Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1cd671a-8ea1-3951-bf6e-9116a025de17.roa
File: a1cd671a-8ea1-3951-bf6e-9116a025de17.roa (raw, json)
Hash identifier: 2GxmIerzTAfqAQFKYzo/6F/gp/hLKaY+VAtRQFABGuM=
Subject key identifier: 9D:E9:12:18:B5:6F:5A:52:93:19:8A:55:6F:43:98:79:92:55:AC:9D
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AB36CB73F294248DBC080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1cd671a-8ea1-3951-bf6e-9116a025de17.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 66.190.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:b3:6c:b7:3f:29:42:48:db:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=e9e23b0c-40bc-427f-94f7-af045ee744cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:be:1d:f8:76:c2:3f:6b:cc:29:1a:6b:1c:
92:24:a8:2f:2d:89:ae:4b:0a:72:c2:8f:6a:ce:5b:
6f:43:22:e6:95:3a:bc:97:3d:83:5b:53:bf:56:6a:
8a:13:5a:97:83:7b:b7:fa:64:f1:5c:5d:b4:50:71:
93:77:63:d3:47:7a:3c:a8:4f:98:01:e6:1f:8d:bd:
bc:a4:df:a3:15:7e:54:e0:c6:d0:c5:1f:8e:cb:dd:
68:0b:10:bf:4f:36:34:6c:0a:f3:0a:66:37:27:8b:
72:d3:d1:b1:ed:65:b3:b2:76:b5:05:a3:5f:fe:73:
47:82:77:21:c3:6d:af:45:16:6e:18:18:b6:c5:2f:
4e:96:ee:9a:d3:5e:de:c6:e6:d8:88:8b:e6:50:3c:
b2:82:65:c6:43:89:30:b4:a1:39:38:8c:01:a9:11:
50:67:cd:5a:b2:45:17:ee:be:32:f4:b5:03:e0:b9:
e0:49:55:c6:14:8d:0a:c6:07:2a:6d:d3:48:f3:e1:
61:87:f1:58:e9:3b:9b:75:f7:e4:29:1b:0f:32:72:
11:63:c9:e5:6f:72:c6:6f:7d:28:d7:47:ba:4f:49:
4a:e6:42:00:a5:9b:86:6e:a9:61:51:d6:fa:6b:f2:
f2:0b:f4:e0:da:b6:d7:f8:13:7d:45:40:fb:1d:e6:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E9:12:18:B5:6F:5A:52:93:19:8A:55:6F:43:98:79:92:55:AC:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1cd671a-8ea1-3951-bf6e-9116a025de17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.190.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:c1:a8:01:a1:88:fd:88:f1:c4:b9:94:d2:1d:b7:36:a8:fc:
4f:00:a2:33:9d:0f:dd:40:cf:4c:0f:f2:db:86:37:f2:2b:bb:
f9:ae:67:0b:22:24:59:02:9c:f5:f0:22:45:6e:5e:ef:26:b3:
63:37:05:2f:10:1c:14:24:1e:9b:7e:8f:5a:2e:45:5d:f8:ca:
7f:38:9b:f0:8f:5f:4d:8c:b2:94:be:a8:a6:a5:5d:32:73:36:
67:e2:d6:a8:d5:de:d7:cb:9a:a9:09:71:31:16:c0:01:68:de:
04:36:47:e1:f7:5e:91:ce:a0:41:81:72:5e:bf:54:a3:73:e8:
30:65:0f:13:4e:91:fb:39:84:88:16:0f:20:6c:7b:d1:00:67:
12:54:91:50:58:e4:fb:f9:bc:d6:d5:90:e4:37:8f:50:12:70:
66:73:bf:08:df:1c:dc:22:92:40:60:74:9d:5f:88:16:c9:84:
ce:31:c7:2a:04:05:6e:71:9f:ba:cf:97:12:41:12:8c:15:cc:
4d:a1:00:4b:b0:60:bb:c8:e9:49:39:ca:58:bf:ac:c6:37:e0:
2d:6d:00:e9:1e:dd:02:6c:db:6e:a4:89:a0:da:b4:a9:d4:4e:
dd:d5:64:a5:71:89:24:1c:ef:1c:72:ce:33:09:51:39:b3:ea:
81:fe:1e:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDerNstz8pQkjbwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZTllMjNiMGMtNDBiYy00MjdmLTk0ZjctYWYwNDVlZTc0NGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE++Hfh2wj9rzCkaaxySJKgvLYmuSwpywo9q
zltvQyLmlTq8lz2DW1O/VmqKE1qXg3u3+mTxXF20UHGTd2PTR3o8qE+YAeYfjb28
pN+jFX5U4MbQxR+Oy91oCxC/TzY0bArzCmY3J4ty09Gx7WWzsna1BaNf/nNHgnch
w22vRRZuGBi2xS9Olu6a017exubYiIvmUDyygmXGQ4kwtKE5OIwBqRFQZ81askUX
7r4y9LUD4LngSVXGFI0KxgcqbdNI8+Fhh/FY6TubdffkKRsPMnIRY8nlb3LGb30o
10e6T0lK5kIApZuGbqlhUdb6a/LyC/Tg2rbX+BN9RUD7HeZTdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3pEhi1b1pSkxmKVW9DmHmSVaydMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTFjZDY3MWEtOGVhMS0z
OTUxLWJmNmUtOTExNmEwMjVkZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQr4QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfBqAGhiP2I8cS5lNIdtzao/E8AojOdD91Az0wP8tuGN/Iru/muZwsi
JFkCnPXwIkVuXu8ms2M3BS8QHBQkHpt+j1ouRV34yn84m/CPX02MspS+qKalXTJz
Nmfi1qjV3tfLmqkJcTEWwAFo3gQ2R+H3XpHOoEGBcl6/VKNz6DBlDxNOkfs5hIgW
DyBse9EAZxJUkVBY5Pv5vNbVkOQ3j1AScGZzvwjfHNwikkBgdJ1fiBbJhM4xxyoE
BW5xn7rPlxJBEowVzE2hAEuwYLvI6Uk5yli/rMY34C1tAOke3QJs226kiaDatKnU
Tt3VZKVxiSQc7xxyzjMJUTmz6oH+Hhw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:47 2025 by rpki-client