Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/82ba85af-c651-3d08-b75e-2ec240f0f1ba.roa
File: 82ba85af-c651-3d08-b75e-2ec240f0f1ba.roa (raw, json)
Hash identifier: 0ge3HV1x+WKcouJr8wUgtTzLnDgobIAoH5IlhhLs5vk=
Subject key identifier: 67:A9:EA:96:3C:4A:19:CA:48:52:6D:07:55:D4:77:B8:A8:3D:33:4C
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F43285848504034711E0130344CA799C0
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/82ba85af-c651-3d08-b75e-2ec240f0f1ba.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 19551
IP address blocks: 66.206.199.0/24 maxlen: 24
66.206.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:34:71:1e:01:30:34:4c:a7:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=5bf1b305-7666-4fdc-b860-c61dda8e63e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:32:5d:2e:ff:30:fb:ef:c5:7a:48:ab:11:
0b:5d:69:bc:58:7f:62:68:4a:6a:22:40:08:d4:fc:
24:e7:47:5c:f0:29:f2:a7:af:55:b4:be:3f:c9:55:
38:03:9a:ae:e0:f7:47:a6:19:fe:52:3b:6a:41:9d:
64:fa:b2:7f:06:a2:50:ce:13:c6:f1:3a:af:c8:a6:
45:d9:eb:69:24:c3:96:45:1c:ec:60:ad:ab:e0:4e:
6b:60:b9:e8:c2:43:46:44:a8:4b:d2:95:8c:87:72:
ee:de:e5:a4:08:af:38:48:8d:17:86:7c:a3:b4:4e:
9c:17:87:50:ba:9e:cf:24:c7:34:50:a5:a0:9a:00:
90:49:6c:45:fc:9a:89:75:16:4e:38:8b:9a:06:8b:
3b:5d:9d:36:57:da:8d:1e:1e:ca:c0:e5:66:f1:46:
0c:5f:c4:f9:ea:67:5d:80:9a:4e:60:e9:90:7f:e8:
4f:2e:1a:84:6e:5a:bb:9a:78:d6:bd:71:e5:48:5e:
be:f0:b5:b9:af:50:d1:d2:84:bd:63:89:b9:32:52:
1b:e4:65:7d:e4:73:2f:48:ff:22:8d:f9:1f:2d:39:
f5:90:a5:89:63:1d:ba:cc:90:fa:ce:e5:25:3d:8e:
21:04:9d:53:ad:0b:d9:94:ac:86:eb:d3:a1:4a:a9:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A9:EA:96:3C:4A:19:CA:48:52:6D:07:55:D4:77:B8:A8:3D:33:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/82ba85af-c651-3d08-b75e-2ec240f0f1ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
66.206.199.0/24
66.206.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:d6:ce:b6:e2:bb:79:ef:6d:ed:f2:48:56:69:37:4a:ff:82:
77:7b:7a:bd:da:3e:17:cf:96:e8:c7:a4:94:29:1d:94:7c:53:
bf:c0:47:24:18:2b:5d:52:1d:56:fd:35:b5:2e:61:b1:2b:95:
f9:62:5f:62:91:b5:d4:ec:c7:26:72:94:67:20:fe:57:bd:b4:
81:7c:65:67:97:57:ee:7f:cd:10:68:60:54:50:5c:23:e2:88:
cc:25:ee:17:39:50:e5:d6:e9:79:42:9f:d0:d8:fb:30:a4:a7:
25:de:c2:94:2e:8a:5f:b7:a4:da:c5:eb:54:e1:b6:e8:df:85:
43:4b:98:9c:c0:13:6d:aa:70:a0:6c:a2:68:b9:c3:4f:31:c9:
81:2a:9f:44:d7:ec:1f:3a:3a:cb:10:a4:18:f6:1e:a5:28:20:
18:65:28:0b:89:ed:0d:e7:ae:53:c4:c3:84:aa:56:ff:34:82:
94:b6:e0:0b:7b:1f:89:d2:70:b0:76:4a:13:aa:90:19:d7:3d:
cd:4c:7b:d8:42:cf:b8:51:f9:3b:7b:38:fb:cd:62:39:76:f8:
6e:b4:f8:b1:4e:b1:05:82:d0:fe:96:0e:33:1f:60:10:5b:9c:
e5:83:ae:c4:fd:ef:4c:01:f1:70:ad:c5:91:78:1b:ac:99:c5:
df:41:60:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:08 2025 by rpki-client