Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/de3936d2-98f7-3186-aa92-e492876b5685.roa
File: de3936d2-98f7-3186-aa92-e492876b5685.roa (raw, json)
Hash identifier: MHxuw98edxOE7TRqGDCdMxkeLKnH13RwUdjVHlgB6sg=
Subject key identifier: A3:D7:CE:31:08:DE:FC:BB:3D:0A:00:77:54:88:EF:45:E9:5D:D4:87
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858486AC59CB154639CEC1B8AEF60
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/de3936d2-98f7-3186-aa92-e492876b5685.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 13576
IP address blocks: 66.115.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9c:b1:54:63:9c:ec:1b:8a:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=32585ea5-d5f5-4a2e-a6ed-c0a111863a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:cd:c3:10:a4:64:e1:10:b0:f8:c0:8a:2b:
73:8f:00:67:a1:fb:ef:14:4d:58:56:e9:53:86:30:
89:b9:bc:35:af:8b:9e:ee:32:da:09:53:9c:17:89:
9d:63:58:3b:50:e4:95:12:ba:79:0d:3a:20:b6:08:
ef:50:5d:28:78:a4:b3:cb:06:71:fc:46:7b:a2:3b:
52:2f:a9:71:a5:c5:03:95:13:07:1b:bc:b2:b0:29:
f2:6a:19:fa:78:f4:e8:b1:bb:19:be:d2:e8:d7:dd:
35:b6:da:99:ea:ec:22:44:5e:b7:4e:bf:77:44:0a:
1b:ba:15:92:53:c6:f7:5f:54:87:d2:1b:15:af:39:
df:32:29:d1:ba:ad:3d:d9:ad:43:41:74:9b:0e:71:
2c:d9:49:fd:19:cc:25:7c:64:e5:5c:16:0d:41:ff:
2c:8d:5a:c4:a4:fa:e1:d5:7f:2e:fc:92:62:d4:3a:
2a:25:68:5e:fa:43:9d:60:39:84:ef:65:b2:af:0a:
8c:4a:56:6a:b0:fc:45:4f:38:dc:c8:b9:82:bd:15:
bc:27:99:99:f9:31:09:d3:27:bb:ff:2a:fc:45:99:
7e:2f:e5:f1:29:92:d8:c8:cf:17:62:e7:c0:bd:f2:
9b:80:4b:7b:2c:0f:db:c6:e0:a3:59:17:8a:d7:89:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D7:CE:31:08:DE:FC:BB:3D:0A:00:77:54:88:EF:45:E9:5D:D4:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/de3936d2-98f7-3186-aa92-e492876b5685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:81:80:98:c8:90:e7:53:d4:c9:da:34:e1:80:a5:39:f4:ce:
72:44:99:29:39:87:2b:5b:7d:4c:b2:b5:63:c6:3d:cd:7f:b9:
15:61:6c:59:78:3e:e5:b8:f4:75:cf:cf:b7:ca:37:5c:1c:8d:
da:97:57:40:93:ce:2d:d9:c9:07:18:89:37:77:7a:fb:84:f1:
2e:1b:1e:d4:cd:60:f9:8d:f1:93:6d:9d:68:c0:c2:48:b5:12:
0a:23:1f:4e:a3:f5:45:eb:66:4f:6a:c7:93:e4:55:14:41:a3:
27:dd:c0:06:12:bc:46:eb:fe:e8:49:34:f4:2e:96:bd:e9:15:
f9:8c:3a:51:98:d0:3b:fe:70:a7:07:c0:9b:eb:8f:70:94:87:
73:2e:57:0e:7d:91:6e:42:fa:29:1f:a5:14:b7:9c:c8:96:ef:
ce:3b:19:68:0a:ad:d7:7d:55:ea:b5:9e:4d:ed:5b:ad:01:c4:
d5:0f:00:53:58:76:4b:9f:c4:39:9b:bf:bb:32:87:16:81:e2:
37:4e:4e:ce:78:7c:47:25:be:05:fd:cb:e1:3b:6e:c1:f9:bc:
aa:6e:de:16:bd:be:6c:c2:3c:f9:b1:3d:92:c8:a1:b2:99:90:
06:11:da:6e:7e:a7:f2:ce:25:57:b3:fb:04:97:c0:2e:7c:99:
8f:ed:3c:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZyxVGOc7BuK72AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk
MzI1ODVlYTUtZDVmNS00YTJlLWE2ZWQtYzBhMTExODYzYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O/NwxCkZOEQsPjAiitzjwBnofvvFE1YVulT
hjCJubw1r4ue7jLaCVOcF4mdY1g7UOSVErp5DTogtgjvUF0oeKSzywZx/EZ7ojtS
L6lxpcUDlRMHG7yysCnyahn6ePTosbsZvtLo1901ttqZ6uwiRF63Tr93RAobuhWS
U8b3X1SH0hsVrznfMinRuq092a1DQXSbDnEs2Un9GcwlfGTlXBYNQf8sjVrEpPrh
1X8u/JJi1DoqJWhe+kOdYDmE72WyrwqMSlZqsPxFTzjcyLmCvRW8J5mZ+TEJ0ye7
/yr8RZl+L+XxKZLYyM8XYufAvfKbgEt7LA/bxuCjWReK14lxSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPXzjEI3vy7PQoAd1SI70XpXdSHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZGUzOTM2ZDItOThmNy0z
MTg2LWFhOTItZTQ5Mjg3NmI1Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQnP8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6BgJjIkOdT1MnaNOGApTn0znJEmSk5hytbfUyytWPGPc1/uRVhbFl4
PuW49HXPz7fKN1wcjdqXV0CTzi3ZyQcYiTd3evuE8S4bHtTNYPmN8ZNtnWjAwki1
EgojH06j9UXrZk9qx5PkVRRBoyfdwAYSvEbr/uhJNPQulr3pFfmMOlGY0Dv+cKcH
wJvrj3CUh3MuVw59kW5C+ikfpRS3nMiW7847GWgKrdd9Veq1nk3tW60BxNUPAFNY
dkufxDmbv7syhxaB4jdOTs54fEclvgX9y+E7bsH5vKpu3ha9vmzCPPmxPZLIobKZ
kAYR2m5+p/LOJVez+wSXwC58mY/tPAo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:53:03 2025 by rpki-client