Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd84268b-7090-3d4f-bc97-1ac6dca866c3.roa
File: bd84268b-7090-3d4f-bc97-1ac6dca866c3.roa (raw, json)
Hash identifier: ynmOlHKd1qf6pW9Xx5QO0Pd69zSy2glcffqEd2U1B8c=
Subject key identifier: 3A:AD:FF:2B:D5:F8:7A:87:09:18:51:38:6A:DF:16:9A:8E:E6:5D:27
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847FF4A4181BAE4D5132E24E8C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd84268b-7090-3d4f-bc97-1ac6dca866c3.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 398395
IP address blocks: 108.165.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:41:81:ba:e4:d5:13:2e:24:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=02b361af-d856-4a95-990f-b03c48e80482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:3f:5a:fb:7a:a1:b7:fb:d2:a0:48:b2:18:
db:de:35:d2:66:66:80:66:2e:da:3a:5e:ec:f6:e0:
20:b1:9e:9b:b7:d1:d9:e8:9d:c8:b9:20:fa:59:1c:
48:1f:5c:d2:13:72:29:90:1d:0e:b7:5d:e5:99:51:
09:14:d1:fe:f4:0d:12:c6:1f:c8:3b:60:29:d6:75:
ca:74:c6:90:91:e1:a9:00:3c:0d:99:19:03:1d:17:
a5:db:e1:08:c7:a3:91:3e:b5:b0:7a:ed:97:96:97:
94:92:bd:61:e8:64:8a:e1:12:9f:bf:f1:22:61:a3:
fb:61:de:16:2b:d8:e3:25:5a:92:46:0a:97:da:e8:
0d:f6:cc:52:9a:10:72:6e:d9:2e:b2:09:a3:72:f9:
29:14:9f:0f:16:b0:6d:31:f9:56:45:c6:3f:58:ff:
30:d2:3e:19:cb:d8:53:2d:cb:c4:fb:cd:ed:c3:01:
04:58:26:58:e6:18:51:ea:5b:95:b3:41:88:80:f0:
b1:dc:5d:91:c0:d3:bc:75:23:2e:71:eb:45:bd:f1:
5b:27:67:60:35:ba:c1:bd:88:e6:b2:98:6e:af:ff:
aa:02:e6:d1:9c:d7:95:6f:14:c7:59:94:75:90:f2:
2c:a5:fd:0a:97:89:50:8a:e6:d2:54:55:8f:fe:35:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AD:FF:2B:D5:F8:7A:87:09:18:51:38:6A:DF:16:9A:8E:E6:5D:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd84268b-7090-3d4f-bc97-1ac6dca866c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:47:f7:ac:1a:ab:12:56:12:47:4e:37:80:34:bb:35:f5:3e:
18:6a:da:8a:ca:51:e5:cb:df:ca:be:76:6c:8d:c1:63:c9:20:
1c:a7:46:95:d3:43:17:eb:36:8b:e6:fe:1c:e0:a7:19:80:54:
25:49:1e:4f:1e:94:31:eb:1b:f8:6b:95:02:5e:aa:92:4c:23:
d2:7e:a5:0e:73:cc:fc:ca:23:13:84:2e:bf:0f:9f:b3:b6:d1:
51:ab:31:13:01:ef:83:55:ec:4d:78:ee:7e:7b:c7:54:8d:7e:
88:7e:ea:22:81:2f:12:6d:1f:23:c8:5b:45:52:85:ba:0e:a5:
47:53:de:d8:be:43:27:37:af:a7:04:e8:aa:5b:92:5f:7c:9a:
e4:78:e8:b3:00:e2:0b:85:ab:01:cb:51:f7:7a:48:71:9c:37:
f2:c3:17:a0:ad:bb:36:04:cd:04:25:b5:42:13:bc:d4:9a:ce:
77:27:a3:65:01:d8:a6:d0:1b:2c:af:5b:07:26:c7:15:d4:c1:
0f:4d:45:39:09:1a:41:6f:78:6c:9f:a6:31:fe:ce:10:9a:aa:
e0:78:c2:2f:15:22:d0:74:22:2e:3e:41:93:29:61:2a:c5:a3:
2e:ad:67:15:43:08:6c:4e:f4:04:57:8d:cc:3e:87:34:1a:50:
15:70:56:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SkGBuuTVEy4k6MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
MDJiMzYxYWYtZDg1Ni00YTk1LTk5MGYtYjAzYzQ4ZTgwNDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lc/Wvt6obf70qBIshjb3jXSZmaAZi7aOl7s
9uAgsZ6bt9HZ6J3IuSD6WRxIH1zSE3IpkB0Ot13lmVEJFNH+9A0Sxh/IO2Ap1nXK
dMaQkeGpADwNmRkDHRel2+EIx6ORPrWweu2XlpeUkr1h6GSK4RKfv/EiYaP7Yd4W
K9jjJVqSRgqX2ugN9sxSmhBybtkusgmjcvkpFJ8PFrBtMflWRcY/WP8w0j4Zy9hT
LcvE+83twwEEWCZY5hhR6luVs0GIgPCx3F2RwNO8dSMucetFvfFbJ2dgNbrBvYjm
sphur/+qAubRnNeVbxTHWZR1kPIspf0Kl4lQiubSVFWP/jUKvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqt/yvV+HqHCRhROGrfFpqO5l0nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmQ4NDI2OGItNzA5MC0z
ZDRmLWJjOTctMWFjNmRjYTg2NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVH96waqxJWEkdON4A0uzX1Phhq2orKUeXL38q+dmyNwWPJIBynRpXT
QxfrNovm/hzgpxmAVCVJHk8elDHrG/hrlQJeqpJMI9J+pQ5zzPzKIxOELr8Pn7O2
0VGrMRMB74NV7E147n57x1SNfoh+6iKBLxJtHyPIW0VShboOpUdT3ti+Qyc3r6cE
6Kpbkl98muR46LMA4guFqwHLUfd6SHGcN/LDF6CtuzYEzQQltUITvNSazncno2UB
2KbQGyyvWwcmxxXUwQ9NRTkJGkFveGyfpjH+zhCaquB4wi8VItB0Ii4+QZMpYSrF
oy6tZxVDCGxO9ARXjcw+hzQaUBVwVtI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:18 2025 by rpki-client