Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa
File: bf09cbe5-0f95-3715-878d-025c118cc3f1.roa (raw, json)
Hash identifier: CMndYt5E15HHj5nKux7XoBjg6G8OoUfUdkKCZmSKut0=
Subject key identifier: 4E:99:10:D1:5D:0E:23:B8:E5:1C:18:A3:D5:3A:3D:B1:7E:15:92:6A
Certificate issuer: /CN=de84b539-8408-4f2c-8e81-05f7a1b73686
Certificate serial: 010D0C9F432858482EC0102090C55A847B93C1E0
Authority key identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 18779
IP address blocks: 66.154.117.0/24 maxlen: 24
66.154.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:10:20:90:c5:5a:84:7b:93:c1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de84b539-8408-4f2c-8e81-05f7a1b73686
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=8a459425-e9f2-4d8d-8f40-abba29c57c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:b5:29:75:72:1e:67:46:e8:02:4b:cb:fa:
6a:7c:36:a2:f6:61:03:58:b2:af:c5:45:83:d3:4f:
fb:98:28:35:c7:1a:3d:af:f3:ae:84:4c:51:7c:e3:
d9:65:88:2c:58:d2:35:4f:ed:64:0b:5c:6d:11:94:
ce:70:7d:7d:07:ae:2c:c5:6e:d4:80:a2:57:19:11:
2a:63:82:22:a7:58:56:cd:53:03:e1:5e:97:4c:a1:
63:dd:42:11:53:f2:bc:58:b1:11:af:be:5c:96:be:
e9:cd:17:5b:bf:ae:90:c0:e1:b3:83:86:55:e7:62:
ac:ce:c9:99:ad:d1:04:b8:24:38:06:fb:fb:6a:66:
4b:86:7e:68:9d:b7:b4:15:f0:da:93:50:10:d8:50:
9a:1c:b4:14:07:f4:5c:ae:33:eb:5b:34:76:af:74:
f6:12:15:26:27:2f:f0:26:54:3d:65:e5:2c:c3:a8:
23:bf:97:e9:05:e6:61:4d:7b:ce:b5:25:ea:89:40:
93:5a:92:50:84:9c:87:0a:79:8b:c3:84:c8:b5:4c:
8e:3c:58:c5:13:6e:ef:4f:50:9d:24:2a:bb:d0:8a:
da:56:6a:53:00:f5:a5:77:54:cf:eb:56:eb:13:d6:
bc:64:b4:a6:de:75:c0:98:43:46:01:4a:c3:26:33:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:10:D1:5D:0E:23:B8:E5:1C:18:A3:D5:3A:3D:B1:7E:15:92:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl
X509v3 Authority Key Identifier:
keyid:E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer
sbgp-ipAddrBlock: critical
IPv4:
66.154.117.0/24
66.154.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:6a:1a:19:35:a7:a0:6c:15:12:14:97:b4:49:6c:61:f1:cd:
bd:71:97:f4:d6:87:4a:38:9a:ee:aa:07:f5:c7:6d:b1:bd:8c:
f8:36:dd:6a:4e:b5:20:df:a3:2a:17:da:d5:bd:5b:ce:02:43:
dd:0b:ba:df:78:f4:51:78:f6:3d:7b:3e:51:42:e5:79:8f:b7:
3b:75:1d:63:2e:65:aa:3e:25:d2:74:d0:bf:81:67:ad:18:88:
12:f2:51:31:c9:cb:46:fe:43:53:cc:3c:a8:ce:09:54:80:e1:
d1:7b:05:2b:77:32:af:da:ff:88:52:ee:8e:e9:a2:fd:e0:62:
3e:99:c5:f2:77:09:fd:3b:67:0f:52:13:05:d2:80:61:50:df:
c9:dc:44:ca:a9:7b:c8:f4:e3:07:6d:77:8c:c0:8f:c7:4a:e4:
47:f7:25:a0:45:b9:3e:07:70:8a:3b:d4:6b:f4:03:a2:77:52:
a5:5c:b9:6d:8c:43:e4:3e:75:5d:56:67:a8:21:f3:53:fb:59:
db:38:ea:dd:8a:a3:0c:90:51:07:bd:72:ba:ee:11:3c:b5:45:
88:e6:a1:ba:87:ba:5f:65:b1:39:b7:c8:c1:a1:67:55:66:e5:
27:1d:f5:d4:27:31:72:59:03:99:f8:09:d9:e0:46:55:bf:0b:
6e:04:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:48 2025 by rpki-client