Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa
File: 3480552e-78d8-3380-996d-dd3f947bb79c.roa (raw, json)
Hash identifier: bt5PZocy/VyP+y2S2JzeM5hSEVekZPqr8PLBXw8onkA=
Subject key identifier: 26:8C:B1:03:C3:14:96:34:61:32:71:57:59:24:7A:B6:31:4B:4D:EB
Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Certificate serial: 010D0C9F432858490E16C7ED4A6D8E85A96BE340
Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 209242
IP address blocks: 66.118.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c7:ed:4a:6d:8e:85:a9:6b:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=3924d8ac-0d55-45fb-b0d1-58b49577f21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:57:e6:99:13:32:38:4f:17:61:fe:8b:20:
cf:5f:dd:8a:bc:f4:f9:c6:32:59:a6:40:a8:bb:e0:
ca:ae:0d:ec:66:c5:4d:a4:9e:dc:70:7e:4c:0c:eb:
28:29:03:e9:02:ef:c6:b0:2c:d5:66:f6:ad:a7:b8:
b0:6e:9b:37:9f:94:7b:64:94:43:33:a6:27:23:6e:
0e:4b:3e:95:fb:43:24:95:85:33:c6:a0:5f:6d:ee:
5a:95:e4:1f:95:c5:c7:9b:4e:17:ee:7c:49:f3:4d:
ce:fc:9a:36:49:bb:71:4e:80:09:44:69:09:d8:e5:
3c:49:6f:dd:57:70:a7:fa:02:8e:84:2b:53:2e:82:
97:0f:99:6f:3e:dc:c4:30:3a:43:55:76:6a:fc:3e:
74:2d:1b:d9:5b:62:28:6c:d9:29:f8:d5:d2:81:d5:
29:e5:5a:f7:3c:c9:05:61:17:73:90:07:c7:ac:81:
ec:ab:3a:5e:e6:de:c9:35:2e:c4:96:e0:b9:58:40:
ec:98:9b:c6:95:aa:59:9d:c2:0d:db:8f:a0:e2:86:
01:01:52:fe:27:c4:55:e2:52:8f:83:39:0b:8d:54:
29:83:33:bc:e7:1e:18:5d:3d:a1:75:bf:16:31:96:
a1:07:70:14:a7:d0:d7:c8:45:e3:30:1c:46:7c:62:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:B1:03:C3:14:96:34:61:32:71:57:59:24:7A:B6:31:4B:4D:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl
X509v3 Authority Key Identifier:
keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:9b:8c:9c:c4:37:8e:ec:be:f5:b5:76:65:be:84:09:7f:04:
a1:14:56:6e:ac:ad:70:09:e3:27:97:2f:a0:bf:38:06:f8:c0:
72:f7:4e:43:bf:6b:be:d4:ab:02:b1:c3:40:92:7c:46:1f:60:
58:95:58:8e:7f:48:cf:15:82:d0:40:66:33:4b:87:ba:ed:8d:
58:af:4e:e3:1c:28:34:24:95:2f:84:b0:13:ed:f3:16:a0:8e:
9a:67:c8:11:dd:35:2e:f0:83:8a:a1:87:21:cc:2b:da:71:92:
f1:ed:19:f3:ea:59:8b:ff:c4:bf:15:a4:03:83:a5:1c:3d:47:
72:81:be:47:26:32:a0:ac:e6:90:74:81:07:40:b9:c0:03:a3:
b4:d6:c5:c9:f8:1e:6c:ba:a0:94:78:82:da:00:89:36:d7:de:
29:c8:5b:67:c8:1c:f5:6b:3d:ec:da:28:a3:fa:20:ba:48:eb:
9e:cf:88:62:e8:1c:0a:61:da:ef:2a:16:a4:71:2b:ca:bc:b3:
e4:e5:32:5e:07:fa:58:4c:3a:cf:81:20:d8:e6:f3:a8:aa:ab:
21:89:9c:b1:aa:70:e4:55:21:8c:86:5c:c9:94:bb:3d:eb:f1:
e1:4b:13:f0:10:02:7c:60:9d:15:40:f0:44:b0:e7:6e:6e:a1:
c7:b8:13:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:11 2025 by rpki-client