Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa
File: c406f707-442e-31b7-a3ad-0e158a7f1148.roa (raw, json)
Hash identifier: WIqyaFLzDv6kjrGgVHDFG2rFmGPVXjWivhaXhpuVEow=
Subject key identifier: 5B:3B:B9:15:F8:6C:ED:CE:69:DB:C1:45:D6:BE:73:3E:AF:97:86:F8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21102A346C98EF0B7AE9980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 27338
IP address blocks: 66.0.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:02:a3:46:c9:8e:f0:b7:ae:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=49638527-2c64-4a7c-9d73-39706c24c53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:b2:07:b0:20:b6:03:d5:b3:d2:7f:dd:1e:
a1:ca:b9:93:71:70:86:76:8e:e3:68:4f:d1:5f:d8:
85:07:d7:2f:c1:0c:97:2b:b9:ef:74:60:46:0b:4e:
8c:0a:41:d7:95:3e:85:46:e7:c9:e0:1b:66:67:e2:
78:75:db:3a:5b:ea:29:28:71:76:30:f6:de:68:56:
64:7a:32:1d:8a:a6:8c:5f:97:41:28:8d:ff:45:8f:
02:76:b1:d1:3b:3f:9c:b4:0d:a8:79:60:5a:ee:16:
06:08:da:cf:a6:41:95:76:62:a5:e6:36:0d:35:1a:
55:44:a5:6f:d8:18:fa:e0:76:43:63:d2:d5:29:81:
d1:55:a9:18:09:e6:36:dc:28:d8:4e:7d:7d:4a:7e:
66:17:81:39:9d:81:8a:d4:c6:f2:5e:77:92:56:e4:
9b:87:cc:76:92:33:c6:ef:a0:28:7c:68:24:99:b6:
7f:bf:89:5a:c9:74:d7:85:f3:8a:b1:c9:f4:bd:8f:
4e:19:00:eb:84:f2:7a:4e:12:c0:14:3d:29:0a:4e:
fd:b6:43:2e:4c:91:0f:72:20:84:cb:03:b9:1a:ca:
91:26:8d:ed:45:14:61:88:29:8a:e6:b3:41:67:fb:
95:c8:0c:c0:cd:19:83:ae:d7:4c:b5:86:0e:2b:44:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:B9:15:F8:6C:ED:CE:69:DB:C1:45:D6:BE:73:3E:AF:97:86:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.0.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:3d:8c:fe:2a:17:c3:48:17:d5:21:06:9f:4e:54:98:cc:af:
fe:a7:d9:1b:15:60:4d:be:5e:d8:31:ca:2c:ec:61:05:ca:df:
05:59:cb:f9:c3:46:fb:29:4f:89:b7:54:d0:d8:1d:02:af:d6:
2a:93:f8:e8:57:70:cc:51:74:17:f6:61:8a:f0:4d:25:76:f1:
a5:2a:fc:c1:ac:89:eb:61:f6:ee:e8:f0:07:27:a5:01:fa:0c:
2a:5e:7e:ee:b7:14:f3:fe:75:fc:cd:40:47:68:ec:a0:a4:7d:
56:17:e6:19:ae:d6:bb:4a:8a:dc:64:cf:60:35:04:cb:f5:5f:
79:00:21:60:92:3a:81:b0:dc:c8:d3:bc:3e:04:2f:88:27:aa:
0e:16:1e:f8:e8:4e:9c:56:db:62:37:42:87:7f:01:62:58:f3:
3f:c7:3d:54:07:2d:94:f8:2b:f3:79:b7:8a:13:83:5c:d6:2c:
26:7f:1c:6f:84:db:1f:52:93:b8:25:08:7a:59:4e:64:13:d7:
b5:69:1f:73:c9:63:6d:0a:ef:8f:85:da:b3:2d:58:3b:89:98:
05:b4:4c:38:9d:fa:b9:e3:dd:72:89:76:3c:42:72:84:37:97:
42:fc:32:c8:94:42:d3:01:75:a0:62:37:2e:26:92:6d:48:a8:
f3:74:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:58:20 2025 by rpki-client