Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/a0b044dd-db9d-3b19-9638-ed34ee8f2d38.roa
File: a0b044dd-db9d-3b19-9638-ed34ee8f2d38.roa (raw, json)
Hash identifier: 6Wgwll8kCCp1UXeS5nD/qUPgMgIYMuz9C3rgva5wzus=
Subject key identifier: 9D:A5:0F:41:9A:54:C6:FB:44:74:44:06:60:FB:72:1F:0B:BB:13:56
Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial: 010D0C9F43285849B0914B90F49DB19409F97A40
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/a0b044dd-db9d-3b19-9638-ed34ee8f2d38.roa
Signing time: Tue 29 Apr 2025 18:48:51 +0000
ROA not before: Tue 29 Apr 2025 18:48:51 +0000
ROA not after: Mon 28 Jul 2025 18:48:51 +0000
asID: 199527
IP address blocks: 66.227.0.0/22 maxlen: 24
66.227.32.0/21 maxlen: 24
66.227.48.0/21 maxlen: 24
66.227.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b0:91:4b:90:f4:9d:b1:94:09:f9:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Validity
Not Before: Apr 29 18:48:51 2025 GMT
Not After : Jul 28 18:48:51 2025 GMT
Subject: CN=69b28ca4-3524-4834-a50a-3b99f58dd04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3e:68:2f:a3:6e:91:53:fc:b0:3f:48:2d:5f:
b7:a9:30:0a:f1:f1:98:53:49:57:16:d3:47:75:0d:
05:e6:7d:38:ba:b5:02:4c:34:eb:9b:77:2f:f2:8a:
e9:67:04:c2:5a:71:54:8b:08:c1:2a:c5:45:ac:34:
14:f7:57:bd:1d:a7:5c:14:28:c2:ec:87:46:86:1d:
c8:c9:4e:3e:5b:b6:84:b5:13:9c:1e:17:a0:4d:aa:
71:ea:54:8e:9c:3b:67:16:d0:8f:6b:56:8d:b1:0e:
19:77:76:70:44:c9:fe:78:5f:e9:55:d7:25:a5:51:
f7:9b:8f:33:e6:73:45:f1:4f:50:21:85:c6:4c:c1:
de:c4:99:74:0d:43:52:1a:c0:12:bc:2a:9c:1d:9c:
95:a3:57:35:ae:8a:76:9a:4e:a1:84:70:4d:4c:84:
64:94:6f:bd:cb:f0:f5:3b:ac:f9:5a:ad:9a:d6:25:
6c:cc:5d:4e:e2:2c:cd:93:9a:74:5d:38:85:71:4d:
53:e4:9a:f9:93:70:77:cb:d4:5b:2d:32:25:38:25:
50:12:3b:7b:16:7e:41:8a:7f:a2:9f:24:b3:9a:15:
5c:74:6d:3d:f0:6e:c1:7a:37:1a:0a:16:56:35:3a:
59:fb:02:93:ef:39:fd:59:f8:29:26:f2:40:d3:bf:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A5:0F:41:9A:54:C6:FB:44:74:44:06:60:FB:72:1F:0B:BB:13:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/a0b044dd-db9d-3b19-9638-ed34ee8f2d38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
X509v3 Authority Key Identifier:
keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
sbgp-ipAddrBlock: critical
IPv4:
66.227.0.0/22
66.227.32.0/21
66.227.48.0/21
66.227.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:bd:52:1c:2a:f5:80:ac:08:97:e7:31:c9:a1:4a:d4:b1:96:
06:cf:2e:18:9d:02:1d:ec:f6:ec:14:65:b8:fa:2c:af:a7:9e:
38:e0:e8:3e:68:2b:c1:33:7a:f1:e1:3e:81:4d:64:6f:e8:31:
11:31:02:86:c6:10:2a:02:ea:f2:72:af:cd:d4:03:38:5c:65:
e8:18:98:49:ed:c5:64:c2:ac:5f:22:b9:c8:37:84:a5:c4:22:
34:42:ef:36:de:76:ce:ab:23:99:b1:22:f7:c9:fd:15:13:be:
61:26:b9:ce:c8:3a:46:5a:ad:b3:15:1f:b8:cb:87:4a:0c:6d:
94:85:2a:d4:10:42:ec:f9:cd:bf:42:dd:0b:2d:11:7e:94:cd:
0f:c2:dc:a3:52:a2:80:12:8a:80:2e:fb:6b:8f:50:4f:3c:6e:
32:fe:32:dd:dc:10:ca:82:6b:0e:74:2c:7b:7c:b2:4b:25:f8:
bc:64:a5:21:ad:cb:00:ef:81:72:b9:10:b2:59:7c:d6:9f:73:
eb:e3:fd:44:a3:f7:9f:04:92:88:de:8d:3a:d3:5a:75:a2:60:
78:ac:14:fb:a0:74:7b:21:97:cf:e7:03:86:73:4d:98:27:7c:
56:e2:ab:ff:57:d3:3c:f0:68:3e:4a:08:cc:f5:e6:3e:1a:c4:
2b:d1:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:33:48 2025 by rpki-client