9e:35:78:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=167a1477-033c-4035-981b-96d035df822c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:1b:90:6b:df:91:b4:9c:68:56:80:59:a5:
c1:41:c8:d1:df:30:64:a1:a9:7c:4e:b4:9e:4a:cc:
0b:ee:ac:62:d4:00:11:d8:dc:fc:2b:d7:ed:6f:97:
64:3e:e6:57:dc:19:fc:2e:e8:ce:6b:47:14:95:0a:
29:f9:6a:22:ac:f0:f6:7b:a3:64:35:dd:4e:85:af:
52:af:3c:74:2f:e3:92:fd:cd:13:21:7d:a6:f0:06:
2d:3a:8a:58:39:6e:bc:2a:ca:eb:be:d8:ff:0e:1a:
6b:bb:8a:0b:e0:8b:cc:77:8f:eb:cf:e6:80:6a:1d:
18:17:db:8b:04:3b:c1:19:51:46:13:9d:05:2f:11:
10:f6:39:35:f8:fe:c7:c4:b7:7e:08:12:c9:f5:39:
ab:f5:69:b6:c2:88:fe:03:b0:0d:6c:6c:90:3a:1e:
c3:97:2c:98:60:5b:c6:ea:c5:93:50:50:f8:7e:cd:
2e:3a:bc:9b:36:56:6a:a2:ae:b6:2b:45:49:9f:fa:
40:88:a6:c3:d2:b4:d7:1f:3f:bd:bf:04:64:a7:7f:
51:4a:43:e0:78:7f:71:20:8e:bf:18:27:3e:89:59:
d3:7c:6b:cb:ef:6b:bc:a0:1b:9f:58:28:79:fc:02:
81:6e:1c:08:79:84:db:5c:34:38:4a:40:21:14:c5:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B6:73:FE:9F:82:C7:04:BA:30:92:3B:84:E1:C1:DF:B1:3A:4C:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38427bfc-c0ba-3d7d-abcc-be238c4302d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:c7:08:ae:2e:97:11:ce:92:f4:b5:d2:5d:bd:92:0a:c0:a3:
97:03:70:f8:2d:cf:16:e6:06:5f:73:6d:41:50:de:1a:b1:8c:
c5:76:03:a4:52:50:f7:3d:8d:0c:ff:fc:12:bd:e4:61:c1:6d:
8f:f4:67:4f:44:25:3b:a4:d6:86:31:d7:57:e0:be:62:98:44:
e5:a0:05:98:a6:da:39:d5:37:58:15:28:9e:bc:15:40:a2:b7:
25:34:25:e1:27:07:03:b1:ae:f0:d7:29:fd:b7:d1:e1:91:46:
0b:6c:49:14:d0:f9:0e:9e:40:f4:5e:27:4a:cf:21:2b:79:61:
95:31:33:dd:8a:c3:a8:4f:0c:9e:1a:ed:f6:6d:8b:22:9e:3e:
07:7f:30:4d:fc:76:5d:21:23:8e:f3:bb:65:a4:08:fc:c0:3f:
ae:c9:1f:cf:2d:40:a9:ca:3e:68:78:df:37:85:5d:54:a1:c2:
f2:82:2d:dd:79:d0:45:59:2a:62:5b:da:e6:d2:40:df:43:98:
39:05:99:ec:1b:61:0a:15:c9:d1:99:2b:83:31:4d:92:30:5c:
91:05:18:f4:a2:a1:39:e1:da:57:bb:7a:4b:a6:ba:4f:70:d2:
ab:41:41:d5:e3:ed:85:bd:1b:a8:2e:ad:f6:05:bb:6d:5b:0f:
ea:f7:9e:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipli69kVVrnjV4XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTY3YTE0NzctMDMzYy00MDM1LTk4MWItOTZkMDM1ZGY4MjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HwbkGvfkbScaFaAWaXBQcjR3zBkoal8TrSe
SswL7qxi1AAR2Nz8K9ftb5dkPuZX3Bn8LujOa0cUlQop+WoirPD2e6NkNd1Oha9S
rzx0L+OS/c0TIX2m8AYtOopYOW68Ksrrvtj/Dhpru4oL4IvMd4/rz+aAah0YF9uL
BDvBGVFGE50FLxEQ9jk1+P7HxLd+CBLJ9Tmr9Wm2woj+A7ANbGyQOh7DlyyYYFvG
6sWTUFD4fs0uOrybNlZqoq62K0VJn/pAiKbD0rTXHz+9vwRkp39RSkPgeH9xII6/
GCc+iVnTfGvL72u8oBufWCh5/AKBbhwIeYTbXDQ4SkAhFMV8/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNi2c/6fgscEujCSO4Thwd+xOkxoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzg0MjdiZmMtYzBiYS0z
ZDdkLWFiY2MtYmUyMzhjNDMwMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXHCK4ulxHOkvS10l29kgrAo5cDcPgtzxbmBl9zbUFQ3hqxjMV2A6RS
UPc9jQz//BK95GHBbY/0Z09EJTuk1oYx11fgvmKYROWgBZim2jnVN1gVKJ68FUCi
tyU0JeEnBwOxrvDXKf230eGRRgtsSRTQ+Q6eQPReJ0rPISt5YZUxM92Kw6hPDJ4a
7fZtiyKePgd/ME38dl0hI47zu2WkCPzAP67JH88tQKnKPmh43zeFXVShwvKCLd15
0EVZKmJb2ubSQN9DmDkFmewbYQoVydGZK4MxTZIwXJEFGPSioTnh2le7ekumuk9w
0qtBQdXj7YW9G6gurfYFu21bD+r3nig=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:44:04 2025 by rpki-client