Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa
File: e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa (raw, json)
Hash identifier: eDfJX3gmYPLng5ltl8mzPYgqUimpHpMSHNLtwOUjkFE=
Subject key identifier: 2D:F8:FE:87:5A:91:78:DC:80:CE:05:54:E6:E8:4D:4A:3B:85:04:D9
Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
Certificate serial: 010D0C9F432858488AE09D99CEB31CDC08197F80
Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 23465
IP address blocks: 66.44.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9d:99:ce:b3:1c:dc:08:19:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=73c2da47-8141-439f-b3ec-c063a8608fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3b:f5:05:e3:87:2a:c9:ad:fa:79:54:fe:01:
6e:88:1f:d5:6e:0a:4b:8a:e5:0f:cf:29:df:6c:e9:
d1:7e:7f:4f:57:8f:04:ed:89:32:81:f5:fa:1a:19:
be:52:ac:9e:75:56:04:66:14:2c:da:ad:31:63:fe:
f0:54:41:60:73:19:47:b3:f1:b1:69:01:2f:b6:e8:
1b:93:4b:c1:72:b0:82:d1:a4:a1:ef:69:73:61:f2:
d9:7c:39:61:d9:b8:6e:88:5a:48:36:4b:13:95:91:
cb:31:f6:da:58:a0:d0:ff:90:03:90:7f:df:d6:c4:
5e:db:ee:5b:de:eb:fb:9d:a3:cf:47:d9:62:01:e4:
7e:fd:e4:8c:d0:91:1f:a4:42:ba:e1:03:1f:da:4d:
6a:f2:f9:b3:33:b2:8f:6a:1d:46:5d:20:2f:44:b6:
17:89:f1:f8:e6:4e:1e:31:53:b5:ff:02:7a:ee:bd:
cc:c3:a5:c7:d6:76:7d:3c:a9:9a:99:31:fc:99:39:
6b:9c:ca:7e:93:40:fc:12:dc:24:aa:ce:ea:19:40:
ba:3c:23:5e:9e:3f:42:b1:a0:ba:29:90:88:7f:37:
76:7a:21:2f:28:ab:ac:51:c8:48:62:a2:42:3d:7a:
31:31:f4:99:d2:e9:0b:c0:65:a1:07:64:d4:4e:0a:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F8:FE:87:5A:91:78:DC:80:CE:05:54:E6:E8:4D:4A:3B:85:04:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl
X509v3 Authority Key Identifier:
keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.44.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:66:7a:9e:0c:47:0c:23:7b:9c:7c:f1:1b:96:76:8d:da:5a:
41:1e:b5:06:f3:49:c5:c6:a1:21:73:65:31:ed:47:35:8f:46:
3c:f9:2f:a9:0d:20:80:9f:75:f6:eb:cb:b8:6e:1f:5c:91:60:
34:dd:b0:55:56:8b:03:5d:5b:d5:d5:5f:25:16:da:73:84:7d:
e6:8f:d1:44:02:b7:d2:6e:7e:be:95:7b:d7:ec:b6:22:0b:81:
c1:ff:d5:67:2f:f0:dc:56:c0:7c:3e:08:b3:15:72:4a:a7:90:
76:bf:ce:68:2e:59:f3:f3:d6:07:c8:a6:31:8d:a2:e2:3f:b1:
ca:25:70:76:05:0f:fd:9a:f1:39:ae:72:f7:41:a5:c5:ce:1a:
db:d9:06:0a:bf:34:17:7c:4c:23:b2:d6:14:5a:d6:23:ae:9f:
f7:1c:04:ef:8f:46:ec:c3:d5:05:1a:04:8e:41:00:06:6b:df:
b3:e3:eb:ac:00:a0:c4:24:76:1d:64:5c:1d:7a:d0:cb:af:c9:
96:9e:b1:49:b4:56:93:41:97:85:20:7e:0f:dc:48:f4:5d:44:
70:f4:68:12:56:53:5a:33:56:e9:a6:0b:d9:79:6a:c2:c5:6c:
04:dd:c7:e0:0a:ef:36:60:c7:d9:76:04:29:28:31:ad:4d:cb:
3b:c7:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:07:26 2025 by rpki-client