Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa
File: 5717c9fc-bf14-3da4-9371-4fc98a870156.roa (raw, json)
Hash identifier: 99DOHNvhQroQXQ7Btr3c1Xiqnk+jYGIutR6wJy7VZLA=
Subject key identifier: 29:8C:AA:A8:A5:43:7D:48:02:40:C0:F6:4E:10:F8:22:92:99:DD:71
Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Certificate serial: 010D0C9F432858488AE0A1C64E3CA3DF0D5A6300
Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 139648
IP address blocks: 66.118.0.0/22 maxlen: 22
66.118.0.0/24 maxlen: 24
66.118.1.0/24 maxlen: 24
66.118.2.0/24 maxlen: 24
66.118.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a1:c6:4e:3c:a3:df:0d:5a:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=2d56a4c3-fb49-41f1-a1b4-fc0a0980b4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:b8:ca:41:29:be:bf:0f:44:bd:b5:01:ef:
24:b0:79:fb:f5:c0:c4:9b:75:c8:90:85:8c:9f:2a:
48:d7:7f:35:9e:49:bb:7e:68:27:0a:9f:d7:5e:ff:
c8:8c:d1:8a:bd:ce:7b:a5:1d:4b:ef:e0:02:56:4c:
7e:b5:9e:f9:7f:86:21:ed:8b:7b:48:54:3d:d8:86:
b5:84:c4:09:07:62:29:65:08:85:ef:b9:28:64:93:
57:4a:69:13:c3:ea:48:48:98:cd:ec:3d:dc:9b:f4:
fe:87:11:ef:4a:7e:a9:7a:8a:0b:76:b9:88:72:2e:
45:34:d6:97:ff:9c:d1:dd:39:61:ec:88:75:71:df:
3b:43:45:f9:c4:e5:3c:ac:3a:31:ef:82:79:14:72:
0d:b0:f9:39:42:cb:27:18:e1:3d:93:7f:33:79:31:
95:12:1a:8c:b7:b1:8e:bf:d9:40:8f:d9:65:e3:1c:
42:ce:ca:73:69:99:55:d5:c0:50:0d:6c:f9:2e:6a:
35:bb:ab:45:be:36:e5:7d:c6:a0:30:35:f9:35:f4:
31:91:58:ef:fd:29:ac:a0:8f:e5:b7:6a:cc:b7:23:
cf:ab:0d:aa:19:6b:7d:a5:23:0a:47:22:f6:9a:63:
e9:2d:81:0d:6c:4f:93:ab:c8:19:08:e9:05:66:41:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8C:AA:A8:A5:43:7D:48:02:40:C0:F6:4E:10:F8:22:92:99:DD:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl
X509v3 Authority Key Identifier:
keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:94:82:18:91:19:6a:5b:8f:51:44:54:94:7e:7d:5d:d7:c1:
ff:ec:d4:4a:63:01:d5:1c:50:b5:58:44:75:2e:b4:c9:dd:87:
6c:43:f9:91:02:b6:f6:4f:66:e6:cc:a4:fa:e7:f1:76:76:10:
81:50:ba:aa:04:73:7e:ac:69:eb:fc:90:30:cf:6c:d8:62:e5:
da:43:48:8f:30:34:cd:f3:15:d4:42:2c:21:f1:5a:65:21:21:
75:0b:3e:f6:75:97:78:ed:c0:d4:2f:be:27:a2:49:23:bc:69:
c6:bb:43:f4:e6:25:9a:d4:18:45:eb:e6:64:9b:45:bb:ca:ed:
33:99:55:3a:ac:b1:30:24:7c:0c:1e:ea:e4:61:3c:83:df:c1:
c7:3f:b5:c8:04:4a:d9:c6:e2:00:fd:2e:38:d8:17:d0:c4:26:
87:9d:83:d7:a6:4a:23:a9:16:d8:a0:f9:f5:c3:37:21:27:c5:
ba:ba:e5:fd:aa:96:23:50:ae:58:8c:3f:69:f4:65:a0:a1:d6:
fe:39:b0:72:2f:15:1b:65:15:9b:bc:e1:a9:3f:0a:1c:78:a2:
d9:a7:ce:01:3a:05:9a:e5:95:b7:26:33:a8:b6:01:74:03:ce:
21:79:18:8b:9f:c4:55:e0:44:18:bc:9a:a8:45:34:3d:7a:f6:
e8:6f:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:46:19 2025 by rpki-client