Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4e25488-149d-3b9e-b8ef-7cf4d785c0fc.roa
File: d4e25488-149d-3b9e-b8ef-7cf4d785c0fc.roa (raw, json)
Hash identifier: hjPCOk5gqL/2V8KBxgWH48lFzVVjYka5COt7f2Xy6A0=
Subject key identifier: 5F:70:05:76:77:2A:1E:F5:66:BE:5C:9E:E1:3A:77:A3:71:44:9B:96
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488B5275950A64061A8CAB7280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4e25488-149d-3b9e-b8ef-7cf4d785c0fc.roa
Signing time: Tue 14 Jan 2025 17:50:24 +0000
ROA not before: Tue 14 Jan 2025 17:50:24 +0000
ROA not after: Mon 14 Apr 2025 16:50:24 +0000
asID: 7029
IP address blocks: 66.16.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:52:75:95:0a:64:06:1a:8c:ab:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 17:50:24 2025 GMT
Not After : Apr 14 16:50:24 2025 GMT
Subject: CN=5a4c62ba-2b23-4caf-a612-0df9a522cf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:68:3d:63:ee:6f:62:13:05:6d:9c:6f:88:
6f:3e:ed:c3:57:3a:cc:97:8d:ae:83:ec:b1:80:70:
ef:02:8a:40:3a:f5:cf:bc:77:52:af:76:2a:46:ff:
ea:04:c7:4e:b8:55:12:52:0c:89:e2:59:a7:78:d2:
68:49:2f:cb:64:ac:8c:7f:74:1d:6d:79:1f:bf:fb:
de:08:3e:ff:78:8b:a9:20:0a:f1:53:68:8f:7e:8a:
20:11:81:ec:52:6f:16:18:9f:73:a5:f1:39:05:0c:
cd:39:8c:35:1a:08:31:cb:bf:80:0b:66:e7:dd:65:
01:13:74:0d:8c:bd:6b:26:39:a0:ea:6f:6a:67:63:
81:ba:d3:2c:f8:26:83:39:06:c8:df:88:2d:c0:65:
72:bf:ad:84:f5:73:51:eb:f9:50:54:3b:12:7d:06:
cf:c3:54:c8:84:4a:39:ff:2e:33:20:07:5e:56:6e:
44:31:85:a8:41:c4:b4:f0:d0:3d:5d:9b:39:19:86:
7a:21:18:cf:f7:3a:da:6a:5c:59:f3:2b:f6:7a:ff:
50:ec:5d:a1:dc:9f:b2:77:e8:6a:79:2d:71:84:be:
01:e4:58:7b:2b:e5:a0:d6:2b:d6:ec:49:48:42:f1:
8c:3f:ef:9a:21:4e:bc:d5:ad:84:ca:9f:88:0c:e3:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:05:76:77:2A:1E:F5:66:BE:5C:9E:E1:3A:77:A3:71:44:9B:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4e25488-149d-3b9e-b8ef-7cf4d785c0fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.16.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:8c:c7:a1:a5:66:fe:a2:a4:d4:dd:46:ee:78:db:e9:b3:0f:
8a:b3:61:60:81:66:f8:62:5d:7f:f7:36:fa:c6:12:91:0d:e9:
9f:05:ec:48:8c:01:53:59:1b:f7:ab:48:d9:16:d7:13:24:4d:
ec:91:07:68:b8:61:e6:c8:af:9e:25:c4:cc:94:23:69:67:59:
80:31:60:18:07:fa:51:83:51:32:07:c1:6d:06:c9:d2:c2:bd:
63:52:07:f2:4c:d3:44:2d:47:68:c6:50:b8:0f:9f:5c:e1:b6:
1b:f0:bd:5f:ef:ad:c7:b4:82:0b:72:4e:ee:f5:0a:16:d3:af:
61:0e:03:f6:0a:70:3f:83:f6:23:4d:90:77:a7:0b:52:fb:fd:
52:ce:33:d7:cd:67:03:6c:91:f7:40:87:de:80:a4:6f:58:db:
3a:55:1b:51:e2:8c:5f:82:e1:f2:28:3b:d6:10:a6:3d:43:06:
90:d2:de:b5:49:7b:0d:3a:63:92:be:ac:88:61:2b:3a:e1:52:
20:ac:8b:b2:66:4f:07:20:d6:c5:4f:d7:0e:0f:6c:aa:8c:c7:
12:3c:8b:6d:48:e9:f8:d3:e7:cd:80:63:6d:67:03:eb:d4:1c:
cc:a0:ed:91:ee:cf:ea:3c:4d:e0:6b:1e:62:ed:f7:5e:a1:7c:
34:99:38:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:20:24 2025 by rpki-client