Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1b65b21-a0ee-3518-b321-6ac02803b6f8.roa
File: a1b65b21-a0ee-3518-b321-6ac02803b6f8.roa (raw, json)
Hash identifier: lgpg89VvBGdrVgAFAuZZU+JTsuZZYOWdwBwm9DPAG8w=
Subject key identifier: 65:77:09:82:93:38:32:D4:AB:B5:75:DB:5D:49:02:86:89:ED:44:37
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584800AFC51E879210E202AC3380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1b65b21-a0ee-3518-b321-6ac02803b6f8.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 7029
IP address blocks: 66.16.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c5:1e:87:92:10:e2:02:ac:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=e83f8118-b810-452f-abbe-f43657fb5ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:85:ca:9f:b6:6e:48:b1:a4:2f:8c:50:33:
1b:37:37:a3:3d:7a:ab:ce:82:cf:eb:01:5c:17:67:
fd:1e:c9:db:68:06:af:a4:09:57:ea:a1:57:c2:99:
98:9c:d9:87:13:c2:75:44:0b:2b:8a:d6:7f:26:ed:
6a:a9:8c:ca:de:0b:25:26:9f:f0:a9:98:59:bd:4a:
6a:a8:ff:ea:9a:da:8e:fa:93:5d:45:7b:e8:bd:50:
66:44:ad:35:cc:4f:dc:ac:3f:1b:8d:d8:87:63:21:
1b:d6:62:39:29:49:eb:a5:a9:7c:c1:51:fd:c1:9c:
a8:da:ac:15:b8:f6:73:0e:90:18:d4:5a:3b:c9:1c:
4a:93:63:23:db:8b:b6:73:fc:15:2f:81:dd:b4:41:
55:0c:fa:31:cc:a2:2a:91:de:a7:72:03:dc:b8:ea:
8b:5e:af:4a:05:5c:86:8b:ca:c4:84:42:f6:2f:94:
b8:f9:33:ac:43:a1:fc:5f:c3:59:bd:91:30:a1:16:
3a:94:88:6e:09:a1:d0:22:ce:86:a5:3b:84:cf:7b:
b4:97:80:08:0d:a9:09:dd:6a:19:c0:9a:87:fa:09:
93:a0:06:e8:e0:0b:f0:0d:f3:0c:17:29:07:81:47:
c0:7b:2c:27:fb:29:c8:fd:c9:ac:c5:ba:b3:2d:01:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:77:09:82:93:38:32:D4:AB:B5:75:DB:5D:49:02:86:89:ED:44:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1b65b21-a0ee-3518-b321-6ac02803b6f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.16.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:3e:74:98:24:8d:76:da:60:c4:45:49:f5:94:e1:fa:37:88:
11:9c:2d:2c:9c:65:2f:a4:bf:3f:54:ef:0b:64:85:64:2a:e9:
c1:a6:99:32:4c:4f:4f:b6:fc:67:03:d0:3b:16:94:6f:4b:7e:
49:13:c0:9c:e4:e7:29:e1:5b:07:e8:1b:82:42:b7:38:6c:04:
9e:52:59:6a:e5:b3:c3:48:85:09:4c:3e:2c:5b:f6:b7:80:e4:
29:97:27:32:1a:f0:31:6d:63:33:ff:43:e4:ba:32:41:a6:c8:
0a:79:06:d0:c5:8b:1b:14:c9:10:4f:93:6f:25:c2:cf:36:72:
f4:b4:6f:16:7d:5d:7f:a3:d2:e2:bb:dd:fb:52:8e:09:45:29:
f7:0b:0d:7d:bc:d4:fb:27:58:d4:75:db:7a:36:2f:5f:17:6b:
15:32:68:70:1f:11:4e:d8:f0:02:f8:a2:b3:ca:7a:26:59:3f:
e4:f7:84:9c:25:a4:bd:40:08:aa:a1:0f:23:c4:50:46:02:5d:
59:83:dd:ce:a2:02:0f:a9:95:0d:f6:af:5a:41:e5:84:e2:75:
07:a4:d5:a7:cf:e6:70:6c:49:b4:00:ef:fe:d9:b0:5e:2b:e5:
e8:92:ff:b9:a4:a9:9a:78:18:66:9a:79:23:fc:b6:e7:16:ec:
4d:5b:2a:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr8Ueh5IQ4gKsM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
ZTgzZjgxMTgtYjgxMC00NTJmLWFiYmUtZjQzNjU3ZmI1ZWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DmFyp+2bkixpC+MUDMbNzejPXqrzoLP6wFc
F2f9HsnbaAavpAlX6qFXwpmYnNmHE8J1RAsritZ/Ju1qqYzK3gslJp/wqZhZvUpq
qP/qmtqO+pNdRXvovVBmRK01zE/crD8bjdiHYyEb1mI5KUnrpal8wVH9wZyo2qwV
uPZzDpAY1Fo7yRxKk2Mj24u2c/wVL4HdtEFVDPoxzKIqkd6ncgPcuOqLXq9KBVyG
i8rEhEL2L5S4+TOsQ6H8X8NZvZEwoRY6lIhuCaHQIs6GpTuEz3u0l4AIDakJ3WoZ
wJqH+gmToAbo4AvwDfMMFykHgUfAeywn+ynI/cmsxbqzLQGXQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGV3CYKTODLUq7V1211JAoaJ7UQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTFiNjViMjEtYTBlZS0z
NTE4LWIzMjEtNmFjMDI4MDNiNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhBDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0+dJgkjXbaYMRFSfWU4fo3iBGcLSycZS+kvz9U7wtkhWQq6cGmmTJM
T0+2/GcD0DsWlG9LfkkTwJzk5ynhWwfoG4JCtzhsBJ5SWWrls8NIhQlMPixb9reA
5CmXJzIa8DFtYzP/Q+S6MkGmyAp5BtDFixsUyRBPk28lws82cvS0bxZ9XX+j0uK7
3ftSjglFKfcLDX281PsnWNR123o2L18XaxUyaHAfEU7Y8AL4orPKeiZZP+T3hJwl
pL1ACKqhDyPEUEYCXVmD3c6iAg+plQ32r1pB5YTidQek1afP5nBsSbQA7/7ZsF4r
5eiS/7mkqZp4GGaaeSP8tucW7E1bKqE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:21 2025 by rpki-client