Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efc0d5b-ff8b-3778-a9fd-ba6fb6b2622c.roa
File: 3efc0d5b-ff8b-3778-a9fd-ba6fb6b2622c.roa (raw, json)
Hash identifier: dK50dK0J0Ll9/1gwVX6aQ1JFrEV23xu8ka9Nl4304vE=
Subject key identifier: 4B:A8:15:B3:29:5B:EC:08:A6:FB:1F:8E:72:25:70:09:77:35:DB:DC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0104370801A2EEED63E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efc0d5b-ff8b-3778-a9fd-ba6fb6b2622c.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 63186
IP address blocks: 216.66.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:10:43:70:80:1a:2e:ee:d6:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=21fa3009-1ce2-4af2-a98c-f53275949d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:69:23:7a:c8:ca:2e:68:5e:0a:f3:2c:43:
79:6b:ca:63:04:6f:a7:52:65:f5:ad:c0:c4:36:6e:
e7:f1:4c:6a:a7:22:34:0f:0b:aa:de:eb:b6:dd:5d:
b3:a4:11:f5:0b:8c:47:79:16:0b:03:72:e1:ab:bf:
95:b6:a0:dc:84:8b:58:31:87:a8:75:90:08:fd:fc:
52:2c:f9:4b:64:92:32:94:27:24:a0:f2:ce:52:2f:
6a:f4:9a:81:4c:9f:e5:08:b4:29:54:c8:68:e3:d8:
60:a9:cb:ca:65:4a:73:98:c4:11:6e:25:a8:dd:40:
57:bf:a9:cd:b6:75:c2:6b:12:9a:82:76:a1:96:2a:
b1:0f:dd:9e:6c:8c:91:d5:31:32:e1:fc:ec:5d:83:
30:30:6d:d2:c7:ae:06:75:5f:ff:72:4f:9b:67:29:
4f:79:ef:83:a5:46:e5:4c:ab:2d:33:46:ec:8f:48:
05:22:d5:04:ce:1d:b3:74:f6:b6:3a:32:10:4f:02:
40:b7:ca:ef:ab:ce:04:3d:73:c4:e2:fa:ab:f8:bc:
b4:d9:f9:18:0d:17:f3:20:43:fe:52:8f:5c:49:fa:
8e:f9:2f:18:30:57:ed:e9:38:eb:b8:01:0a:12:4b:
79:db:d8:67:a0:e3:cb:84:b8:2e:61:ff:73:66:b0:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A8:15:B3:29:5B:EC:08:A6:FB:1F:8E:72:25:70:09:77:35:DB:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efc0d5b-ff8b-3778-a9fd-ba6fb6b2622c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:29:c6:a0:5d:6c:aa:ff:fd:2a:24:98:b2:94:ea:37:ff:94:
77:7a:b9:1d:1f:93:db:7f:ee:ba:60:4c:c4:23:04:db:cb:bb:
81:53:e0:12:5c:f8:15:21:99:3b:5d:34:b9:09:12:7f:c2:5c:
31:62:41:6a:74:5a:80:0d:b7:96:4b:3e:5b:1b:44:43:10:f7:
56:6e:9f:2b:3b:d1:f3:94:70:85:16:d6:1c:a7:73:99:e2:a3:
06:25:88:67:ea:9d:24:c1:af:9a:e7:cb:52:87:c8:eb:5d:c4:
dd:98:e6:cc:97:46:c3:e7:02:7c:bd:60:36:4a:40:e7:29:3a:
04:bb:9a:c6:2d:35:46:68:1e:be:21:8a:a8:98:9b:d0:cb:74:
e8:79:61:9e:ba:47:a0:8d:4d:f1:46:49:6f:d9:40:41:00:c3:
2f:0f:56:79:bc:7f:54:89:e6:ad:00:fa:db:6c:b3:ab:92:db:
be:c7:8a:48:56:15:3b:41:bb:9e:db:64:5e:2c:37:e5:fb:da:
31:10:87:71:f7:d7:0c:fd:d9:87:a0:25:63:fc:96:2b:0d:f9:
af:80:26:5e:79:33:ba:a9:8e:dd:3d:aa:ae:93:6e:0a:f7:7b:
6b:5b:54:30:a8:a2:cf:02:2a:2c:5d:06:d9:d8:68:b2:e1:7a:
57:67:ca:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZ0BBDcIAaLu7WPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
MjFmYTMwMDktMWNlMi00YWYyLWE5OGMtZjUzMjc1OTQ5ZDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ9pI3rIyi5oXgrzLEN5a8pjBG+nUmX1rcDE
Nm7n8UxqpyI0Dwuq3uu23V2zpBH1C4xHeRYLA3Lhq7+VtqDchItYMYeodZAI/fxS
LPlLZJIylCckoPLOUi9q9JqBTJ/lCLQpVMho49hgqcvKZUpzmMQRbiWo3UBXv6nN
tnXCaxKagnahliqxD92ebIyR1TEy4fzsXYMwMG3Sx64GdV//ck+bZylPee+DpUbl
TKstM0bsj0gFItUEzh2zdPa2OjIQTwJAt8rvq84EPXPE4vqr+Ly02fkYDRfzIEP+
Uo9cSfqO+S8YMFft6TjruAEKEkt529hnoOPLhLguYf9zZrBhRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuoFbMpW+wIpvsfjnIlcAl3NdvcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2VmYzBkNWItZmY4Yi0z
Nzc4LWE5ZmQtYmE2ZmI2YjI2MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8pxqBdbKr//SokmLKU6jf/lHd6uR0fk9t/7rpgTMQjBNvLu4FT4BJc
+BUhmTtdNLkJEn/CXDFiQWp0WoANt5ZLPlsbREMQ91Zunys70fOUcIUW1hync5ni
owYliGfqnSTBr5rny1KHyOtdxN2Y5syXRsPnAny9YDZKQOcpOgS7msYtNUZoHr4h
iqiYm9DLdOh5YZ66R6CNTfFGSW/ZQEEAwy8PVnm8f1SJ5q0A+ttss6uS277HikhW
FTtBu57bZF4sN+X72jEQh3H31wz92YegJWP8lisN+a+AJl55M7qpjt09qq6Tbgr3
e2tbVDCoos8CKixdBtnYaLLheldnyqk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:51 2025 by rpki-client