Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/623ef321-54f7-3178-9d59-485bd9873a14.roa
File: 623ef321-54f7-3178-9d59-485bd9873a14.roa (raw, json)
Hash identifier: /ShdAmRCKT9DhedwbqAdx23ZDGFGpX3EqntSVS8d4IA=
Subject key identifier: 8F:06:86:E4:EC:2C:B8:B6:C6:A7:0F:1D:FC:93:EF:0D:12:AA:23:3B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F926A5C21BEA02DEAECC3700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/623ef321-54f7-3178-9d59-485bd9873a14.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 26383
IP address blocks: 166.1.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a5:c2:1b:ea:02:de:ae:cc:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=c57babf3-8468-41cd-9cd3-360f8194bddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:40:3e:37:d8:43:51:f7:54:0b:bf:73:33:
11:ee:90:5d:99:c6:2a:e6:9b:23:f1:ea:91:f9:df:
41:7a:a3:5a:06:b9:e2:ea:c2:25:d7:7a:3f:a8:39:
c5:33:0f:67:50:e4:f1:e5:2c:ca:1f:22:8b:27:d4:
6a:03:0b:06:74:9c:6f:29:80:c7:7d:8c:cd:f5:28:
40:cd:df:33:fc:5f:0c:5a:8d:2d:54:d8:5a:c9:45:
dc:4b:f0:69:56:69:db:0b:31:88:56:69:54:70:00:
f1:9a:cc:42:b4:11:87:ae:b1:4d:c8:63:95:81:e9:
d4:b2:07:5a:7c:0e:c9:cb:dd:40:4f:87:32:52:33:
4b:dc:b9:ba:bc:0e:af:00:94:c6:47:63:ca:72:fc:
81:0c:ca:a3:68:6a:a4:ed:b5:55:9f:e3:75:e4:e6:
92:a6:03:73:d0:00:bf:12:25:1d:e2:da:ea:c2:e9:
f5:d2:1d:91:34:94:48:2a:5c:23:bb:e7:ac:13:63:
92:f3:60:cd:01:a9:cc:da:77:81:e1:58:14:49:b9:
4a:c5:21:00:db:ed:6e:73:06:1d:f3:19:6a:d2:6c:
30:cc:72:05:0d:ce:69:1b:1f:18:02:46:dc:98:f2:
1b:9e:e7:32:e6:83:54:fc:98:5c:a1:42:d6:c4:c0:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:06:86:E4:EC:2C:B8:B6:C6:A7:0F:1D:FC:93:EF:0D:12:AA:23:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/623ef321-54f7-3178-9d59-485bd9873a14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:0f:a3:7d:7e:87:c7:f0:85:2d:16:3f:a0:fe:ec:81:d4:e4:
14:c0:34:cc:03:04:26:a2:e4:6f:25:ba:57:9f:7f:43:c7:7f:
64:b6:36:de:92:62:4d:5e:3c:ae:ad:b9:eb:dc:99:61:84:52:
75:3c:48:80:75:8e:69:b6:18:f9:4e:36:af:ec:05:08:c0:f7:
89:b2:42:90:05:e6:52:26:22:a0:e0:77:5e:fb:50:ff:02:2b:
bf:a4:d0:0e:98:d5:2d:4f:b3:63:83:8f:80:31:fe:04:82:e2:
ab:13:8b:52:a6:32:63:18:9f:d7:be:5a:9f:82:7a:28:38:cf:
bb:fe:f4:b2:aa:de:c6:37:9c:9f:fc:be:ab:d2:2f:a2:a9:63:
4a:19:08:17:71:e5:f9:fd:d2:9e:10:49:ea:56:f5:f3:a5:49:
4a:04:f9:81:5f:21:18:0e:8a:d9:81:49:6a:82:00:3c:8e:94:
2a:17:03:30:01:5b:0d:63:87:9f:af:36:d8:f6:6f:e7:bc:ab:
cc:25:80:ad:2e:6b:37:d0:95:97:83:45:63:7c:44:a7:bb:cf:
1f:f2:76:19:3a:5b:a1:a5:1e:66:5a:c9:65:ea:9e:38:d2:ac:
cb:03:d0:71:28:a5:90:f4:97:bc:4a:39:d7:65:e4:35:73:62:
57:c2:22:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqXCG+oC3q7MNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
YzU3YmFiZjMtODQ2OC00MWNkLTljZDMtMzYwZjgxOTRiZGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqexAPjfYQ1H3VAu/czMR7pBdmcYq5psj8eqR
+d9BeqNaBrni6sIl13o/qDnFMw9nUOTx5SzKHyKLJ9RqAwsGdJxvKYDHfYzN9ShA
zd8z/F8MWo0tVNhayUXcS/BpVmnbCzGIVmlUcADxmsxCtBGHrrFNyGOVgenUsgda
fA7Jy91AT4cyUjNL3Lm6vA6vAJTGR2PKcvyBDMqjaGqk7bVVn+N15OaSpgNz0AC/
EiUd4trqwun10h2RNJRIKlwju+esE2OS82DNAanM2neB4VgUSblKxSEA2+1ucwYd
8xlq0mwwzHIFDc5pGx8YAkbcmPIbnucy5oNU/JhcoULWxMDGGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8GhuTsLLi2xqcPHfyT7w0SqiM7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjIzZWYzMjEtNTRmNy0z
MTc4LTlkNTktNDg1YmQ5ODczYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwPo31+h8fwhS0WP6D+7IHU5BTANMwDBCai5G8luleff0PHf2S2Nt6S
Yk1ePK6tuevcmWGEUnU8SIB1jmm2GPlONq/sBQjA94myQpAF5lImIqDgd177UP8C
K7+k0A6Y1S1Ps2ODj4Ax/gSC4qsTi1KmMmMYn9e+Wp+Ceig4z7v+9LKq3sY3nJ/8
vqvSL6KpY0oZCBdx5fn90p4QSepW9fOlSUoE+YFfIRgOitmBSWqCADyOlCoXAzAB
Ww1jh5+vNtj2b+e8q8wlgK0uazfQlZeDRWN8RKe7zx/ydhk6W6GlHmZayWXqnjjS
rMsD0HEopZD0l7xKOddl5DVzYlfCIl8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:30:21 2025 by rpki-client