Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa
File: 4d500dd3-2d39-3070-8ae4-006b17215c32.roa (raw, json)
Hash identifier: tIK4HDhTIizV9GKyMhqxopPbkXGa/zVMf7V22DnXMXc=
Subject key identifier: 68:1D:4E:61:51:F8:5D:E2:B1:A2:06:D7:B6:23:18:A9:A6:42:A8:A1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584902EC2F6AC86380B1C41A1000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 30633
IP address blocks: 108.165.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2f:6a:c8:63:80:b1:c4:1a:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=3700e1c0-5fb4-418a-be25-a16d83916740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:e7:c8:cb:85:f4:95:13:7d:5d:9f:c4:b0:
41:55:77:b8:b2:01:6c:73:66:b4:9e:57:56:83:79:
07:5c:c2:8c:ba:f6:e9:33:46:f5:dd:fd:92:44:22:
3b:5c:6f:48:0b:e2:fe:62:fb:57:fa:d2:ab:bb:29:
f9:1d:15:4b:2d:6c:32:56:3e:36:96:47:e3:74:ec:
d4:be:39:8c:e5:83:3a:ab:76:5b:f5:dc:7b:96:56:
34:ce:22:5e:79:59:8c:cc:93:77:20:01:b7:f6:56:
0f:2a:dd:9f:13:f9:96:ec:2c:96:43:09:7c:5d:7f:
c8:9c:c0:fa:91:1b:5c:c8:63:ba:5b:ad:e1:17:19:
6a:94:24:3b:b4:ab:cb:d2:e3:48:67:86:38:7f:c8:
88:40:57:49:28:ef:e1:4a:76:e0:09:97:bd:f3:5b:
a5:7e:d7:89:45:53:15:9a:e7:0b:28:b4:bd:00:77:
5c:40:6a:47:e3:d5:ef:f2:5b:14:98:79:76:41:24:
41:ff:b4:46:2c:39:4d:de:e9:87:37:a6:9c:0a:d4:
ff:9b:7e:fe:35:f7:06:79:d4:5c:d5:8b:c4:f4:be:
9e:1c:07:5b:b2:d5:7b:0d:c2:cd:1b:d8:48:a6:4b:
94:2b:2a:50:90:c3:2e:80:2b:95:64:5d:77:7b:fe:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1D:4E:61:51:F8:5D:E2:B1:A2:06:D7:B6:23:18:A9:A6:42:A8:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:f6:86:91:50:f7:ea:23:e5:d5:c5:92:35:dc:70:d0:69:24:
e9:5a:92:8a:67:f0:2e:df:a0:d0:3e:c3:59:ee:d8:ba:9b:d5:
6a:32:97:30:a6:5e:bc:ce:eb:18:6a:ee:52:ab:80:3a:4d:a9:
aa:6d:c1:a3:8a:14:c8:23:3d:a2:9b:4f:63:ae:07:14:df:50:
90:b5:dd:63:4c:c7:ab:32:59:89:c5:bd:ac:87:99:d9:83:2c:
63:97:b5:68:42:d6:5f:8d:7a:9e:0f:0d:5b:ab:d5:e4:ff:5e:
20:eb:eb:71:77:31:72:a1:5f:e6:2d:27:63:8a:f1:0b:19:65:
c9:21:94:a5:fc:37:78:76:a7:57:4c:64:1c:ec:80:1e:8e:e5:
1c:6d:24:98:74:db:0f:11:b8:98:a0:c6:c2:3d:26:36:4a:75:
76:45:db:2b:fe:57:ef:41:0d:a3:8e:84:5b:80:fa:0d:35:49:
5c:c4:7e:40:90:a6:e2:74:fc:e6:68:e6:35:a7:61:2f:23:18:
7f:af:66:ea:59:ec:fc:de:40:ee:c8:7e:ec:54:4c:58:9b:26:
50:20:14:5a:77:65:45:16:cf:db:05:2b:44:f8:8e:31:44:17:
c9:91:dc:54:2d:bc:c3:c4:86:37:78:6d:8a:3a:42:55:d7:79:
06:ee:bf:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7C9qyGOAscQaEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MzcwMGUxYzAtNWZiNC00MThhLWJlMjUtYTE2ZDgzOTE2NzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkLnyMuF9JUTfV2fxLBBVXe4sgFsc2a0nldW
g3kHXMKMuvbpM0b13f2SRCI7XG9IC+L+YvtX+tKruyn5HRVLLWwyVj42lkfjdOzU
vjmM5YM6q3Zb9dx7llY0ziJeeVmMzJN3IAG39lYPKt2fE/mW7CyWQwl8XX/InMD6
kRtcyGO6W63hFxlqlCQ7tKvL0uNIZ4Y4f8iIQFdJKO/hSnbgCZe981ulfteJRVMV
mucLKLS9AHdcQGpH49Xv8lsUmHl2QSRB/7RGLDlN3umHN6acCtT/m37+NfcGedRc
1YvE9L6eHAdbstV7DcLNG9hIpkuUKypQkMMugCuVZF13e/4NswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgdTmFR+F3isaIG17YjGKmmQqihMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGQ1MDBkZDMtMmQzOS0z
MDcwLThhZTQtMDA2YjE3MjE1YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJL2hpFQ9+oj5dXFkjXccNBpJOlakopn8C7foNA+w1nu2Lqb1WoylzCm
XrzO6xhq7lKrgDpNqaptwaOKFMgjPaKbT2OuBxTfUJC13WNMx6syWYnFvayHmdmD
LGOXtWhC1l+Nep4PDVur1eT/XiDr63F3MXKhX+YtJ2OK8QsZZckhlKX8N3h2p1dM
ZBzsgB6O5RxtJJh02w8RuJigxsI9JjZKdXZF2yv+V+9BDaOOhFuA+g01SVzEfkCQ
puJ0/OZo5jWnYS8jGH+vZupZ7PzeQO7IfuxUTFibJlAgFFp3ZUUWz9sFK0T4jjFE
F8mR3FQtvMPEhjd4bYo6QlXXeQbuv1c=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:02:32 2025 by rpki-client