Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa
File: d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa (raw, json)
Hash identifier: bJxvxT+loDRWhEXsR9yPVC/KlbYkDGnPztvGj6ml5O8=
Subject key identifier: B3:F9:BF:B7:F7:2B:93:71:01:B8:61:89:66:A9:CA:F8:4F:7F:04:93
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1552CABA35C41DED7301F68
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 66.83.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:2c:ab:a3:5c:41:de:d7:30:1f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=800d62f1-accd-4541-bd81-f96415e3ff68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:66:56:9d:28:d4:65:d0:dd:83:e3:d3:7a:a5:
14:50:39:64:9a:26:e6:93:78:04:2d:79:14:93:1b:
f9:20:25:27:85:57:9e:b5:82:77:c5:1e:88:3a:1c:
8e:96:eb:8c:c2:86:e9:05:bd:d1:f1:06:4c:4c:3b:
9d:a3:f7:5d:5f:9a:5a:0d:ec:68:78:29:d6:89:32:
70:9e:cd:8e:5f:1c:00:6e:e8:44:05:9f:4d:26:0f:
64:9d:9b:e4:47:5e:46:a2:8c:08:ec:70:36:59:7d:
9e:7f:e7:49:94:01:3e:35:0e:13:bc:3f:79:ac:00:
8b:e6:dd:71:75:22:0d:2a:fc:59:ac:95:cc:d0:64:
55:65:f4:0f:5a:bb:6d:e7:7a:b5:ec:b8:1d:96:15:
6f:96:29:f2:29:1c:cc:0d:90:d5:c7:8d:1b:f7:19:
4c:8d:d0:ab:e7:ba:ed:17:d3:4e:73:98:00:a8:b7:
44:ab:4f:ad:b6:94:84:c5:ab:72:ba:1c:49:31:a1:
cc:8f:72:fc:ad:e0:78:00:4a:20:5a:2f:dd:d6:0f:
d4:d9:37:30:1a:68:56:89:b4:02:a1:ac:b0:a6:7b:
95:a0:9c:a5:5e:25:3f:57:08:57:d5:92:f8:b7:b0:
c2:f6:18:09:45:f9:6c:2c:88:a6:fa:d4:f0:d3:83:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F9:BF:B7:F7:2B:93:71:01:B8:61:89:66:A9:CA:F8:4F:7F:04:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.83.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:d9:e1:be:49:3c:3a:c0:88:1b:de:68:a1:39:04:38:d9:76:
33:59:03:9b:bd:d7:5d:15:cd:ef:e7:35:e9:47:a7:e9:23:63:
2b:23:dd:cd:4e:cd:f0:a8:e7:8b:c0:86:3d:30:c4:01:80:da:
95:bc:eb:e3:9e:30:ba:54:0d:e6:08:ca:cb:d1:dc:b1:91:4e:
c1:4e:ae:cc:6e:3c:ab:15:ca:c0:35:bd:2e:1c:01:72:db:42:
dc:81:b8:d3:88:c6:f2:3c:79:ca:61:d9:75:b8:93:72:80:fe:
3c:7a:4b:32:17:6c:04:72:4f:8b:96:24:4c:57:cb:82:f3:1f:
52:92:4d:0e:6d:9a:03:c5:38:13:76:5f:41:78:cb:73:e7:c4:
5f:ac:5c:d8:40:3a:b6:00:1b:74:5d:a5:c5:37:49:9a:bb:82:
a5:b8:d3:cf:81:a3:76:c4:4f:6b:96:10:07:f0:96:f3:91:84:
14:c1:08:9d:17:9f:7a:c8:60:2d:49:7e:59:ee:3c:47:e6:57:
b9:2a:db:27:1b:c3:3a:7d:e6:c6:d8:f8:cd:ae:5a:4d:3e:d4:
78:d0:56:10:0a:a8:40:32:c7:7a:5a:14:e6:b5:bc:53:ad:46:
be:b2:2a:57:c9:ae:4d:29:e3:00:36:87:62:b5:ee:e3:4b:7b:
fc:f3:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:21:03 2025 by rpki-client