Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/edf779a5-9a52-3015-bc71-cb19b855bb0e.roa
File: edf779a5-9a52-3015-bc71-cb19b855bb0e.roa (raw, json)
Hash identifier: t5hzqEsxVYsRn7n/jZ5zwiZ7+MZ8BwZTsBk869pbrhI=
Subject key identifier: FE:22:D8:C2:C6:EE:B4:29:4E:A2:16:C3:0B:9D:C6:95:88:62:72:5E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F22C24A4CBCC62749E8C59C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/edf779a5-9a52-3015-bc71-cb19b855bb0e.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.0.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:24:a4:cb:cc:62:74:9e:8c:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=8230e117-7dbd-4766-91a2-ff02397b8d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:8c:59:c2:65:ce:76:85:84:c5:74:23:81:
7c:78:d4:ba:4a:ad:28:fd:0d:50:f7:cd:c8:9f:dc:
28:81:bc:b3:c4:1c:ac:6b:42:f2:c5:16:46:26:35:
7f:97:e8:39:06:3c:ed:48:a2:28:40:a5:b5:ca:29:
60:d6:59:59:c7:aa:4c:62:bb:a2:56:21:3b:25:8e:
2d:ef:77:f6:39:0b:3e:07:a3:37:6d:f9:81:ae:7e:
81:82:f6:02:08:cc:ec:90:cb:8f:f3:a2:d3:ed:55:
31:f2:05:b6:c6:15:64:f8:ac:66:74:08:3a:d8:e4:
10:ef:87:86:a8:49:cf:7c:e2:36:82:8e:4a:50:30:
20:9c:9e:e8:61:12:4a:81:5a:a3:35:de:13:11:43:
2c:39:9c:a1:12:27:e8:78:e9:75:e2:ae:35:4e:50:
dc:52:01:08:ba:be:7d:a4:e9:e5:7c:fb:9e:0f:43:
37:6c:7f:b3:63:17:18:fa:b9:a4:74:9c:c5:8d:96:
35:ac:15:ee:fa:ac:10:81:8d:11:d2:44:19:52:0c:
97:50:69:20:fd:21:35:8c:f8:36:8a:9c:64:0a:d6:
ef:8d:71:66:1d:9b:3f:5d:1e:6b:ca:ea:61:71:94:
dc:cb:16:14:90:cb:5a:1e:37:d7:3b:f6:a8:f2:7c:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:22:D8:C2:C6:EE:B4:29:4E:A2:16:C3:0B:9D:C6:95:88:62:72:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/edf779a5-9a52-3015-bc71-cb19b855bb0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:15:85:73:64:48:cd:ad:2f:13:c6:bc:75:0e:54:44:27:e5:
99:00:1f:da:3c:22:4e:fd:a0:19:62:0a:bd:b6:ea:f7:f8:24:
3c:d6:31:b5:92:0b:4e:45:6b:be:0e:98:30:de:7b:43:47:9d:
0d:4b:20:04:86:8c:6b:0e:83:2f:29:89:2c:af:92:63:07:26:
1e:eb:b6:85:02:ff:de:f8:d6:79:23:da:f9:53:3d:7d:1f:c2:
e8:ad:b2:90:f2:10:82:57:01:94:29:a7:b7:3c:f9:ac:17:1c:
3b:27:ce:60:69:69:ea:ab:86:3c:eb:4a:ec:8d:e9:dd:f7:3e:
76:91:ac:a8:68:78:5e:fb:54:c7:d2:dc:d0:bb:95:13:2c:dc:
1e:de:e8:02:f1:ba:79:a9:5b:e2:4c:af:c2:57:e4:a1:15:4d:
04:38:51:60:72:0c:e7:a2:b0:ad:6a:87:9d:80:24:68:97:77:
43:93:12:5d:9c:d2:67:51:e7:bf:cb:3d:ef:1d:e3:ff:08:7c:
eb:5a:89:49:ac:33:98:6a:bc:33:6c:22:fe:b8:86:7e:80:35:
7b:60:ed:c3:e0:1e:6c:21:2e:80:62:c1:fe:a2:0f:89:53:40:
63:3a:a5:3f:46:1b:a9:c4:4a:6f:8d:ab:f2:56:df:de:49:1b:
7e:77:59:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCSky8xidJ6MWcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODIzMGUxMTctN2RiZC00NzY2LTkxYTItZmYwMjM5N2I4ZDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14CMWcJlznaFhMV0I4F8eNS6Sq0o/Q1Q983I
n9wogbyzxBysa0LyxRZGJjV/l+g5BjztSKIoQKW1yilg1llZx6pMYruiViE7JY4t
73f2OQs+B6M3bfmBrn6BgvYCCMzskMuP86LT7VUx8gW2xhVk+KxmdAg62OQQ74eG
qEnPfOI2go5KUDAgnJ7oYRJKgVqjNd4TEUMsOZyhEifoeOl14q41TlDcUgEIur59
pOnlfPueD0M3bH+zYxcY+rmkdJzFjZY1rBXu+qwQgY0R0kQZUgyXUGkg/SE1jPg2
ipxkCtbvjXFmHZs/XR5ryuphcZTcyxYUkMtaHjfXO/ao8nyuFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4i2MLG7rQpTqIWwwudxpWIYnJeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWRmNzc5YTUtOWE1Mi0z
MDE1LWJjNzEtY2IxOWI4NTViYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEVhXNkSM2tLxPGvHUOVEQn5ZkAH9o8Ik79oBliCr226vf4JDzWMbWS
C05Fa74OmDDee0NHnQ1LIASGjGsOgy8piSyvkmMHJh7rtoUC/9741nkj2vlTPX0f
wuitspDyEIJXAZQpp7c8+awXHDsnzmBpaeqrhjzrSuyN6d33PnaRrKhoeF77VMfS
3NC7lRMs3B7e6ALxunmpW+JMr8JX5KEVTQQ4UWByDOeisK1qh52AJGiXd0OTEl2c
0mdR57/LPe8d4/8IfOtaiUmsM5hqvDNsIv64hn6ANXtg7cPgHmwhLoBiwf6iD4lT
QGM6pT9GG6nESm+Nq/JW395JG353WTs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:17 2025 by rpki-client