Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/e60d5a13-ff0d-3d56-89e4-3126ff7a16b9.roa
File: e60d5a13-ff0d-3d56-89e4-3126ff7a16b9.roa (raw, json)
Hash identifier: zXsQKYdU4KGUKloTfFBScyS83jPtO4deMOrwX3PAop4=
Subject key identifier: 13:93:63:6F:F8:7D:05:2D:23:72:C1:41:2B:DA:C3:0D:AD:6C:95:D6
Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial: 010D0C9F432858483455667866129E20583EE120
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/e60d5a13-ff0d-3d56-89e4-3126ff7a16b9.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 40501
IP address blocks: 66.85.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:66:78:66:12:9e:20:58:3e:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=b534cf6d-3a60-44c2-aa62-3cb2a073b8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:eb:24:ea:f7:b8:58:cf:4c:19:67:2c:7f:
0a:b3:ed:08:66:64:57:5b:6d:16:e4:a7:4b:83:28:
db:86:64:09:e9:00:7b:85:90:97:9c:58:01:7b:d7:
62:5f:9f:f0:c5:3a:bf:69:50:0c:9b:0d:ff:a6:e9:
d3:ee:42:b9:cb:3e:dc:96:6e:45:70:5e:0f:eb:8b:
a9:dc:4b:a6:f6:f9:7f:2e:08:ec:a8:04:5d:87:26:
8a:78:ac:c9:9f:93:5b:51:f7:e3:dc:2b:36:56:e1:
3a:2c:74:f3:1e:ae:d3:0b:8d:ae:78:14:64:bc:b4:
27:b2:97:08:7b:be:b7:f6:40:10:e6:46:39:0d:34:
78:f1:c0:d8:fb:a4:43:a1:22:04:cf:15:f4:c3:a7:
8c:4a:e1:57:f5:8f:05:aa:f8:b4:b4:51:da:52:92:
e3:28:dd:9c:da:9c:76:eb:df:48:1b:51:95:5b:66:
d3:05:01:91:2a:73:31:c1:63:01:23:05:4a:4e:9f:
a5:82:bc:cd:3c:f4:c8:e2:06:83:cf:2c:ea:d1:f5:
57:5b:be:5d:3d:75:82:03:41:9b:b1:a9:b5:c8:50:
5b:32:ed:70:24:89:e9:38:1c:7d:aa:59:aa:8b:f8:
c0:48:b8:6e:09:7d:33:03:a2:09:bf:a4:89:89:a3:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:63:6F:F8:7D:05:2D:23:72:C1:41:2B:DA:C3:0D:AD:6C:95:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/e60d5a13-ff0d-3d56-89e4-3126ff7a16b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
X509v3 Authority Key Identifier:
keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:d3:cc:f4:0a:ca:e5:c3:bc:cf:f4:48:c7:3c:d0:9b:20:67:
fb:b3:59:43:12:aa:b2:db:dd:c9:fc:cb:d8:39:d6:8d:61:41:
cd:1d:ba:25:ec:c5:1f:ae:5e:1d:d7:99:9c:30:6f:fc:39:63:
0f:6e:5e:28:36:dd:7c:f5:a7:ad:fd:cd:59:f5:7d:ad:83:74:
7b:10:83:0b:72:61:47:a2:2c:f8:2a:fa:6a:8b:34:00:62:f5:
78:f8:e2:1d:9e:3e:0a:0c:dc:02:26:db:c3:64:e9:2e:a4:ca:
6b:45:7d:85:2f:62:a3:94:eb:ea:49:45:fb:91:22:54:a9:71:
1d:ba:82:fc:2d:03:90:3c:e0:b6:a2:38:97:f3:ef:92:0b:2f:
5c:67:01:b1:72:c4:10:b3:91:e8:e6:39:4a:75:46:6c:d9:f1:
b7:7a:7f:d4:53:a3:a7:cb:d3:87:3f:78:b8:a2:ec:b5:6f:40:
cc:63:bd:2d:ac:8f:46:bd:c0:ff:27:5c:43:e0:0b:51:71:f7:
18:aa:e5:7a:76:b7:56:0b:ad:92:25:2f:3a:67:27:6b:d2:9d:
91:a6:02:a5:3b:7e:be:d8:39:81:c8:1a:d5:74:54:6e:fa:e8:
f9:0b:db:ee:c7:3f:d8:cc:e1:fa:da:39:e3:a4:9e:38:ba:22:
9f:c4:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:16:22 2025 by rpki-client