Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7f026e9-0187-3d65-b799-bbc396c95a39.roa
File: a7f026e9-0187-3d65-b799-bbc396c95a39.roa (raw, json)
Hash identifier: T025aYSfNnOG0Sl/OPshpt1+g7rgQXBvk31uF0a0svA=
Subject key identifier: B7:0F:BB:2A:16:BD:57:42:F4:A4:95:BA:E5:8C:41:72:BC:09:6C:71
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489BA0B686A920C482C4BF8200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7f026e9-0187-3d65-b799-bbc396c95a39.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 27338
IP address blocks: 66.0.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b6:86:a9:20:c4:82:c4:bf:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=b2a51b84-6083-4383-9847-0d7e9f7a758b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:e4:f5:77:ee:26:08:d3:10:cd:b3:34:4f:
11:b0:89:ea:41:c5:59:21:3d:0e:32:27:97:59:1e:
2c:81:c7:d9:99:ac:d3:f0:4c:9a:a1:91:f3:04:7b:
de:f1:1a:36:03:be:d8:5d:1e:4e:2d:17:a6:4e:3a:
4b:79:4d:d2:8e:e8:3e:50:f0:8a:ef:c3:7c:ea:f8:
14:50:bf:64:b2:53:00:7c:99:b1:26:8d:39:85:2e:
0a:aa:4e:4c:fe:7b:ad:f2:08:af:2e:d1:2d:97:1a:
da:a1:92:19:b9:e2:65:13:17:e5:30:7b:15:c3:40:
a6:d4:37:c5:d6:33:63:d8:94:34:6d:fe:e0:21:4a:
4d:5f:c7:dd:05:48:ed:b6:08:d7:77:1f:e4:ed:97:
19:ca:10:21:34:5e:f8:9a:02:c8:71:4a:74:2d:d6:
2c:61:20:b3:c2:b8:8a:09:c9:a2:a7:59:c9:d0:3b:
92:26:88:7c:44:3c:5e:f1:06:0f:8a:42:34:02:9a:
eb:a9:9a:7c:60:db:23:d7:f8:54:2b:00:ee:79:92:
03:23:d3:71:1d:08:b8:00:7e:d1:59:57:c7:22:45:
17:8c:20:b6:d1:a6:67:e4:73:67:cd:df:15:db:b8:
46:d5:ce:6c:62:19:cb:5c:f0:1b:58:7f:8e:92:53:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0F:BB:2A:16:BD:57:42:F4:A4:95:BA:E5:8C:41:72:BC:09:6C:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7f026e9-0187-3d65-b799-bbc396c95a39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.0.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:a0:05:0e:c3:c0:95:89:33:fc:80:0d:18:79:22:b1:70:b8:
e2:e1:73:ad:19:87:03:65:d7:81:b0:24:1a:d5:8c:6a:c1:e1:
63:1f:1f:a6:dc:c3:37:33:0a:f6:83:fe:cf:86:bc:ac:11:c2:
82:7b:62:04:4e:80:9f:0f:dd:be:59:c1:f3:56:7a:23:ad:b6:
34:a6:d2:21:dd:b4:80:a4:7d:e4:de:4a:e2:b2:5e:d5:34:16:
61:6a:d7:9b:6e:5e:d1:4e:6f:a6:79:51:0e:90:92:ed:cf:eb:
0f:c6:ca:b5:c1:2e:61:5c:f0:51:6e:f0:29:e6:d1:cd:23:da:
d7:ac:7f:b8:9e:94:8e:40:96:a8:ef:4d:e3:29:35:d2:26:57:
a1:69:06:cf:96:46:fd:ec:41:28:c5:9b:21:cb:c0:8c:b9:2d:
ca:87:fb:bc:db:f1:f2:bc:ab:3a:b1:42:5d:81:d7:75:06:76:
78:83:56:d6:2e:5b:21:61:1f:aa:d9:2f:11:11:90:e0:d4:7f:
79:22:dd:8b:e1:df:97:19:ad:a3:b1:d5:d3:c0:14:8d:9f:03:
22:27:ec:58:a1:31:db:85:0a:2a:67:60:26:24:63:f0:c6:68:
34:54:f0:b0:2c:7a:e9:5d:43:66:fd:6d:0b:f5:bc:ec:53:6b:
e7:66:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:16 2025 by rpki-client