Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d483c70-e0c4-3c7a-9047-aa919c1cdb2a.roa
File: 1d483c70-e0c4-3c7a-9047-aa919c1cdb2a.roa (raw, json)
Hash identifier: 5RnqGomPi9f+59jQ7mIb3JGYZwn2KDVaqLqM/WlPLvQ=
Subject key identifier: 4B:52:29:42:37:C0:8C:E4:E7:C6:EE:25:AB:86:9C:AD:A6:E0:D1:4E
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858494B6402AE8F565E22C7566DF8
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d483c70-e0c4-3c7a-9047-aa919c1cdb2a.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 13576
IP address blocks: 66.115.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:02:ae:8f:56:5e:22:c7:56:6d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=bea18707-17d4-432a-b9e7-5c0f85414d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:9f:f5:2f:95:0e:45:46:ae:23:dd:73:ad:
85:01:9f:f6:05:1c:d9:1f:fd:fa:75:ad:95:69:9b:
f1:06:46:3b:7d:65:08:29:29:c0:cf:67:4d:3b:25:
d5:0a:6e:c9:55:00:a8:c2:d2:5b:96:4e:36:84:60:
f4:b7:f8:6a:90:6f:16:40:0c:fb:81:27:5b:44:3e:
08:33:bb:46:f3:e4:96:b8:7e:a7:94:f3:3e:b7:04:
e7:83:5c:f5:d6:13:ee:22:e7:1f:63:ff:bb:50:45:
91:90:03:65:15:47:f5:3e:82:7f:78:2a:aa:9f:3d:
88:f8:29:fe:a7:12:31:0c:b6:a1:4f:1e:aa:fe:a7:
c4:ab:89:f3:4e:ad:5b:31:3e:28:4a:23:af:85:03:
1f:26:cc:d0:85:46:65:09:53:8a:66:65:f4:a3:68:
10:73:27:a8:59:49:6e:8a:3c:3a:00:14:32:40:22:
e7:49:09:35:df:4d:f4:a0:d2:da:5c:25:32:9e:92:
d2:b2:ba:eb:b7:02:9a:4f:e2:f8:da:13:1c:87:4c:
a9:6a:7c:8d:bc:3c:e1:b6:9d:03:79:3d:2c:cd:76:
ac:4d:bf:4b:b8:5b:89:b3:e6:6d:46:43:7f:db:5d:
4d:1d:9e:3f:94:04:3e:e6:17:17:71:14:74:42:ec:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:52:29:42:37:C0:8C:E4:E7:C6:EE:25:AB:86:9C:AD:A6:E0:D1:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d483c70-e0c4-3c7a-9047-aa919c1cdb2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:69:b5:92:c9:f6:7d:cf:a6:72:1e:ab:bc:6f:f3:b6:61:90:
ba:b6:c3:9b:56:03:d8:e9:ba:be:d3:e4:f8:4c:29:1a:b3:c1:
89:fe:97:2c:62:e5:39:34:d8:01:62:9c:8f:2f:93:5e:e2:d3:
f6:c5:72:72:98:b8:e6:a3:08:38:a4:73:07:b3:d3:40:54:b3:
f7:66:be:3e:de:a6:92:5c:25:f7:db:15:29:38:d6:b2:7a:a9:
5c:a8:00:f8:b2:f1:32:4a:92:47:b3:2b:a2:c0:30:7a:92:33:
c2:ed:c4:f1:62:00:c4:8e:22:32:ad:5f:e1:73:a0:23:1b:bc:
ba:8a:37:e2:34:2f:48:92:30:2c:77:12:39:fb:27:87:d8:8a:
16:c0:62:60:b5:4f:05:91:ea:9d:93:e8:11:9d:f2:80:00:57:
fa:f0:2a:27:f7:f9:d7:3e:cb:a1:2d:6a:42:bd:d3:f8:d4:f8:
8d:e5:da:2b:89:a6:a3:57:31:7a:a4:e0:52:43:93:7d:3c:aa:
d4:e9:8b:bf:ce:d6:61:28:c9:10:3b:38:2e:2c:01:c7:7d:5b:
bd:0e:04:5e:c7:91:39:97:46:89:07:4d:c6:6e:d8:66:ec:f5:
67:ab:75:2f:86:31:74:20:da:8c:7e:57:42:e3:da:98:6c:1f:
bc:58:4d:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAKuj1ZeIsdWbfgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
YmVhMTg3MDctMTdkNC00MzJhLWI5ZTctNWMwZjg1NDE0ZDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b+f9S+VDkVGriPdc62FAZ/2BRzZH/36da2V
aZvxBkY7fWUIKSnAz2dNOyXVCm7JVQCowtJblk42hGD0t/hqkG8WQAz7gSdbRD4I
M7tG8+SWuH6nlPM+twTng1z11hPuIucfY/+7UEWRkANlFUf1PoJ/eCqqnz2I+Cn+
pxIxDLahTx6q/qfEq4nzTq1bMT4oSiOvhQMfJszQhUZlCVOKZmX0o2gQcyeoWUlu
ijw6ABQyQCLnSQk13030oNLaXCUynpLSsrrrtwKaT+L42hMch0ypanyNvDzhtp0D
eT0szXasTb9LuFuJs+ZtRkN/211NHZ4/lAQ+5hcXcRR0QuxT/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtSKUI3wIzk58buJauGnK2m4NFOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMWQ0ODNjNzAtZTBjNC0z
YzdhLTkwNDctYWE5MTljMWNkYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALtptZLJ9n3PpnIeq7xv87ZhkLq2w5tWA9jpur7T5PhMKRqzwYn+lyxi
5Tk02AFinI8vk17i0/bFcnKYuOajCDikcwez00BUs/dmvj7eppJcJffbFSk41rJ6
qVyoAPiy8TJKkkezK6LAMHqSM8LtxPFiAMSOIjKtX+FzoCMbvLqKN+I0L0iSMCx3
Ejn7J4fYihbAYmC1TwWR6p2T6BGd8oAAV/rwKif3+dc+y6EtakK90/jU+I3l2iuJ
pqNXMXqk4FJDk308qtTpi7/O1mEoyRA7OC4sAcd9W70OBF7HkTmXRokHTcZu2Gbs
9WerdS+GMXQg2ox+V0Lj2phsH7xYTSw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:39:41 2025 by rpki-client