Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb9299a6-d862-3adf-8b1f-30ac7b29c053.roa
File: cb9299a6-d862-3adf-8b1f-30ac7b29c053.roa (raw, json)
Hash identifier: 6RtsuX1RuqkxrhSGds7g8Jj7AqsBCe2E0wnZutpMI60=
Subject key identifier: 99:FB:E0:C8:A8:CD:24:1D:AF:B2:E2:1B:8A:3F:54:D1:92:A2:65:BB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848143B4DE8E769EEF316BB2B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb9299a6-d862-3adf-8b1f-30ac7b29c053.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 69.66.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:4d:e8:e7:69:ee:f3:16:bb:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=81863934-a708-4b17-a7d7-00f4e405a565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:e0:29:85:57:14:01:74:c1:34:fb:a1:cf:
11:dd:3a:ba:fb:93:3b:f2:3b:ed:05:06:89:b4:3f:
bd:d7:fe:bb:7c:69:c3:7a:ce:30:df:fa:5f:9d:60:
c0:dc:e9:3b:0b:54:f0:0c:cc:03:d9:d6:75:4a:38:
c9:6a:59:1a:67:8d:fe:99:31:40:16:e7:b7:89:0a:
bc:4e:4f:eb:70:37:60:a6:7d:7c:53:b9:bb:35:fc:
28:cb:52:53:82:70:1d:7f:b6:d4:33:cd:2b:7b:8f:
15:ec:ab:50:e4:97:f9:d7:c5:21:d9:18:8b:95:ec:
51:b7:c3:af:2b:cd:ec:08:3a:d3:79:7a:b5:83:44:
39:d5:2a:7f:0d:1f:f0:7a:fe:6d:00:59:1f:4f:cd:
4f:04:4d:09:c3:17:60:5f:af:50:d5:0e:de:f6:58:
b2:66:86:72:bb:dc:ce:c1:03:3c:f3:25:1d:3e:4c:
fa:2f:66:cb:3e:3d:8d:87:57:81:9a:07:fb:77:96:
06:4f:e9:91:8a:5d:34:f6:df:9e:f4:45:6c:a5:91:
55:ab:eb:41:8f:8d:46:81:9e:39:4b:e7:f5:a4:ae:
4a:e3:86:6e:2d:f0:f6:6c:85:a7:a3:83:bd:97:46:
46:b0:f3:6b:c8:8f:ea:d6:99:05:98:25:5b:d9:a2:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:E0:C8:A8:CD:24:1D:AF:B2:E2:1B:8A:3F:54:D1:92:A2:65:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb9299a6-d862-3adf-8b1f-30ac7b29c053.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:11:ff:d3:f8:da:d2:ed:5d:b2:37:67:99:36:6f:1a:20:ed:
a5:43:a8:11:f0:5e:15:cd:ba:d7:ac:77:50:74:08:d1:14:27:
55:5e:7a:52:e0:70:35:7f:b9:6e:72:b8:e1:a5:21:e9:59:47:
16:ff:96:4d:16:54:3a:27:40:a9:24:b3:73:59:b6:bd:ed:da:
12:c3:c8:42:fd:db:d8:86:00:28:03:3f:fd:39:9f:95:45:cf:
6b:b0:9a:7b:69:ac:b0:0a:27:bc:a3:df:15:ab:43:64:45:99:
a7:92:67:8a:8a:dc:28:dd:a7:1d:d4:d4:69:a0:21:80:ab:66:
91:b2:9b:e8:43:89:bb:09:db:7e:c3:e0:43:33:8a:9c:7b:64:
05:e5:8a:9d:b8:fb:7a:e5:da:cf:28:64:64:3a:f5:d7:50:23:
0c:07:c8:cc:79:ef:5b:e1:db:64:c0:cf:52:17:a2:b5:c1:ec:
24:3c:f6:9f:09:a9:2f:81:ca:92:3c:84:8a:06:69:4a:34:48:
d1:5d:54:92:cc:0f:09:ec:4e:90:9f:67:44:66:a2:29:da:3a:
06:c3:23:3d:d9:57:73:b0:8d:06:23:a3:ce:5c:5c:06:b1:15:
5a:d8:79:b1:dd:9f:47:dd:63:22:03:6e:40:1d:52:7b:94:88:
02:83:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:19 2025 by rpki-client