Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/4f32464a-fbf0-3ae9-8ca9-572e079df9d3.roa
File: 4f32464a-fbf0-3ae9-8ca9-572e079df9d3.roa (raw, json)
Hash identifier: PCUrTSrrFK3rhWZMuWDtKo2ZtrKeNel+vUtacOOLEZ4=
Subject key identifier: 0F:6C:AB:BB:DB:C8:C1:81:9C:A6:48:FE:5B:85:F2:82:89:FC:48:38
Certificate issuer: /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial: 010D0C9F432858483E1AA4D5068648DFECF64080
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/4f32464a-fbf0-3ae9-8ca9-572e079df9d3.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 398772
IP address blocks: 66.180.138.0/23 maxlen: 24
66.180.141.0/24 maxlen: 24
66.180.144.0/24 maxlen: 24
66.180.147.0/24 maxlen: 24
66.180.148.0/23 maxlen: 24
66.180.151.0/24 maxlen: 24
66.180.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:a4:d5:06:86:48:df:ec:f6:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=c8431430-1040-4858-bf1f-0d2ca90b579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:eb:b8:31:e0:d6:df:a4:4a:96:72:69:a2:
c4:06:aa:2d:a7:90:52:d7:31:53:86:89:da:e9:41:
30:7f:61:22:84:5a:f0:83:f2:1b:84:04:8b:85:a1:
c7:0f:3d:f6:4d:e7:ca:41:13:01:c0:14:53:0a:3c:
23:cd:99:d5:ac:8d:ed:2c:8f:40:c8:1f:76:ae:0b:
96:dd:a5:70:5a:f0:25:64:0d:15:b9:30:88:32:7c:
a7:34:d5:e0:8e:0e:46:0d:b0:c2:85:a0:b0:81:41:
18:9f:d8:0a:0a:ec:80:45:94:34:c3:dd:59:dc:80:
2e:c1:ad:db:3e:8b:ec:8e:49:2c:d9:e8:53:f1:e5:
94:9f:12:cf:8a:88:83:6f:7f:d1:e2:bf:b2:6a:8f:
1e:f4:ea:3c:68:78:29:6b:80:7d:d9:bf:d4:ec:d6:
07:1e:32:35:0e:b3:e9:88:80:70:09:87:4e:bf:f6:
8a:c6:91:06:a0:49:03:fe:13:38:ef:f6:0a:ad:6e:
f9:11:d9:92:d4:2d:79:db:02:cf:1d:80:14:c5:03:
76:e6:fe:9d:23:d6:de:34:ec:97:1b:c2:26:8e:e1:
77:25:3a:0e:20:72:d7:b6:fc:78:11:6b:69:85:83:
9a:a1:ac:ce:84:a5:f4:d3:cb:49:e9:3c:81:cc:41:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6C:AB:BB:DB:C8:C1:81:9C:A6:48:FE:5B:85:F2:82:89:FC:48:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/4f32464a-fbf0-3ae9-8ca9-572e079df9d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
X509v3 Authority Key Identifier:
keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.180.138.0/23
66.180.141.0/24
66.180.144.0/24
66.180.147.0-66.180.149.255
66.180.151.0-66.180.153.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:84:53:68:4e:05:a5:ec:38:94:a4:8b:32:ca:90:dd:38:85:
65:4c:08:91:e0:8c:df:06:b9:bc:ae:ef:d6:d7:9c:00:ed:b9:
80:f7:f1:55:e3:d0:59:c4:db:0b:b1:58:1d:c4:03:42:0f:58:
fc:f1:5e:9c:b2:64:d0:22:4a:b6:36:31:a6:10:30:14:d5:22:
33:04:52:86:7c:02:7c:b6:eb:42:f7:c0:5f:25:c2:b4:a9:5e:
f7:1d:92:9e:6c:d5:88:68:69:fb:cb:6d:99:46:8e:dc:c0:a5:
0e:4b:22:79:44:41:7e:08:2b:a9:29:8e:bc:c2:00:29:8e:6b:
e3:0a:f3:f9:06:67:06:2a:28:70:64:5c:23:2b:6a:70:4c:8b:
49:3f:ac:d8:ed:51:10:3b:7c:48:ef:bc:b0:17:3d:02:98:f2:
30:1d:7e:21:24:61:92:59:8e:24:4a:64:f7:11:b1:79:03:14:
7d:66:3b:ab:7b:ce:20:df:a5:c4:41:31:e8:cc:43:f2:45:30:
35:30:da:ca:e6:dd:9b:58:57:92:ef:f8:04:8f:aa:6d:4f:32:
6e:93:ec:ae:0f:3a:bc:55:cf:f9:88:f1:e7:35:15:94:8e:91:
ef:b5:e9:c0:af:84:bc:24:4f:98:69:71:c8:c3:8c:73:a0:52:
2e:6b:6b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:18 2025 by rpki-client