Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa
File: 0dfe2830-3978-3ff5-b745-9bca32c3f603.roa (raw, json)
Hash identifier: +/udU1zOHKBwYCkc9kSVMwwTiwICK+qRrpnHZZUxQXM=
Subject key identifier: 34:33:67:18:F7:05:9E:BE:3C:7F:FF:2C:BF:8B:5E:E0:36:DE:27:9C
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B500CF294925297FF198280
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 7106
IP address blocks: 66.209.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0c:f2:94:92:52:97:ff:19:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=f6376007-d98c-48b6-98b8-17a8565a8ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:33:39:09:3e:bd:dc:42:1b:56:26:a6:ac:
5b:72:f7:11:82:6c:3d:64:9d:b9:31:80:52:8d:64:
cc:25:ef:94:ef:1e:e6:0a:6d:0f:73:a3:6e:2e:97:
b6:c8:82:ac:5a:57:e5:65:21:19:7f:b2:52:15:16:
21:ca:32:42:4b:b0:20:10:61:60:4b:e1:a8:8e:26:
d8:58:49:0b:cd:47:ae:f7:b4:60:da:49:04:11:05:
ef:e3:34:41:08:4f:8a:fe:a0:15:83:4b:e1:f5:0a:
99:3e:73:54:fc:35:36:38:a8:9d:27:16:f1:55:34:
66:eb:13:c3:1c:6f:6c:83:d7:8e:f3:1f:93:37:7a:
26:df:70:0f:88:8f:ca:2e:01:50:14:b9:9e:4c:1f:
3e:18:a8:1a:57:40:a5:7a:65:11:b7:64:c0:de:9c:
c1:43:03:27:20:c2:ed:a6:1f:2b:e7:ce:48:f3:34:
ac:25:10:6a:c4:e7:bb:74:b6:16:71:1c:83:86:9c:
26:02:86:89:6b:b3:63:6d:07:90:b4:05:89:14:db:
c9:0a:aa:a0:90:b3:84:b2:23:4a:e2:91:7f:73:46:
ab:c8:60:68:48:83:28:ec:2a:9e:c7:14:eb:08:0e:
cf:39:de:87:75:21:ef:1f:1d:08:2a:26:a6:a0:70:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:33:67:18:F7:05:9E:BE:3C:7F:FF:2C:BF:8B:5E:E0:36:DE:27:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
66.209.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:1d:d3:ff:42:c3:b4:0f:e0:d3:97:bd:b9:3a:bd:22:8e:b8:
47:c6:e1:8f:19:19:67:c3:9b:80:f5:e4:ba:2d:72:a9:27:ef:
07:2b:39:b6:83:29:57:fa:ea:b4:6b:e6:02:70:76:61:6f:47:
0a:f7:06:76:3d:ad:31:bd:7c:db:f9:92:00:fa:a5:b2:10:81:
8a:28:59:d2:9f:a5:25:99:65:1e:47:33:92:cc:4e:11:9d:3e:
3b:43:db:e4:f7:29:d0:21:b5:fe:21:a7:34:f6:95:83:63:d9:
4e:fa:77:85:2b:5a:25:29:28:50:f4:b4:80:c1:d8:50:d1:33:
bf:49:bc:cc:a3:cc:cc:22:d4:be:a6:e4:4d:00:c8:15:66:36:
3c:da:e4:0b:1c:0a:31:02:bf:11:ff:c2:89:df:37:85:56:e2:
57:64:cc:69:0f:e0:ac:38:f5:a3:8c:f0:59:5c:32:0c:92:b7:
c9:6e:9e:4a:6c:1f:04:a1:a1:cb:1e:0c:51:ae:4d:b8:00:dc:
39:cc:7c:9b:21:2b:f6:75:d7:50:b4:1f:26:98:ac:73:ff:91:
4a:5c:ef:14:50:fe:07:df:7d:1e:82:98:25:9a:0b:d6:8e:20:
d7:83:f2:9b:55:8a:02:46:08:ce:f4:08:30:72:c7:d3:52:13:
13:fd:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:15:50 2025 by rpki-client