Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52b6694a-f629-3c47-9119-68ce4f87301f.roa
File: 52b6694a-f629-3c47-9119-68ce4f87301f.roa (raw, json)
Hash identifier: rHox+KNc+2tSSgwDpDsX/vhBAaJNvvjgoOWF3JH0Gfk=
Subject key identifier: 24:32:01:73:E1:A8:F5:FE:E5:7C:82:5C:A0:71:AA:73:43:C3:29:94
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F5875F8A51A3192268CDFA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52b6694a-f629-3c47-9119-68ce4f87301f.roa
Signing time: Fri 21 Feb 2025 18:52:42 +0000
ROA not before: Fri 21 Feb 2025 18:52:42 +0000
ROA not after: Thu 22 May 2025 17:52:42 +0000
asID: 401152
IP address blocks: 108.165.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f5:87:5f:8a:51:a3:19:22:68:cd:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 21 18:52:42 2025 GMT
Not After : May 22 17:52:42 2025 GMT
Subject: CN=43b4ea16-d3be-4d2e-a20e-e0607c8eedba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:c9:ba:4e:bd:a5:5c:a0:98:45:89:19:68:
e4:66:c2:83:4d:1c:9a:6d:73:b6:95:96:2d:b9:86:
90:6d:1e:17:87:91:c3:2a:12:14:1d:5f:49:ad:49:
b4:8d:de:2b:7a:d1:4e:1e:ed:44:f1:40:21:03:e2:
44:53:4c:19:aa:e4:e9:66:a4:99:31:0e:73:fe:57:
a6:ff:af:61:f0:b4:89:c3:4d:29:8e:c5:93:88:df:
c9:f0:93:1a:ad:ba:35:01:02:ab:14:f6:43:0a:43:
2f:61:87:12:7d:90:d5:6d:e0:97:ce:47:31:f1:9e:
c2:d1:d9:54:2d:58:86:2b:e7:42:a4:82:ad:bf:98:
28:cd:09:b2:15:da:36:1a:e0:77:6a:1a:95:45:c0:
ad:cc:2a:18:6d:d6:8b:2c:38:4b:4d:2d:ae:07:2d:
b7:39:14:86:11:6c:78:97:18:4b:52:e3:cc:86:d4:
e1:88:a3:33:4b:1e:85:9c:0c:ac:2d:81:3a:92:c6:
98:68:2a:f5:2b:11:fe:9a:59:aa:a1:d5:9c:7b:96:
e7:c0:d3:42:f8:91:41:fd:da:93:5b:37:71:57:8a:
7e:35:72:df:aa:5c:35:c3:db:47:82:ee:c8:b7:f1:
94:73:01:06:2a:f9:14:99:78:11:f6:30:47:20:01:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:01:73:E1:A8:F5:FE:E5:7C:82:5C:A0:71:AA:73:43:C3:29:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52b6694a-f629-3c47-9119-68ce4f87301f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:44:75:03:a1:43:24:6f:02:85:5e:90:53:1f:f5:7a:cb:66:
0c:b4:92:aa:45:77:b4:33:78:f1:83:be:4d:d7:b0:f3:0e:dd:
62:a9:45:ce:2b:6b:c7:d2:b3:82:ec:4d:b8:cb:1a:b5:45:4b:
26:3d:b4:c1:8e:89:db:0e:f3:01:4e:22:90:8b:ee:f5:c4:94:
4c:e3:47:c2:b9:a8:f9:20:87:0b:fe:36:23:2b:c2:ba:98:e6:
84:70:1e:f2:2c:f5:73:1e:d7:76:83:bf:55:df:8a:58:49:e8:
5b:2c:22:26:73:2a:d5:a5:b3:12:88:d5:db:86:fc:2f:a6:de:
62:88:42:0a:97:61:38:35:ec:bf:f1:f6:9b:a0:fc:75:ae:0e:
c4:35:7e:70:60:91:f2:4b:69:ba:d0:52:bb:af:3c:2c:a9:91:
76:ed:c6:8f:82:4b:bf:0d:da:e9:0e:e8:e1:59:3a:ca:5c:c7:
ec:cb:0f:61:3d:ed:db:83:02:0b:e7:07:f6:a9:3c:3b:9e:dd:
92:95:8c:0d:a9:46:d6:6f:11:63:5e:5c:76:44:85:4f:27:3f:
0c:6d:b4:bd:9c:92:c7:28:99:96:39:77:6a:96:0f:28:37:35:
9e:61:b0:8c:32:e7:df:9f:e9:ea:7d:15:2f:34:80:12:bc:85:
30:eb:61:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj1h1+KUaMZImjN+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIyMTE4NTI0MloXDTI1MDUyMjE3NTI0MlowLzEtMCsGA1UEAxMk
NDNiNGVhMTYtZDNiZS00ZDJlLWEyMGUtZTA2MDdjOGVlZGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyovJuk69pVygmEWJGWjkZsKDTRyabXO2lZYt
uYaQbR4Xh5HDKhIUHV9JrUm0jd4retFOHu1E8UAhA+JEU0wZquTpZqSZMQ5z/lem
/69h8LSJw00pjsWTiN/J8JMarbo1AQKrFPZDCkMvYYcSfZDVbeCXzkcx8Z7C0dlU
LViGK+dCpIKtv5gozQmyFdo2GuB3ahqVRcCtzCoYbdaLLDhLTS2uBy23ORSGEWx4
lxhLUuPMhtThiKMzSx6FnAysLYE6ksaYaCr1KxH+mlmqodWce5bnwNNC+JFB/dqT
WzdxV4p+NXLfqlw1w9tHgu7It/GUcwEGKvkUmXgR9jBHIAEeZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQyAXPhqPX+5XyCXKBxqnNDwymUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTJiNjY5NGEtZjYyOS0z
YzQ3LTkxMTktNjhjZTRmODczMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhEdQOhQyRvAoVekFMf9XrLZgy0kqpFd7QzePGDvk3XsPMO3WKpRc4r
a8fSs4LsTbjLGrVFSyY9tMGOidsO8wFOIpCL7vXElEzjR8K5qPkghwv+NiMrwrqY
5oRwHvIs9XMe13aDv1XfilhJ6FssIiZzKtWlsxKI1duG/C+m3mKIQgqXYTg17L/x
9pug/HWuDsQ1fnBgkfJLabrQUruvPCypkXbtxo+CS78N2ukO6OFZOspcx+zLD2E9
7duDAgvnB/apPDue3ZKVjA2pRtZvEWNeXHZEhU8nPwxttL2ckscomZY5d2qWDyg3
NZ5hsIwy59+f6ep9FS80gBK8hTDrYTE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:43 2025 by rpki-client