Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/59fe709a-06de-354b-a036-8341f794f5f8.roa
File: 59fe709a-06de-354b-a036-8341f794f5f8.roa (raw, json)
Hash identifier: BgSCgsf22nMuoy2EcCnqDpK4GQfPHlxg/qmYSP/ncgU=
Subject key identifier: 03:4E:01:EF:2C:A2:EB:7A:C3:D0:97:8E:2E:B5:0F:EF:F9:71:E3:53
Certificate issuer: /CN=0bed6185-186c-4da8-9253-7f61731aef25
Certificate serial: 010D0C9F43285848163100CA082AF5B683CEAE40
Authority key identifier: 40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/59fe709a-06de-354b-a036-8341f794f5f8.roa
Signing time: Tue 03 Dec 2024 18:53:24 +0000
ROA not before: Tue 03 Dec 2024 18:53:24 +0000
ROA not after: Mon 03 Mar 2025 18:53:24 +0000
asID: 14618
IP address blocks: 66.33.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:16:31:00:ca:08:2a:f5:b6:83:ce:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed6185-186c-4da8-9253-7f61731aef25
Validity
Not Before: Dec 3 18:53:24 2024 GMT
Not After : Mar 3 18:53:24 2025 GMT
Subject: CN=da309ab5-0db7-49eb-b5a6-948a3bd308d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e5:1d:19:c3:0e:13:a5:97:5e:52:1b:97:cf:
03:b4:ae:36:b6:6c:92:a0:37:cd:f9:fd:33:6d:1e:
63:8a:a0:4c:06:91:fb:ce:d8:8a:2f:9d:ef:e3:8d:
35:f8:37:bf:92:7c:f2:e5:ac:7e:cf:9e:0f:ec:a5:
f9:e1:5c:6e:7c:bb:cd:25:11:df:d8:20:b6:f4:48:
a6:76:cf:1b:81:99:b0:c9:c7:e1:c1:6a:3e:d5:38:
f3:3a:4e:5f:3a:95:b1:fa:4f:71:2c:ed:7e:e2:0a:
de:0d:33:c5:7a:48:a4:93:f8:4e:a2:64:71:44:4b:
42:47:b6:c1:31:31:e9:30:04:1f:96:f6:8f:e3:5b:
4c:1a:0f:cc:50:f6:b4:03:2d:ac:52:56:fa:f1:ee:
29:18:7c:58:05:a9:0a:5d:fd:01:aa:7a:1e:db:74:
ad:68:69:ff:e0:0d:5e:5d:3d:5b:c2:ae:1c:6f:75:
77:36:22:7c:c0:4f:2d:d1:47:c4:db:d1:3f:01:dd:
5a:63:28:c6:58:66:d2:a6:85:4c:77:8c:e9:1e:83:
ac:c5:16:2b:b0:9a:75:8d:c9:b3:bf:60:18:62:be:
35:72:cc:cd:e5:de:d9:a0:74:9e:9e:db:4f:fb:23:
f3:f9:30:96:62:5c:d4:f3:44:74:a3:1a:bb:89:6b:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:01:EF:2C:A2:EB:7A:C3:D0:97:8E:2E:B5:0F:EF:F9:71:E3:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/59fe709a-06de-354b-a036-8341f794f5f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl
X509v3 Authority Key Identifier:
keyid:40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:00:4b:6e:e0:86:9c:af:fc:f3:01:29:a7:4d:f2:94:ac:5b:
b9:d8:76:13:09:a5:8a:ac:76:69:0f:17:6b:25:a3:a4:b9:9a:
ee:91:83:3f:d4:c5:43:83:97:ca:a7:05:d5:92:45:11:f9:d9:
11:bb:bf:2a:61:17:d6:45:54:c0:9b:5a:5b:0a:6f:fa:a6:1b:
fb:fe:55:f5:87:00:8c:2a:52:9d:f0:ac:dd:60:d0:30:6c:7c:
09:e8:1e:02:4c:82:13:0f:32:47:10:a9:fa:ee:83:3c:d7:35:
25:d0:45:c3:74:2c:c5:45:d7:c0:aa:07:9b:20:54:5a:df:c8:
af:5e:fc:c0:4b:20:f5:6d:b9:32:7e:b5:12:a9:35:b9:14:ed:
2b:70:10:5d:cd:b9:bc:64:52:19:6c:1e:2f:76:01:7f:7b:46:
87:15:7d:a9:67:38:1d:e7:ac:b2:00:84:9a:78:04:21:41:08:
01:6a:b1:db:6a:92:85:1e:61:4b:16:12:be:d4:51:e5:68:84:
3f:c9:03:9e:8c:7b:79:62:b6:4c:b4:6c:7b:6e:d9:c6:b0:1e:
06:e7:04:dc:78:d2:2f:0c:b6:99:64:e0:49:11:46:99:94:59:
f6:68:d6:32:22:f9:b2:4f:f5:93:c7:29:e8:10:ef:5b:80:46:
69:a5:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:21 2025 by rpki-client