Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa
File: 66a0ccf2-be25-3812-acc8-c6922a2ae498.roa (raw, json)
Hash identifier: ppjAK6t8+LoRmLrmUza6SZD8UFeoXaWKh0y32lZdHj0=
Subject key identifier: 3B:43:75:09:7F:98:D3:7A:CC:FB:AE:83:00:8E:D0:71:B9:C9:F5:45
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B4FFEA98817CD123C044220
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 394708
IP address blocks: 66.209.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:fe:a9:88:17:cd:12:3c:04:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=cc027dd8-c2b8-40a1-844a-0bc191b3df7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:74:de:a2:b6:36:6a:d9:46:64:6f:55:8e:
e5:e0:18:05:1a:41:41:50:83:2e:18:3e:c8:11:86:
92:b5:74:f6:95:8c:a4:53:24:b2:f7:94:5c:23:95:
e1:06:d1:48:1c:95:f2:f5:a6:93:ed:81:83:4f:07:
d7:f9:12:ec:fa:9f:9c:64:20:8d:bf:cd:f9:eb:37:
23:23:9c:c1:f5:b0:cb:81:fb:59:f4:c9:0a:ed:78:
07:0c:a9:83:f2:9b:01:ea:15:f9:98:68:1c:23:ea:
df:f5:9c:09:b1:bf:28:71:d0:9f:6d:cf:9a:56:5b:
9a:91:02:4c:d6:a3:37:ca:6b:b8:66:93:56:c2:de:
0d:47:f0:15:0b:b8:fb:00:cb:63:9e:4c:33:ac:a2:
ca:73:e6:fc:d6:d9:6e:9b:76:e9:59:43:e8:3e:3f:
ad:2c:61:dd:c6:45:54:e6:f8:d5:18:2b:c4:40:b3:
68:55:67:b3:85:d3:a1:b6:f0:fa:35:45:1f:02:36:
83:cd:b7:72:61:7d:67:ca:59:80:e4:c4:90:b5:97:
07:d2:de:3b:8e:e8:b3:27:33:1e:12:4f:b2:f5:8a:
dc:28:fb:74:23:73:e2:cb:83:c6:3e:2d:a8:f1:5c:
4d:c1:f2:97:25:2d:6f:bf:a6:4f:cc:55:46:fb:d0:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:75:09:7F:98:D3:7A:CC:FB:AE:83:00:8E:D0:71:B9:C9:F5:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
66.209.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:7a:51:b1:6f:97:28:f0:f4:1f:d0:75:7a:9b:1c:ba:82:45:
4f:47:98:7e:32:df:26:73:04:e0:8b:d4:64:4b:d4:20:c6:77:
61:b0:2b:6b:bf:3f:c1:27:ef:2f:74:19:35:0d:7d:6f:f8:cc:
e3:e9:16:11:1b:8d:ec:34:9f:83:ab:3a:4a:94:19:a4:4f:94:
c6:bf:7d:f1:60:c8:a5:ec:84:f1:ee:c9:fc:bd:e5:d9:46:cb:
16:e0:eb:3b:6b:34:e7:97:a9:88:ba:d3:56:a5:3c:2a:bc:4b:
a5:7a:a9:e6:44:1e:38:31:b5:3a:7c:70:12:35:8f:90:93:ab:
1d:87:23:09:5f:98:51:e1:e3:8f:d3:f5:c7:f7:77:d8:78:86:
35:cc:50:95:d0:65:e2:57:80:8d:a0:ab:26:6d:79:fe:72:09:
0d:79:a8:a2:e5:77:77:8c:75:c4:cf:be:7c:a9:e8:4c:13:7c:
29:37:35:b6:a6:ea:f3:cd:04:4a:ae:b1:7b:df:c0:b3:82:26:
a6:8d:9f:0e:e6:74:4b:cd:8e:9e:80:ff:f5:31:ef:0d:5d:14:
e1:45:46:d4:d4:d5:89:c2:61:ad:49:61:31:de:d3:d5:8b:b0:
f8:2b:33:4a:de:50:a9:f7:ec:82:c7:ab:d7:12:9d:5f:9d:08:
64:f3:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:59 2025 by rpki-client