Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52111221-9db8-3785-8f34-e3749f9fe266.roa
File: 52111221-9db8-3785-8f34-e3749f9fe266.roa (raw, json)
Hash identifier: XRchttzR/qhu1MafxfD8if2KboHwxYSn3jEJRi6XjW0=
Subject key identifier: EB:36:3A:A4:03:E6:0B:5F:02:28:63:0E:55:FA:2F:1B:CF:BE:4C:15
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847E35F708B114CB08A77CBFC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52111221-9db8-3785-8f34-e3749f9fe266.roa
Signing time: Fri 15 Nov 2024 14:00:39 +0000
ROA not before: Fri 15 Nov 2024 14:00:39 +0000
ROA not after: Thu 13 Feb 2025 14:00:39 +0000
asID: 20473
IP address blocks: 50.114.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e3:5f:70:8b:11:4c:b0:8a:77:cb:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 15 14:00:39 2024 GMT
Not After : Feb 13 14:00:39 2025 GMT
Subject: CN=37ae7eed-dc4b-4910-9ace-f87d6c878d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:1e:21:98:6b:db:63:a1:b1:07:9e:62:da:
8b:d2:12:a5:fb:a4:30:48:e5:f2:a2:ed:36:05:d9:
44:81:0f:36:92:e9:2b:5d:fa:8e:cc:8a:d1:44:fa:
1b:94:78:32:33:fc:7a:75:e2:59:8a:e7:1c:43:92:
f3:6b:7c:be:5a:95:16:47:55:fc:67:0f:76:e7:14:
c0:9b:d0:4b:7d:40:9a:8f:18:37:43:e0:1b:ef:62:
54:5b:6e:01:e0:fa:44:5b:63:ee:24:e5:6f:76:40:
77:3f:10:91:7b:91:8b:37:ef:5f:ee:d7:1e:89:cd:
92:4c:0d:5a:73:54:32:79:db:20:31:be:89:7b:61:
ca:7f:87:05:33:9d:c5:bb:b1:8a:87:5d:95:a0:8a:
44:81:35:05:96:26:9b:f6:91:4b:ff:0b:02:97:5b:
51:c0:ff:23:27:0b:d3:b2:7b:47:09:78:e9:e3:2c:
b8:4f:88:3a:b2:33:b1:76:98:03:7d:46:2e:6e:f1:
9e:f3:2f:3a:5d:fe:7f:36:70:b5:dc:1e:35:fa:24:
e3:65:74:68:88:3d:84:e3:cc:0a:89:25:35:04:4a:
3e:be:a0:47:60:26:ac:82:1a:06:eb:0e:55:f4:13:
a7:02:79:5c:21:32:a2:9c:e6:49:b9:24:f2:0e:26:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:3A:A4:03:E6:0B:5F:02:28:63:0E:55:FA:2F:1B:CF:BE:4C:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52111221-9db8-3785-8f34-e3749f9fe266.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:d1:73:3e:da:79:7d:47:3f:d5:5c:97:41:4f:16:bd:df:e9:
c3:87:41:70:7b:cc:b2:3b:1c:42:a9:09:99:a2:1f:fe:e8:b1:
0b:e7:34:60:b4:ce:ee:5a:88:df:47:03:7f:8b:5b:f6:18:a7:
2b:ca:84:1e:c0:97:b4:58:d1:51:4b:05:9a:56:de:50:ae:c1:
d2:0a:b0:ba:97:24:5c:d9:cb:0a:c0:b3:58:55:b4:e5:61:97:
92:46:52:bc:82:70:e8:7e:c1:bf:45:23:16:9e:72:f6:4f:46:
20:68:b2:06:15:2c:3d:cf:7b:bc:a0:31:73:dc:b9:cd:dd:65:
0d:aa:4c:49:08:09:22:7d:40:ba:f4:21:b5:6a:b2:c1:e3:46:
29:13:90:a8:5a:fd:1e:22:fb:6c:34:6f:26:70:c1:68:e3:41:
b2:0d:3b:68:13:17:8b:70:33:5b:dd:1e:4d:41:0d:eb:0e:84:
a2:4a:f8:67:11:a2:4e:a7:79:40:f5:d3:ca:e2:e2:8d:f3:b7:
c3:a4:fa:78:5d:26:a2:88:cc:ea:fd:4b:d9:a2:c2:46:87:5a:
80:70:76:a4:11:e7:8e:67:33:6c:d4:6a:28:ce:8a:0f:1b:a2:
ba:82:d2:02:7b:dd:27:82:71:9f:5e:44:91:64:09:15:5a:c6:
60:e7:01:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:13 2025 by rpki-client