Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f66ef70-866b-3a66-b6a3-8e045703bd06.roa
File: 0f66ef70-866b-3a66-b6a3-8e045703bd06.roa (raw, json)
Hash identifier: W023wzIGF7SGPq2GHl8oYoAn2CH0vnL2ZlLHEY5dVoA=
Subject key identifier: 04:E2:94:D4:27:7E:FF:09:71:8D:FC:B7:7B:E1:EE:B7:DD:73:8A:4F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E60E643298EB9F5A01E780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f66ef70-866b-3a66-b6a3-8e045703bd06.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 7015
IP address blocks: 66.31.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e6:0e:64:32:98:eb:9f:5a:01:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=e8f556e0-3bb7-444f-9885-f91b5025a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:65:67:9d:79:54:23:d9:15:8a:ea:92:11:
5e:93:16:38:3b:b4:3c:76:68:66:01:c8:c3:e7:e4:
a1:08:d7:5c:d6:c1:04:75:e0:c8:56:37:89:10:0d:
17:45:34:7b:b7:bb:a4:bc:73:a4:d4:b6:48:fd:83:
1e:2f:f8:f1:27:1d:9d:25:68:76:dc:42:28:8c:91:
56:84:d9:d5:ff:1b:b7:32:d6:50:35:0e:1f:4b:50:
e6:8f:44:cc:d4:3b:57:ed:1c:bb:60:cc:bc:6f:eb:
9c:25:02:95:c6:84:70:68:4a:95:d1:d2:16:2b:c9:
d4:47:a5:62:ab:e3:66:a6:b9:20:60:f4:a1:9d:59:
63:2c:cb:f5:1d:8f:e4:b1:19:75:6e:4b:98:e3:76:
47:0d:93:28:a6:ce:4c:00:9d:a0:bd:b1:6c:33:9c:
80:95:84:c1:d4:eb:77:e6:70:7d:20:75:19:45:be:
87:33:6f:b2:1b:58:0f:e4:33:7e:08:a6:8d:9d:79:
b0:cb:33:be:b9:65:2f:01:43:46:05:56:1c:85:67:
ae:09:5b:71:5a:22:ec:2f:5b:5c:0e:42:d5:e0:8c:
37:d1:70:95:7e:b3:80:fe:eb:59:5e:c8:6d:c7:ca:
bc:64:62:0a:47:20:3a:4c:88:24:4d:4c:ed:f0:31:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E2:94:D4:27:7E:FF:09:71:8D:FC:B7:7B:E1:EE:B7:DD:73:8A:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f66ef70-866b-3a66-b6a3-8e045703bd06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.31.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:0f:b2:b4:d6:93:be:c2:e3:ec:db:4e:2a:4c:75:d6:0d:71:
1c:45:7b:57:a0:1c:a2:18:60:d8:26:ed:6e:25:55:b1:75:85:
33:a2:2e:60:6e:84:3f:78:e3:c5:df:da:84:f9:28:1c:6d:1a:
e2:5a:8b:69:41:99:17:82:18:ae:96:98:94:2d:33:38:a8:c8:
5a:2e:1f:cd:da:91:03:86:1c:41:b6:cb:e1:ce:27:e7:2c:83:
b0:31:47:15:27:ad:b6:26:0b:71:eb:7e:b9:98:bc:2b:82:9b:
3c:cf:ec:4f:72:27:72:e2:69:04:14:34:c1:77:32:1d:e7:6a:
4c:42:08:28:3c:0f:bd:04:69:22:71:47:fa:f9:7a:bf:f4:25:
db:b7:ab:4e:3a:e8:d0:3c:77:b1:e0:68:0f:10:6b:0b:d4:d1:
3d:3e:79:ee:16:b2:ce:f1:6a:e1:a4:74:83:c7:22:40:6c:4a:
b6:f7:96:9d:e6:d2:d6:bf:39:01:92:c5:3f:b4:ed:2f:f8:4e:
46:80:63:8b:41:c2:1d:95:c7:02:8d:d7:18:a2:a2:00:96:1e:
f3:75:a6:a6:fe:d9:3f:01:77:1a:da:3c:3a:85:5b:2b:ae:4e:
63:c5:2d:bc:89:c2:0b:d6:39:13:01:da:42:98:32:55:14:f7:
8c:0e:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:58:49 2025 by rpki-client