Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
File: 82188834-19d0-34be-9f3c-13ee797db6fa.roa (raw, json)
Hash identifier: ddtViimXZwzlgM0zh7YVKwP6U3Tb+Z/ZPRD5NQ3V6Ek=
Subject key identifier: A4:B8:26:59:5F:92:41:B5:4B:07:42:27:55:97:1A:F2:C4:76:4F:69
Certificate issuer: /CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
Certificate serial: 010D0C9F43285848424AD7E54EEF458942FCADE8
Authority key identifier: A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 54665
IP address blocks: 66.128.128.0/20 maxlen: 20
162.220.84.0/22 maxlen: 22
192.190.88.0/22 maxlen: 22
198.177.52.0/22 maxlen: 22
199.59.112.0/22 maxlen: 22
2605:4680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:d7:e5:4e:ef:45:89:42:fc:ad:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=4e924a43-e778-4e74-a1d4-1bac0aeade16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:b0:a4:19:eb:3f:4c:1f:10:a8:9f:87:8d:
5f:82:60:4f:2f:b5:11:99:df:e4:95:5e:59:0a:57:
62:50:1c:f9:39:a1:31:c4:af:94:a9:48:db:1e:e3:
b0:91:ff:37:a4:84:1a:1a:7e:a6:4c:af:3b:d4:05:
6d:c3:d3:3c:d2:32:25:0d:b7:25:73:1a:02:34:60:
fb:74:74:bc:f5:5f:9a:8e:aa:1c:53:3b:12:ac:9e:
b6:09:59:17:6c:79:0e:12:fd:d2:e2:0c:48:4d:94:
26:40:34:9c:25:1f:d9:da:dd:f5:06:30:2e:8f:8e:
eb:6f:85:67:76:42:33:35:ea:ac:d0:2f:b2:55:97:
4c:3e:74:ab:23:fd:13:e7:22:aa:79:f4:a1:f7:91:
8c:b1:fe:4d:f7:3a:00:a0:78:62:b1:44:61:2f:f2:
e5:30:17:ee:16:f2:12:2b:8b:ce:a8:0c:77:8a:95:
f2:1f:87:1a:ab:ce:7e:2d:ba:14:d8:77:94:3b:5a:
ac:18:51:b9:e4:a9:a2:04:f2:f7:5f:00:5e:17:2f:
fe:f8:df:92:4a:75:f9:fe:dd:7d:f2:b9:e0:a2:35:
32:26:67:4f:53:25:c5:6d:18:e5:e3:25:10:48:85:
93:af:cd:a5:19:90:3b:c9:2b:7d:6a:f8:43:ec:78:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:26:59:5F:92:41:B5:4B:07:42:27:55:97:1A:F2:C4:76:4F:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl
X509v3 Authority Key Identifier:
keyid:A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.128.0/20
162.220.84.0/22
192.190.88.0/22
198.177.52.0/22
199.59.112.0/22
IPv6:
2605:4680::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:75:88:70:98:be:ea:16:e1:7b:37:b2:18:db:6d:86:05:a3:
c7:8c:a5:39:0d:71:b4:26:95:75:d8:39:e5:15:53:79:fe:77:
ff:73:14:27:ef:74:aa:0d:1d:f7:98:5f:6a:0d:09:19:fd:9a:
17:92:fd:e2:f6:78:4d:b8:54:5e:9f:95:46:9b:c6:08:a1:53:
16:27:5d:8b:27:9a:9a:07:5b:f8:a5:aa:14:6f:ca:e1:06:eb:
52:9f:a3:89:d1:da:52:dd:f0:f2:85:30:c1:a0:de:d5:05:1e:
90:ec:ca:fe:f5:df:69:98:fb:27:27:e7:6e:a6:35:80:5a:23:
1e:b9:ac:ef:f7:36:36:fa:8a:60:7e:5f:d1:0a:ff:28:de:a3:
d6:de:3f:c6:a5:53:54:c5:93:f0:48:a1:69:46:77:a7:dd:c9:
d3:a0:22:bb:8a:88:be:07:76:73:ce:61:f3:c2:d6:0d:42:4f:
3a:54:84:f9:d4:64:fd:ab:be:99:4e:9d:c1:c8:02:36:ae:d4:
8b:77:3b:d3:20:5e:d4:ff:5c:16:f3:de:51:4c:78:5f:bd:ae:
f2:bb:b0:ce:35:d6:43:71:15:9a:95:e7:21:59:60:ec:95:f1:
0c:67:c0:fb:54:7b:b2:89:45:19:4d:74:ec:34:29:4b:6d:89:
f0:b6:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:21:59 2025 by rpki-client