Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa
File: 99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa (raw, json)
Hash identifier: gXzJO23hX9AN3UR/Bz3jlsQA66bDsztJ5SztmhxuqxE=
Subject key identifier: 1B:09:85:69:19:E6:F8:A2:A4:54:40:03:FA:E9:B1:F1:FC:34:B0:11
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848653045A84020B347C0924D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 7029
IP address blocks: 66.16.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:45:a8:40:20:b3:47:c0:92:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=0b9a36ae-4207-473f-bc64-9d466bd82a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:56:23:76:b2:d7:19:9b:de:d7:62:d6:d3:
45:a9:b6:05:f5:34:a5:1c:a8:32:35:bb:58:6e:48:
8c:12:9b:1d:44:6c:8e:e8:3b:12:24:4b:5d:d6:08:
c3:fb:e4:5c:ae:8a:2f:4d:bd:37:0c:f9:ec:f9:f0:
00:3a:c9:b6:61:4a:d5:50:17:0e:5f:b9:36:6d:94:
77:9b:cc:aa:59:02:d4:4a:7f:06:1d:d8:3d:a2:8c:
c9:69:05:a6:6f:af:b0:5a:38:71:a8:c2:ce:25:ba:
38:a5:df:2d:e6:da:7d:94:99:86:e1:49:79:f9:6c:
27:9a:2d:ba:5d:8f:72:86:54:4d:b9:a3:6e:bb:4a:
ee:58:4b:b5:25:f9:69:ac:12:25:90:e6:65:2d:2a:
74:e2:b8:63:d2:fe:61:88:e2:92:52:af:82:b1:bb:
b8:4a:f5:93:bb:3b:d2:c4:25:d5:44:2a:a0:53:e7:
d5:c8:90:c3:4e:b5:29:6b:42:68:95:c1:d9:07:59:
5d:30:b9:f1:62:49:21:b4:e6:6a:db:ab:5b:83:b2:
f4:13:c7:6b:25:f2:f4:7f:6d:e3:1e:6b:d2:65:9a:
02:ba:11:ce:44:bc:4c:6b:5e:a7:61:24:03:d9:06:
b9:40:77:d5:01:cf:ed:4a:b5:2a:78:db:cf:63:ba:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:85:69:19:E6:F8:A2:A4:54:40:03:FA:E9:B1:F1:FC:34:B0:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.16.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:95:43:6c:06:cb:9e:49:f3:c7:79:e3:33:51:98:3a:55:c4:
e1:28:d3:1d:14:1a:96:50:44:d6:a0:4b:b6:79:d2:47:88:e0:
9c:18:08:bb:d9:6f:2c:14:7c:aa:52:65:1e:10:da:56:85:19:
20:6a:e9:eb:0a:09:cf:b2:00:c6:a4:b0:26:a2:f0:ee:56:d3:
3c:24:a6:60:f1:8c:6c:e7:9b:ae:f7:9e:00:b9:a9:18:db:4a:
46:80:16:34:6d:4d:f6:5a:81:ed:ce:c6:8e:ec:e3:fc:21:ab:
3c:ea:f7:6c:7e:dd:6b:0a:d9:59:a9:47:23:10:44:4f:1e:95:
8f:1b:8a:9b:21:b6:86:e2:52:b3:79:58:6d:5d:e9:8c:b1:3b:
80:68:58:27:a3:b7:56:70:5c:45:cc:35:06:e5:04:a9:6d:3b:
04:74:49:b3:a2:7d:92:ae:91:4a:c2:d4:f9:2e:06:75:01:d7:
25:0e:d7:96:19:e3:75:92:1f:8b:0c:b9:bd:19:37:19:5b:08:
ed:5a:c8:c2:93:e6:06:89:3f:93:f8:c4:6d:8e:f4:e1:08:2a:
a9:d0:f9:2b:6e:0f:58:3a:a6:99:b9:15:64:ef:35:08:d3:f5:
28:16:65:13:60:fd:71:80:82:16:e5:d1:ee:b9:1d:79:7d:e1:
11:f9:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:44:19 2025 by rpki-client