Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/72bb8b0d-1cca-3d28-8fa5-304ca075db54.roa
File: 72bb8b0d-1cca-3d28-8fa5-304ca075db54.roa (raw, json)
Hash identifier: zVmqo/3fs98t2ObRH7F1KAcO4BbME6N+6IEBS1dKPAU=
Subject key identifier: 51:08:65:28:38:8D:DB:77:3D:6D:41:59:6B:7D:88:C8:B0:9D:5F:2F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584829D2B0C8679AAFE6259BDFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/72bb8b0d-1cca-3d28-8fa5-304ca075db54.roa
Signing time: Tue 10 Dec 2024 19:39:33 +0000
ROA not before: Tue 10 Dec 2024 19:39:33 +0000
ROA not after: Mon 10 Mar 2025 18:39:33 +0000
asID: 7029
IP address blocks: 66.173.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:d2:b0:c8:67:9a:af:e6:25:9b:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 10 19:39:33 2024 GMT
Not After : Mar 10 18:39:33 2025 GMT
Subject: CN=997f1d32-24bf-4d1c-8c84-5db4907d7d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:98:4c:3f:45:5e:58:8b:97:3b:1d:2d:b5:
62:58:95:97:16:41:d7:b0:40:cc:17:f2:d4:0b:ad:
22:74:70:50:55:bd:2d:5f:38:c1:9c:21:4c:3a:d5:
ce:74:50:60:bb:46:fa:08:67:43:8f:91:e1:a5:97:
38:cf:06:db:19:49:a6:e1:72:a1:ee:57:6f:42:52:
65:63:bf:98:b5:6e:0f:e4:8c:dd:50:cd:df:ce:d8:
29:fb:3f:a5:d1:51:d3:f8:e4:3a:99:c1:33:bc:cd:
71:04:16:23:42:33:d1:af:3a:66:f0:23:fb:20:85:
e9:6d:7c:88:ae:76:bf:fc:87:9c:9d:e3:6b:a4:63:
79:e3:a0:d5:1d:dd:89:8c:1b:65:29:db:22:ec:bd:
78:c7:b9:d3:7f:73:7e:b5:64:46:68:24:3d:a6:bf:
87:39:0a:60:45:19:52:b1:94:21:eb:04:37:e5:95:
1b:2b:91:21:64:48:8b:a6:98:35:b1:e4:f4:d2:cf:
7b:05:02:75:e8:6d:25:6b:1a:a5:44:73:78:30:53:
31:78:38:48:36:75:64:34:6a:59:91:5b:62:4c:ce:
4c:56:87:7b:0a:25:bc:ca:c6:82:74:32:2c:0f:c7:
d6:cc:5b:76:59:1e:c4:b4:55:f1:3f:62:10:7c:a0:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:08:65:28:38:8D:DB:77:3D:6D:41:59:6B:7D:88:C8:B0:9D:5F:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/72bb8b0d-1cca-3d28-8fa5-304ca075db54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.173.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:49:7c:ed:fd:cb:67:7e:28:1c:54:d0:c8:35:75:46:c7:ce:
ff:a3:28:a8:2c:92:a2:95:7e:33:2e:ec:9d:9a:9e:38:ef:6a:
1e:2a:37:aa:1c:87:b7:65:79:bc:9b:65:74:fa:64:74:56:9f:
d1:ba:ad:36:80:63:ac:27:75:27:67:4c:89:03:bb:63:1c:b2:
01:20:ad:50:df:02:58:35:20:7c:8b:7f:de:c0:08:1d:ac:2a:
03:ea:be:54:2c:9a:09:48:99:68:72:c2:7e:31:27:8d:14:a6:
47:a3:a5:45:aa:e2:a3:ff:4e:d8:92:c1:92:7b:91:5c:96:27:
c4:a7:55:37:9a:11:af:85:04:b3:3d:1a:9c:31:98:19:a3:87:
56:c2:58:97:1b:02:c6:c8:dd:9b:b9:dd:42:a2:ac:0a:e2:77:
26:d3:93:3b:b0:e6:1e:8d:52:be:24:70:90:ef:0f:ad:28:10:
bd:fe:ab:5c:36:45:53:3a:81:3f:31:1b:42:98:40:84:d9:7d:
c5:60:8c:0d:be:1e:31:52:6c:69:b2:27:a4:1d:16:d4:d3:be:
d8:ba:25:33:42:4b:ed:e7:2a:63:f4:74:e1:08:4f:b1:f1:fb:
46:d4:97:7b:00:c1:db:34:71:32:9c:78:28:d4:3d:37:a6:da:
97:a5:e1:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgp0rDIZ5qv5iWb38AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIxMDE5MzkzM1oXDTI1MDMxMDE4MzkzM1owLzEtMCsGA1UEAxMk
OTk3ZjFkMzItMjRiZi00ZDFjLThjODQtNWRiNDkwN2Q3ZDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP+YTD9FXliLlzsdLbViWJWXFkHXsEDMF/LU
C60idHBQVb0tXzjBnCFMOtXOdFBgu0b6CGdDj5HhpZc4zwbbGUmm4XKh7ldvQlJl
Y7+YtW4P5IzdUM3fztgp+z+l0VHT+OQ6mcEzvM1xBBYjQjPRrzpm8CP7IIXpbXyI
rna//IecneNrpGN546DVHd2JjBtlKdsi7L14x7nTf3N+tWRGaCQ9pr+HOQpgRRlS
sZQh6wQ35ZUbK5EhZEiLppg1seT00s97BQJ16G0laxqlRHN4MFMxeDhINnVkNGpZ
kVtiTM5MVod7CiW8ysaCdDIsD8fWzFt2WR7EtFXxP2IQfKAYWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEIZSg4jdt3PW1BWWt9iMiwnV8vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzJiYjhiMGQtMWNjYS0z
ZDI4LThmYTUtMzA0Y2EwNzVkYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq3cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABJfO39y2d+KBxU0Mg1dUbHzv+jKKgskqKVfjMu7J2anjjvah4qN6oc
h7dlebybZXT6ZHRWn9G6rTaAY6wndSdnTIkDu2McsgEgrVDfAlg1IHyLf97ACB2s
KgPqvlQsmglImWhywn4xJ40UpkejpUWq4qP/TtiSwZJ7kVyWJ8SnVTeaEa+FBLM9
GpwxmBmjh1bCWJcbAsbI3Zu53UKirAridybTkzuw5h6NUr4kcJDvD60oEL3+q1w2
RVM6gT8xG0KYQITZfcVgjA2+HjFSbGmyJ6QdFtTTvti6JTNCS+3nKmP0dOEIT7Hx
+0bUl3sAwds0cTKceCjUPTem2pel4TM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:58:48 2025 by rpki-client