Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/25868134-7ff6-361c-806c-bb00bedcb12d.roa
File: 25868134-7ff6-361c-806c-bb00bedcb12d.roa (raw, json)
Hash identifier: tgybv+DOuCKnjTygM6jfvEqNOOiK3xqc0/cxycqN22s=
Subject key identifier: 88:A6:09:34:3E:C1:56:5B:5E:7B:57:0F:17:EC:CE:04:FD:75:65:FA
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858486AC59E031031225B55609D80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/25868134-7ff6-361c-806c-bb00bedcb12d.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 13576
IP address blocks: 66.115.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9e:03:10:31:22:5b:55:60:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=3baeec27-e4a9-4528-8348-820fd6647caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e0:01:a0:84:30:cc:04:22:0e:75:0d:2f:fb:
3a:82:42:63:8a:51:34:28:7e:59:09:18:87:45:5d:
63:38:a7:a0:92:83:2a:84:18:d8:cb:12:05:eb:d1:
01:7c:aa:30:8e:0a:0a:c0:45:b1:4d:32:e6:4b:ef:
10:fa:af:96:9f:b4:22:88:44:6f:ac:50:52:c2:64:
a3:4e:8b:0c:3b:91:30:bf:d9:a4:14:52:e4:6d:8d:
19:4f:7a:de:e5:d8:85:97:b8:8c:20:be:78:94:30:
c9:0d:62:ff:5b:06:11:83:18:8e:5f:56:5a:88:9b:
1a:7e:b6:f2:b4:0e:97:a7:e5:41:00:61:f4:f4:d7:
20:ca:dd:f6:b2:f9:73:d7:ca:40:f6:6d:17:9b:76:
a3:96:8e:8b:75:0a:23:2b:06:33:05:ac:17:18:58:
79:c8:73:84:2e:b0:92:67:ae:84:66:56:89:bd:81:
03:3f:68:6e:6a:42:60:cf:c2:11:86:26:2d:1d:c7:
99:df:45:de:c5:29:98:39:b3:7d:c5:84:63:93:9c:
43:9c:1b:f6:b4:fe:0f:e5:40:28:3a:a1:88:e3:15:
19:59:43:27:96:41:06:f5:21:ab:09:98:88:78:8a:
26:2d:41:d9:f3:90:33:11:0d:df:66:40:13:c1:de:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:09:34:3E:C1:56:5B:5E:7B:57:0F:17:EC:CE:04:FD:75:65:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/25868134-7ff6-361c-806c-bb00bedcb12d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:8f:5d:6d:aa:ed:c8:5d:23:cc:34:42:db:c7:b0:17:5c:32:
41:3f:bc:33:7a:4e:3d:36:58:dd:77:34:27:d5:e1:24:0c:2b:
ac:e2:51:cd:0b:b0:f4:9f:4a:fc:f7:4a:85:7e:77:33:73:05:
dc:fc:0a:14:10:11:42:d2:58:4b:50:c2:b4:28:bd:4d:db:e4:
eb:30:0b:88:3b:fe:d7:f5:c6:fb:26:09:01:65:0d:56:3e:0b:
bf:3d:59:8d:fd:c8:55:91:d0:74:da:b3:a7:34:eb:01:ec:29:
ea:3f:c8:bb:e5:63:cc:00:17:0c:af:3b:de:c8:1a:7a:25:c0:
a6:bd:2c:0d:11:a7:3d:de:de:7a:e0:df:56:20:72:95:60:a3:
57:50:65:c7:82:8c:b0:2d:99:62:2b:b2:ad:44:ee:4e:28:a1:
3c:9c:ec:99:0d:ab:7d:0e:8a:3c:ff:7c:f9:2d:74:68:ba:3a:
2e:bc:88:64:9a:c7:20:c4:21:a8:20:e9:d2:d0:4c:a4:46:6d:
5d:9a:56:ca:e9:ab:15:f2:4e:bf:bb:15:ef:6f:87:8b:85:f0:
f0:bb:09:99:09:c0:50:8a:64:ad:b8:db:f2:9e:cf:55:8c:8e:
aa:e7:ee:b1:f9:19:45:58:56:50:67:03:ee:2a:76:7f:74:74:
9b:2e:43:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZ4DEDEiW1VgnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk
M2JhZWVjMjctZTRhOS00NTI4LTgzNDgtODIwZmQ2NjQ3Y2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheABoIQwzAQiDnUNL/s6gkJjilE0KH5ZCRiH
RV1jOKegkoMqhBjYyxIF69EBfKowjgoKwEWxTTLmS+8Q+q+Wn7QiiERvrFBSwmSj
TosMO5Ewv9mkFFLkbY0ZT3re5diFl7iMIL54lDDJDWL/WwYRgxiOX1ZaiJsafrby
tA6Xp+VBAGH09Ncgyt32svlz18pA9m0Xm3ajlo6LdQojKwYzBawXGFh5yHOELrCS
Z66EZlaJvYEDP2huakJgz8IRhiYtHceZ30XexSmYObN9xYRjk5xDnBv2tP4P5UAo
OqGI4xUZWUMnlkEG9SGrCZiIeIomLUHZ85AzEQ3fZkATwd7UCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIimCTQ+wVZbXntXDxfszgT9dWX6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMjU4NjgxMzQtN2ZmNi0z
NjFjLTgwNmMtYmIwMGJlZGNiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJaPXW2q7chdI8w0QtvHsBdcMkE/vDN6Tj02WN13NCfV4SQMK6ziUc0L
sPSfSvz3SoV+dzNzBdz8ChQQEULSWEtQwrQovU3b5OswC4g7/tf1xvsmCQFlDVY+
C789WY39yFWR0HTas6c06wHsKeo/yLvlY8wAFwyvO97IGnolwKa9LA0Rpz3e3nrg
31YgcpVgo1dQZceCjLAtmWIrsq1E7k4ooTyc7JkNq30Oijz/fPktdGi6Oi68iGSa
xyDEIagg6dLQTKRGbV2aVsrpqxXyTr+7Fe9vh4uF8PC7CZkJwFCKZK242/Kez1WM
jqrn7rH5GUVYVlBnA+4qdn90dJsuQ6Q=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:54 2025 by rpki-client