Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa
File: bf09cbe5-0f95-3715-878d-025c118cc3f1.roa (raw, json)
Hash identifier: VpQW2BiP6wddb12TR3kkvfJQ4gMvfVgSAkTU58qhxsU=
Subject key identifier: FA:91:9C:DB:9C:D3:DB:58:C3:29:E0:2A:85:A8:68:F3:6C:4B:1B:5A
Certificate issuer: /CN=de84b539-8408-4f2c-8e81-05f7a1b73686
Certificate serial: 010D0C9F432858490E16CBFAE0A4DC53DC09BE40
Authority key identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 18779
IP address blocks: 66.154.117.0/24 maxlen: 24
66.154.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:cb:fa:e0:a4:dc:53:dc:09:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de84b539-8408-4f2c-8e81-05f7a1b73686
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=b259ae1f-8330-4a44-a80d-7df61e1c1c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:b0:fd:fd:3e:6f:c5:18:e0:ad:e2:ad:5e:
73:a0:78:c0:96:3f:7a:69:dc:61:77:72:38:ec:6b:
28:cf:28:27:1a:fc:9f:72:26:c7:14:a1:c6:cf:33:
00:b6:6d:23:1c:08:95:96:c8:d4:9a:72:46:0d:e8:
d8:c0:d8:fc:8f:ff:31:8f:34:3e:2c:bf:fc:66:0f:
ad:f3:4e:86:5d:18:a9:4f:9f:14:5b:94:e9:c6:6f:
33:68:51:e5:93:f5:ac:6c:47:83:9a:5b:c1:29:cb:
29:62:7d:c9:f9:47:c9:06:01:07:7b:35:f6:89:93:
cb:3d:2b:12:0a:55:a6:12:41:ff:09:f8:5e:78:62:
0d:95:96:a3:e0:69:47:d9:f9:bb:81:bf:4e:23:e0:
c4:e4:66:08:7f:36:da:f4:a6:d8:e9:43:f2:a1:30:
79:0c:08:65:53:d6:b6:ef:a4:27:9c:2e:9b:1a:bd:
a5:ad:17:b3:c0:da:44:af:74:46:b6:db:94:0b:b6:
82:9a:1b:c1:f8:c3:5d:be:8b:9d:21:e7:33:cb:4d:
21:8e:f8:3d:7b:b5:95:47:58:7f:70:3d:58:90:da:
51:7d:10:a3:a4:a5:19:bd:ca:99:e9:64:cd:f0:d0:
47:91:9b:06:19:f6:67:57:cc:94:01:ee:90:d1:59:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:9C:DB:9C:D3:DB:58:C3:29:E0:2A:85:A8:68:F3:6C:4B:1B:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl
X509v3 Authority Key Identifier:
keyid:E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer
sbgp-ipAddrBlock: critical
IPv4:
66.154.117.0/24
66.154.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:17:ca:d8:d8:9e:dd:04:58:70:4a:d3:af:f0:91:af:e1:35:
e2:e2:0b:dd:d2:00:8a:62:e1:dc:33:a6:c6:64:6e:63:7c:50:
d4:4c:c9:1f:bc:00:60:e2:57:17:46:ff:f5:1f:35:6f:06:dc:
2c:67:62:69:e7:dd:31:46:94:14:83:68:7a:6e:26:2d:cd:6a:
b6:13:d6:55:8e:d8:d3:a9:4a:3e:69:6d:51:44:42:3f:5d:c0:
0f:02:7c:e5:92:91:c3:8c:d1:de:b0:1c:85:05:aa:77:2e:7e:
dd:9d:a6:aa:f0:f6:2d:9f:1f:0b:f4:2f:93:bc:5e:ab:71:8d:
d3:26:c6:0a:29:43:5b:45:7e:f7:59:53:45:b8:d5:fd:21:f8:
f9:06:cc:9d:ea:2e:06:2a:fb:e4:d4:38:50:f3:2f:2d:f2:cc:
84:be:83:a2:c8:34:86:86:41:ba:76:5c:c7:b3:b4:44:8f:c5:
ef:80:00:90:3d:81:9c:a6:cf:4f:8d:79:00:cf:a1:6e:03:5b:
ed:14:74:35:92:27:65:78:d2:ee:88:b1:eb:96:4f:5f:45:f0:
c0:08:b5:29:d6:77:32:f2:26:ea:d0:b0:25:04:eb:a5:6e:df:
7e:7d:fb:f9:da:8f:5e:01:27:8f:c4:ab:b4:25:24:0e:2d:5e:
96:cb:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:58:16 2025 by rpki-client