Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc69b148-a75c-3d83-b48f-c19abef36ac0.roa
File: fc69b148-a75c-3d83-b48f-c19abef36ac0.roa (raw, json)
Hash identifier: FjWSK+8zqj1DXB9oY2vNcd+DqnqesLXxuv5/rIm/p3I=
Subject key identifier: 20:C5:5D:AF:FB:03:43:78:4A:DF:19:62:FA:92:E4:0E:1B:10:01:CF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584886B07FFCFDEA59C1B1F0BA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc69b148-a75c-3d83-b48f-c19abef36ac0.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 577
IP address blocks: 166.0.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7f:fc:fd:ea:59:c1:b1:f0:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=1b0450e1-3119-4e15-bfc5-2be78ab45497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:06:fb:65:dd:2c:d0:b4:03:c7:59:ba:ed:
70:73:c7:cb:b8:08:c6:31:ba:7c:1d:5c:eb:0f:b3:
df:2b:bf:bb:ad:3c:00:3d:4f:76:e2:04:d9:fc:f1:
68:5c:04:9e:1e:3f:68:e2:4c:cc:d3:3a:e5:c7:fd:
e9:c9:df:c6:d8:13:4f:7e:cb:87:dd:1f:fc:83:ef:
44:40:d4:54:30:0b:b8:aa:7e:92:08:ff:df:06:96:
12:54:39:be:2c:b6:fd:4e:b2:ca:15:75:0c:1e:06:
48:ba:8d:6c:f4:d5:11:e3:e4:5f:7f:0c:6f:d0:31:
ea:f2:fa:0b:19:d1:fd:04:c7:46:3f:75:7e:64:3d:
85:27:51:67:b5:54:c2:89:e8:20:1c:c7:39:89:6b:
a0:0d:95:9a:21:a0:25:aa:bf:6e:89:12:18:6d:5b:
4f:c5:72:e1:ef:f3:97:a7:fb:b8:ec:58:d9:6e:20:
08:2a:81:65:34:01:93:3c:26:74:69:ba:e5:e9:84:
c8:2c:81:8c:a8:9c:3c:b5:6e:c6:40:05:ea:87:2b:
d7:c4:12:fa:d0:f1:bb:78:b0:5b:ce:be:ad:ef:aa:
32:2a:5f:73:1d:dd:51:f1:02:d0:14:3c:d3:b2:90:
27:cb:4b:0b:92:07:69:68:d1:15:a2:b3:a0:d8:73:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:5D:AF:FB:03:43:78:4A:DF:19:62:FA:92:E4:0E:1B:10:01:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc69b148-a75c-3d83-b48f-c19abef36ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:1f:a7:05:3c:63:9c:48:7b:cb:92:55:12:02:08:9b:13:5c:
cd:94:fd:84:43:c2:fb:75:5b:a1:f1:f8:b3:9a:b7:86:6a:31:
38:22:15:61:34:ea:8a:76:c6:89:97:55:78:f9:dc:97:e1:c9:
7a:00:5f:1e:90:50:8b:0a:e8:64:87:70:4d:76:3d:9d:7a:59:
81:1d:ba:d2:bd:65:29:23:fe:c8:e7:44:93:7e:60:14:67:db:
4e:91:f3:ea:bc:b0:b6:21:25:2e:f7:14:25:02:7d:a4:95:3a:
93:17:b4:53:c4:8f:60:16:c8:51:13:3f:85:2a:75:76:4e:d2:
13:1f:24:0f:e3:4d:b0:85:44:09:a2:79:30:3b:ed:78:6f:22:
f2:c1:f4:01:3a:71:b4:68:5f:d5:2d:19:a0:54:f8:46:9d:81:
31:45:e5:a6:ad:b0:4f:28:0d:f1:f0:7a:49:12:4b:9d:23:5f:
da:3d:ef:9b:43:8b:e6:50:46:20:a1:0c:49:29:6c:e2:28:52:
b1:44:3a:86:1c:4f:0e:cd:a0:3a:9f:84:aa:a8:25:92:24:2b:
f1:42:00:7e:38:34:79:ee:76:6b:cb:f4:88:20:27:85:19:9f:
fe:dc:f6:85:98:0a:41:d0:09:36:8f:94:2a:75:e3:36:04:9e:
6c:c9:1b:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsH/8/epZwbHwugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk
MWIwNDUwZTEtMzExOS00ZTE1LWJmYzUtMmJlNzhhYjQ1NDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWMG+2XdLNC0A8dZuu1wc8fLuAjGMbp8HVzr
D7PfK7+7rTwAPU924gTZ/PFoXASeHj9o4kzM0zrlx/3pyd/G2BNPfsuH3R/8g+9E
QNRUMAu4qn6SCP/fBpYSVDm+LLb9TrLKFXUMHgZIuo1s9NUR4+Rffwxv0DHq8voL
GdH9BMdGP3V+ZD2FJ1FntVTCieggHMc5iWugDZWaIaAlqr9uiRIYbVtPxXLh7/OX
p/u47FjZbiAIKoFlNAGTPCZ0abrl6YTILIGMqJw8tW7GQAXqhyvXxBL60PG7eLBb
zr6t76oyKl9zHd1R8QLQFDzTspAny0sLkgdpaNEVorOg2HPnMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDFXa/7A0N4St8ZYvqS5A4bEAHPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmM2OWIxNDgtYTc1Yy0z
ZDgzLWI0OGYtYzE5YWJlZjM2YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIfpwU8Y5xIe8uSVRICCJsTXM2U/YRDwvt1W6Hx+LOat4ZqMTgiFWE0
6op2xomXVXj53JfhyXoAXx6QUIsK6GSHcE12PZ16WYEdutK9ZSkj/sjnRJN+YBRn
206R8+q8sLYhJS73FCUCfaSVOpMXtFPEj2AWyFETP4UqdXZO0hMfJA/jTbCFRAmi
eTA77XhvIvLB9AE6cbRoX9UtGaBU+EadgTFF5aatsE8oDfHwekkSS50jX9o975tD
i+ZQRiChDEkpbOIoUrFEOoYcTw7NoDqfhKqoJZIkK/FCAH44NHnudmvL9IggJ4UZ
n/7c9oWYCkHQCTaPlCp14zYEnmzJG/s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:58:48 2025 by rpki-client