Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa
File: 3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa (raw, json)
Hash identifier: V580rhi0K1JUFJOKHHGrsr6V1JLoMFU5aYEPuisjtIw=
Subject key identifier: 88:4A:FE:C1:14:54:16:D0:77:EF:65:B8:40:94:10:41:51:0F:41:2D
Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Certificate serial: 010D0C9F43285847FB1A2FDC5876DF1684495A00
Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 33724
IP address blocks: 66.85.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2f:dc:58:76:df:16:84:49:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=eb01d02b-af5a-42af-a105-f5b80e8e2c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:c6:ad:01:4f:97:b4:09:57:59:cb:19:20:
b6:38:93:18:4a:23:c6:01:e7:52:d6:0d:db:5e:b0:
d5:c7:15:69:fa:2c:28:93:d2:5e:7f:42:10:87:da:
04:d1:0c:b7:df:51:8a:db:13:a3:81:98:40:ac:6d:
24:0e:ba:a6:1c:9a:bf:19:b0:79:0c:1e:b4:58:b1:
2a:f6:25:f0:c0:01:ed:57:cc:bf:a6:7c:7f:d6:f2:
1c:10:b9:f9:dd:01:92:8a:35:2d:0d:3b:8d:7d:07:
01:5f:92:7e:5f:87:d4:f2:e2:49:71:d2:b1:58:f1:
bb:b0:ac:37:9b:ba:fb:a4:dd:59:1b:2b:bd:c4:07:
d0:9a:53:ce:9a:48:a4:1e:3f:84:6f:e4:f7:54:9b:
f7:81:01:a1:64:4a:ac:75:cb:e9:31:e1:7b:7c:32:
2c:9d:30:f6:8b:af:03:81:8b:cc:0b:ce:2f:84:f3:
3c:08:e6:84:0f:67:4f:33:38:fa:a2:82:72:34:8f:
3e:aa:ec:f3:63:5b:e2:05:e3:81:69:a7:d9:80:b9:
b2:74:4c:c5:05:8b:29:6c:2a:06:db:72:ce:06:cc:
5b:be:52:60:d6:2c:69:fe:18:f9:40:81:71:32:3c:
6d:ba:a8:76:32:f3:77:b1:38:49:5f:ec:5e:ab:db:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4A:FE:C1:14:54:16:D0:77:EF:65:B8:40:94:10:41:51:0F:41:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl
X509v3 Authority Key Identifier:
keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:ae:0b:c3:e9:af:ec:37:40:af:9f:fb:5b:e0:d1:d1:56:9f:
ba:87:b8:b0:79:29:83:5d:dc:b8:02:8e:17:4e:c1:e4:d9:83:
a5:1e:03:5b:39:36:1e:d3:7e:2e:9f:d4:71:5f:08:d8:a6:b5:
d0:af:c3:11:72:cc:4e:8e:0d:19:fb:bf:33:8c:de:dc:8d:5d:
c5:dc:fa:ce:7c:9f:bd:90:71:a4:74:ec:74:25:f6:49:a0:04:
65:40:62:09:50:08:de:a0:c2:00:63:da:d9:05:06:75:d7:ad:
3d:fe:30:08:83:d7:88:b7:09:17:10:a4:c5:a3:6a:75:ef:41:
82:ca:ef:d3:be:35:e8:fd:f4:a0:4e:60:99:45:73:2f:aa:37:
f1:4e:14:f9:e4:95:72:0d:17:c3:4d:4a:57:91:68:08:1d:80:
c9:7b:cc:87:7d:e2:f4:31:75:c4:96:af:27:0c:a5:00:e0:94:
b2:fc:21:9f:1d:73:bc:05:60:71:71:80:2a:dc:b0:6f:8c:d3:
35:b4:ef:31:00:f8:c9:c7:a1:33:4e:27:84:50:f2:aa:ec:7f:
f0:78:dd:f5:73:d1:9e:6f:97:a0:9a:9f:dc:c1:71:5d:0c:8e:
0a:b1:03:17:c1:4f:a8:b2:35:4a:4f:6d:1b:18:08:e4:1e:48:
20:65:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:20:43 2025 by rpki-client