Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa
File: d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa (raw, json)
Hash identifier: oOFIzyZvLtqEJfIyhWUsOn5d7ZAQhPvVu+Bs3//3u2E=
Subject key identifier: FA:EE:8F:82:B8:46:C3:C6:6E:B1:13:0F:8C:8C:19:4C:FC:A6:7C:D5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15513E37749C29A488D8880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 27338
IP address blocks: 66.0.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:13:e3:77:49:c2:9a:48:8d:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=13705626-e2b3-4d3c-b6ce-0f71dbb58b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:49:7e:42:98:40:e6:31:d1:29:ef:fa:d0:
23:e2:f3:66:1b:ee:da:21:f4:0c:87:a1:14:1c:b4:
e0:46:5e:95:6c:01:4c:ce:de:7b:7f:43:21:30:e0:
d2:95:35:cc:d2:09:38:ea:8c:71:11:22:d3:10:55:
b3:72:a3:c7:31:eb:2a:4a:9f:d1:e8:2d:5e:38:9e:
c4:a2:6f:ee:26:d8:0e:e5:ff:d7:d6:80:ad:ee:c4:
9e:4b:f8:08:72:cf:9f:6e:75:47:7f:fa:33:dd:32:
10:27:dd:81:ad:0c:03:97:86:95:da:6e:4a:00:13:
ed:ee:ef:77:9d:19:b2:fd:40:d5:1f:10:69:30:5c:
42:3d:82:49:dd:45:a5:16:76:d3:d8:8e:00:eb:c1:
35:f4:31:c1:05:9c:2a:92:89:cb:8f:0d:4c:82:e4:
7b:15:88:bd:ef:fc:5c:d1:27:15:42:47:68:d5:61:
ea:8c:8f:ad:1d:e9:c9:10:27:33:13:02:8d:9a:38:
44:96:4f:3d:ea:ac:12:05:b2:11:d7:a9:a6:28:c3:
0e:d5:9f:c2:d6:e5:5c:93:29:68:70:44:e2:9e:f9:
12:ee:4e:24:1f:ec:4f:7d:6e:d8:5c:80:d4:67:11:
c7:d0:37:87:6c:92:4b:b1:bb:65:eb:96:cb:8d:e9:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EE:8F:82:B8:46:C3:C6:6E:B1:13:0F:8C:8C:19:4C:FC:A6:7C:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.0.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:5b:bd:39:bf:99:bd:ff:7a:79:36:76:95:d9:82:3f:77:4b:
09:85:cb:a4:0c:cf:8a:2f:98:c1:a5:e1:a1:6c:0f:3d:f7:e7:
34:f4:1a:18:42:33:80:b7:a4:4c:4d:c6:2e:67:06:90:14:08:
4a:de:b0:72:cd:d1:00:cc:9e:fa:dd:64:21:34:48:e3:4b:c7:
57:88:fc:34:9c:e4:2b:bd:2f:ad:10:3f:45:9c:fe:f4:13:02:
dd:60:5a:2c:72:a3:4e:40:68:bf:03:00:6a:58:97:dd:56:34:
9e:1d:69:87:78:8f:46:79:a6:79:f1:e2:55:48:c5:67:45:f6:
b8:a7:08:7c:54:16:43:0f:d0:80:6f:3b:61:34:31:d4:88:1c:
15:5b:e0:d3:c4:e8:58:ee:fb:24:a0:5e:91:42:41:19:0c:69:
90:78:e6:7b:64:94:36:9a:7b:63:4d:4e:d9:3d:aa:34:8d:a0:
91:ff:4b:a3:d5:95:75:a0:0c:30:1c:2e:0b:07:c8:5c:c5:f8:
64:96:5e:e0:65:f7:f8:47:cd:32:a8:56:b0:c1:60:93:a3:40:
57:00:5b:7f:be:96:b6:16:55:16:76:3c:85:a9:ff:ef:ad:ab:
97:f4:c4:97:97:eb:23:30:72:ae:42:bb:24:fb:e7:ac:54:f9:
b0:5d:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:21 2025 by rpki-client