Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa
File: 70c8300b-3f8c-3cac-af15-749f60c97054.roa (raw, json)
Hash identifier: N7eyg7q2KTgC6vik8LMXs6i/CBIkkXBRqPsA7cQB6z8=
Subject key identifier: ED:7E:BE:3E:B2:4F:7E:CD:36:E2:5D:D2:F7:9A:BF:FA:28:3B:82:6B
Certificate issuer: /CN=b40428c0-ba21-44c7-86bd-39d34a17e438
Certificate serial: 010D0C9F4328584817051471A2E56A344DB6EB80
Authority key identifier: 62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 66.33.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:14:71:a2:e5:6a:34:4d:b6:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40428c0-ba21-44c7-86bd-39d34a17e438
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=7386708a-074e-4e4f-8e8e-d68f572a8fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:2c:42:74:54:1a:6d:1b:44:67:28:ac:3a:
99:29:35:4f:c0:c9:49:60:f4:aa:74:29:79:20:f0:
49:49:14:eb:22:1d:c8:c6:a4:a3:a7:80:74:21:48:
42:d0:a5:6b:e0:37:ea:87:47:c4:54:3b:ba:cf:61:
16:af:e0:b3:cd:7d:3c:1b:86:b4:87:c6:0a:6a:77:
1b:56:c3:bd:fb:0e:16:89:c1:f8:cc:74:be:0d:d4:
88:2c:c1:5a:04:81:f1:d7:08:21:04:d5:dd:23:15:
f4:24:2b:a8:26:60:da:23:09:cd:51:fb:8a:05:fb:
b9:1d:89:c7:24:15:e3:11:24:1d:58:2f:7a:98:7d:
00:d0:b5:96:7a:54:b1:b7:39:4b:39:17:de:5b:27:
51:07:28:27:28:ff:bc:c3:8c:d4:9d:da:e3:e0:f0:
36:a8:20:53:f7:22:d5:cd:6d:3d:cb:6c:0f:f8:90:
1f:37:19:49:bd:32:e8:ad:35:76:5d:98:10:d5:66:
72:e7:b9:85:17:60:b7:2a:7c:c9:c9:99:b7:ef:2f:
1f:de:d0:c8:2f:e4:5d:ae:41:cb:7e:e4:c1:ce:36:
10:49:8d:f8:fe:0f:df:0a:26:1f:37:59:fa:b2:cd:
ce:8e:dd:e2:ff:24:9a:46:aa:72:4e:6e:82:9d:41:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:BE:3E:B2:4F:7E:CD:36:E2:5D:D2:F7:9A:BF:FA:28:3B:82:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.crl
X509v3 Authority Key Identifier:
keyid:62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:a2:86:09:8b:3b:b1:82:c0:da:09:31:34:bd:fc:10:55:e3:
04:a3:d0:fb:93:eb:41:b7:4a:d8:f1:b4:ef:2e:84:91:6c:9e:
6f:59:4d:81:97:5c:8f:30:e9:9f:ad:57:a6:22:13:33:c5:3e:
8f:a9:5a:57:26:41:ab:0d:62:42:c2:66:dd:fd:45:40:f8:f1:
34:1f:1d:36:cf:6a:bb:3c:6a:ac:b6:cd:d6:15:e8:ee:ed:5a:
87:5f:0f:07:64:9f:37:03:d8:42:f8:f6:e7:f8:f5:36:8f:3a:
6e:f7:45:c6:26:34:c3:db:13:2b:55:21:43:1d:d0:db:82:03:
6f:38:c1:71:cb:16:3a:0e:1b:f5:76:6f:e3:64:97:37:be:6f:
5d:2f:71:cf:50:fc:2c:4d:b7:26:83:33:61:ed:d0:75:44:b7:
04:97:51:ae:8e:5a:12:6a:8b:6b:77:8a:56:f7:d3:52:e7:90:
65:88:00:d1:74:ef:d3:a8:27:c8:f8:eb:86:ab:d8:1c:af:76:
d4:ad:74:79:5f:9a:4a:e9:2e:a4:59:df:3d:b5:76:d1:eb:12:
54:22:52:54:f8:86:d2:10:06:62:63:dc:aa:44:7d:7a:96:91:
52:2b:f1:fe:d9:5d:98:54:90:0e:4c:f6:09:33:45:60:49:18:
2f:d5:33:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBRRxouVqNE2264AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQwNDI4YzAtYmEyMS00NGM3LTg2YmQtMzlkMzRhMTdl
NDM4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk
NzM4NjcwOGEtMDc0ZS00ZTRmLThlOGUtZDY4ZjU3MmE4ZmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9IsQnRUGm0bRGcorDqZKTVPwMlJYPSqdCl5
IPBJSRTrIh3IxqSjp4B0IUhC0KVr4Dfqh0fEVDu6z2EWr+CzzX08G4a0h8YKancb
VsO9+w4WicH4zHS+DdSILMFaBIHx1wghBNXdIxX0JCuoJmDaIwnNUfuKBfu5HYnH
JBXjESQdWC96mH0A0LWWelSxtzlLORfeWydRBygnKP+8w4zUndrj4PA2qCBT9yLV
zW09y2wP+JAfNxlJvTLorTV2XZgQ1WZy57mFF2C3KnzJyZm37y8f3tDIL+RdrkHL
fuTBzjYQSY34/g/fCiYfN1n6ss3Ojt3i/ySaRqpyTm6CnUEcxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1+vj6yT37NNuJd0veav/ooO4JrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNDA0
MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQzNGExN2U0MzgvNzBjODMwMGItM2Y4Yy0z
Y2FjLWFmMTUtNzQ5ZjYwYzk3MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjQwNDI4YzAtYmEyMS00NGM3LTg2
YmQtMzlkMzRhMTdlNDM4L2I0MDQyOGMwLWJhMjEtNDRjNy04NmJkLTM5ZDM0YTE3
ZTQzOC5jcmwwHwYDVR0jBBgwFoAUYii1ecqVTkstiLpdYZmWySaiBK4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNDA0MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQz
NGExN2U0MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL2ihgmLO7GCwNoJMTS9/BBV4wSj0PuT60G3StjxtO8uhJFsnm9ZTYGX
XI8w6Z+tV6YiEzPFPo+pWlcmQasNYkLCZt39RUD48TQfHTbPars8aqy2zdYV6O7t
WodfDwdknzcD2EL49uf49TaPOm73RcYmNMPbEytVIUMd0NuCA284wXHLFjoOG/V2
b+Nklze+b10vcc9Q/CxNtyaDM2Ht0HVEtwSXUa6OWhJqi2t3ilb301LnkGWIANF0
79OoJ8j464ar2ByvdtStdHlfmkrpLqRZ3z21dtHrElQiUlT4htIQBmJj3KpEfXqW
kVIr8f7ZXZhUkA5M9gkzRWBJGC/VM3M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:28 2025 by rpki-client