Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52a939ce-06bf-3398-95ba-2a4267cf983f.roa
File: 52a939ce-06bf-3398-95ba-2a4267cf983f.roa (raw, json)
Hash identifier: V7t5mnznyzx39r6QIg1FQp2wlB6z0F9BkIaZ1bHgIPA=
Subject key identifier: 39:7E:0D:C6:55:D9:03:0C:E8:E3:EC:9C:B8:E1:2E:AA:88:83:F6:27
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B50135AF37F6D6C8C6862C0
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52a939ce-06bf-3398-95ba-2a4267cf983f.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 7106
IP address blocks: 66.209.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:13:5a:f3:7f:6d:6c:8c:68:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=d28d4829-4465-4e42-ba93-c3c661585da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:dd:c6:4b:96:bc:84:7f:cc:59:07:b8:a5:
80:b4:7f:9d:8c:d8:eb:54:96:ef:41:b1:20:0e:8b:
8a:99:d9:a2:e7:eb:be:fa:37:1f:04:2e:17:1a:d3:
7f:21:48:b5:50:f4:4b:54:cf:d4:86:22:3f:79:6b:
7d:ba:6b:41:77:42:4c:65:dc:ca:9b:b7:82:1a:62:
4e:8c:4f:ee:77:53:c0:f3:e9:10:4f:b7:be:f6:e0:
b7:a1:ec:8f:2b:e3:a1:1a:b3:f5:1e:f8:87:39:b5:
5c:05:23:c8:f1:1a:83:7c:1c:b6:6c:23:e9:87:86:
b8:9a:67:22:58:2c:37:88:b9:e6:7a:c6:58:bd:51:
f6:53:20:72:a7:21:83:40:3c:50:f4:be:25:42:a5:
34:d0:fa:95:01:0d:01:45:56:10:aa:ad:bc:c0:36:
be:b2:6c:1f:26:ff:5f:f5:c2:5e:e9:8a:2d:00:94:
fb:d9:e3:7f:b6:b8:5f:22:e4:d7:57:84:81:0e:b0:
de:2a:4e:3c:84:64:3f:a8:68:76:18:75:da:56:3b:
a8:10:5e:3b:1b:b8:0f:26:a9:a3:37:e7:7a:ce:09:
d8:16:60:91:37:30:88:76:b8:f2:90:63:09:8b:32:
57:fc:13:80:59:ea:7c:dc:45:49:b8:d1:83:71:4f:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7E:0D:C6:55:D9:03:0C:E8:E3:EC:9C:B8:E1:2E:AA:88:83:F6:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52a939ce-06bf-3398-95ba-2a4267cf983f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
66.209.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:5d:90:8c:d7:e8:58:6d:cc:d6:2f:58:55:e7:f6:28:b3:06:
ca:1b:22:eb:82:ea:b7:21:49:a0:95:fe:be:a4:6d:5d:e1:40:
95:51:95:bb:82:0d:6d:a1:be:c2:30:90:1b:0d:5f:9e:1e:43:
3d:04:e5:ee:41:b7:79:dc:a1:34:c9:4a:9b:d6:6a:f3:9e:01:
05:5a:5f:f4:4f:fc:1d:d4:b8:bd:3e:ad:4a:74:9f:d7:b5:46:
d1:a0:ef:49:91:89:7d:e7:6d:54:6c:d8:70:75:bd:11:f0:7a:
79:c7:99:c8:61:ad:ab:fe:5a:78:ec:5c:ae:a6:d4:af:c4:92:
f8:0e:dc:b5:ba:32:cc:9e:29:b4:d6:22:32:0f:81:f7:da:3f:
19:4e:29:f8:7a:76:4a:87:50:7e:5d:7b:c8:77:e3:ed:a2:31:
be:6f:d1:d4:ee:b8:48:01:68:40:d4:93:3e:9c:bb:c6:36:b7:
0d:ef:67:a2:2d:93:91:0c:e5:99:8a:36:40:d4:4b:60:52:6a:
bf:d7:94:53:d1:6f:c8:ce:cf:19:51:eb:13:7b:13:79:c8:6e:
99:ba:7e:28:da:66:a1:71:09:08:b9:dc:2c:e6:2e:94:72:74:
5c:a4:b8:b2:0e:b6:14:2d:dd:ca:13:54:99:09:07:c3:57:0b:
ad:a2:14:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UBNa839tbIxoYsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk
N2ZiMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
ZDI4ZDQ4MjktNDQ2NS00ZTQyLWJhOTMtYzNjNjYxNTg1ZGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgjdxkuWvIR/zFkHuKWAtH+djNjrVJbvQbEg
DouKmdmi5+u++jcfBC4XGtN/IUi1UPRLVM/UhiI/eWt9umtBd0JMZdzKm7eCGmJO
jE/ud1PA8+kQT7e+9uC3oeyPK+OhGrP1HviHObVcBSPI8RqDfBy2bCPph4a4mmci
WCw3iLnmesZYvVH2UyBypyGDQDxQ9L4lQqU00PqVAQ0BRVYQqq28wDa+smwfJv9f
9cJe6YotAJT72eN/trhfIuTXV4SBDrDeKk48hGQ/qGh2GHXaVjuoEF47G7gPJqmj
N+d6zgnYFmCRNzCIdrjykGMJizJX/BOAWep83EVJuNGDcU8HYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDl+DcZV2QMM6OPsnLjhLqqIg/YnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2
ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNTJhOTM5Y2UtMDZiZi0z
Mzk4LTk1YmEtMmE0MjY3Y2Y5ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl
ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1
ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1
YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQtGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFdkIzX6FhtzNYvWFXn9iizBsobIuuC6rchSaCV/r6kbV3hQJVRlbuC
DW2hvsIwkBsNX54eQz0E5e5Bt3ncoTTJSpvWavOeAQVaX/RP/B3UuL0+rUp0n9e1
RtGg70mRiX3nbVRs2HB1vRHwennHmchhrav+WnjsXK6m1K/EkvgO3LW6MsyeKbTW
IjIPgffaPxlOKfh6dkqHUH5de8h34+2iMb5v0dTuuEgBaEDUkz6cu8Y2tw3vZ6It
k5EM5ZmKNkDUS2BSar/XlFPRb8jOzxlR6xN7E3nIbpm6fijaZqFxCQi53CzmLpRy
dFykuLIOthQt3coTVJkJB8NXC62iFEs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:47:36 2025 by rpki-client