Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6d0c79f-3221-3fe6-b540-ca17e4762b49.roa
File: c6d0c79f-3221-3fe6-b540-ca17e4762b49.roa (raw, json)
Hash identifier: PML/BdOut9wfbeVTsjfCYiAXAk5wsW93GGHX+Kh4Gq4=
Subject key identifier: 29:DA:71:6B:35:27:0D:DF:5B:1B:FF:DA:DD:E4:30:E6:49:75:24:3D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C71E01543A9E80C348B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6d0c79f-3221-3fe6-b540-ca17e4762b49.roa
Signing time: Wed 19 Feb 2025 19:45:58 +0000
ROA not before: Wed 19 Feb 2025 19:45:58 +0000
ROA not after: Tue 20 May 2025 18:45:58 +0000
asID: 62240
IP address blocks: 166.1.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:71:e0:15:43:a9:e8:0c:34:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:45:58 2025 GMT
Not After : May 20 18:45:58 2025 GMT
Subject: CN=4c635ca3-6cc8-49d5-a609-6e5d6a1fc91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:0c:bd:96:31:a7:56:43:44:73:6b:ec:07:
a3:f4:49:69:33:0d:e0:eb:0b:e9:c8:2f:72:86:99:
33:c9:4a:71:76:7e:22:93:4b:aa:5c:9f:78:69:88:
10:70:a1:56:32:e0:6d:d0:f0:b0:f2:08:ba:74:3c:
3d:17:fc:db:d1:fc:05:0d:f0:09:a3:0a:fb:2b:ec:
28:3b:89:c0:51:66:a9:c5:ed:dd:e8:17:2a:57:15:
e3:26:62:4f:cf:0d:a3:1b:8e:ee:db:6c:e8:b3:37:
93:53:49:02:68:25:60:cc:1b:75:22:04:ba:a0:62:
3c:a4:9b:a7:3b:bd:ac:c6:4c:0f:02:a0:28:1b:73:
01:43:f4:56:0c:d3:91:df:c4:05:03:ef:39:34:60:
cc:cc:69:d6:20:0f:c8:17:35:02:a9:3c:f2:df:51:
53:e9:03:e0:e0:c1:ae:51:76:ea:8f:61:57:81:f1:
70:51:7e:18:8a:dd:b2:78:00:ab:1d:29:00:0d:f9:
ae:d9:79:3f:fd:39:2b:2c:15:bb:59:38:3a:71:df:
5b:83:5d:3c:c9:82:30:d0:7a:c3:57:f0:ab:f2:a8:
6a:61:1b:d1:47:4e:26:ec:d1:b7:cf:99:cd:17:38:
c0:bc:aa:41:f3:ea:ab:bb:bf:b2:b8:53:8a:43:cf:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:71:6B:35:27:0D:DF:5B:1B:FF:DA:DD:E4:30:E6:49:75:24:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6d0c79f-3221-3fe6-b540-ca17e4762b49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:95:4c:2e:b1:70:9f:aa:49:67:1b:5f:6a:3c:22:e5:33:36:
84:1b:f2:d9:27:69:4f:8e:31:3a:d2:c1:9a:f8:24:a0:fd:60:
58:ce:7a:1a:df:e8:fb:ee:6f:f3:46:23:c7:01:6a:a4:32:f8:
2c:17:28:08:2c:3f:6b:8b:a0:c1:14:e3:88:78:54:7b:d8:45:
eb:dd:9a:67:4d:82:2a:2e:3f:3e:7a:0b:f4:00:aa:ea:a1:ec:
90:d4:7e:e0:e7:99:0a:3f:fd:1c:b1:5b:3e:3c:b0:eb:1b:ec:
03:6d:33:35:46:cc:f3:2e:21:c3:8d:08:71:0c:b0:a1:25:a4:
8c:da:d7:25:4f:18:2e:bf:fe:eb:f7:44:de:32:88:94:10:15:
ad:3d:77:a4:00:30:71:af:ef:40:96:31:7f:25:3c:52:24:41:
5e:55:6b:19:61:f6:59:bf:90:3f:3c:58:69:a5:6f:f2:b1:24:
4a:e9:19:7b:c3:ef:0b:2a:c6:df:8b:6e:1c:c9:ee:37:dd:4a:
cf:ea:f7:58:13:74:bb:61:bb:41:94:04:c7:38:c1:a5:c1:92:
89:f8:fb:52:78:7d:d9:bb:37:68:6b:4d:03:f5:70:d3:6f:ac:
ca:41:b7:65:db:08:12:21:ff:d4:81:9b:8b:7c:02:98:7e:87:
30:6d:74:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDHHgFUOp6Aw0iwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxOTE5NDU1OFoXDTI1MDUyMDE4NDU1OFowLzEtMCsGA1UEAxMk
NGM2MzVjYTMtNmNjOC00OWQ1LWE2MDktNmU1ZDZhMWZjOTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCAMvZYxp1ZDRHNr7Aej9ElpMw3g6wvpyC9y
hpkzyUpxdn4ik0uqXJ94aYgQcKFWMuBt0PCw8gi6dDw9F/zb0fwFDfAJowr7K+wo
O4nAUWapxe3d6BcqVxXjJmJPzw2jG47u22zoszeTU0kCaCVgzBt1IgS6oGI8pJun
O72sxkwPAqAoG3MBQ/RWDNOR38QFA+85NGDMzGnWIA/IFzUCqTzy31FT6QPg4MGu
UXbqj2FXgfFwUX4Yit2yeACrHSkADfmu2Xk//TkrLBW7WTg6cd9bg108yYIw0HrD
V/Cr8qhqYRvRR04m7NG3z5nNFzjAvKpB8+qru7+yuFOKQ8+gWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnacWs1Jw3fWxv/2t3kMOZJdSQ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzZkMGM3OWYtMzIyMS0z
ZmU2LWI1NDAtY2ExN2U0NzYyYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqVTC6xcJ+qSWcbX2o8IuUzNoQb8tknaU+OMTrSwZr4JKD9YFjOehrf
6Pvub/NGI8cBaqQy+CwXKAgsP2uLoMEU44h4VHvYRevdmmdNgiouPz56C/QAquqh
7JDUfuDnmQo//RyxWz48sOsb7ANtMzVGzPMuIcONCHEMsKElpIza1yVPGC6//uv3
RN4yiJQQFa09d6QAMHGv70CWMX8lPFIkQV5Vaxlh9lm/kD88WGmlb/KxJErpGXvD
7wsqxt+LbhzJ7jfdSs/q91gTdLthu0GUBMc4waXBkon4+1J4fdm7N2hrTQP1cNNv
rMpBt2XbCBIh/9SBm4t8Aph+hzBtdBc=
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:23:38 2025 by rpki-client