Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa
File: d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa (raw, json)
Hash identifier: rDAFse2E8zhixXNPNAhXoQj54bNMzTSl4mFooMi0eyc=
Subject key identifier: 69:8B:EB:41:FC:0F:7A:A0:11:29:86:65:1E:7C:32:B4:02:32:34:37
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858485B6AF7320EC460EDD91DDE00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 29802
IP address blocks: 66.96.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f7:32:0e:c4:60:ed:d9:1d:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=b2f293b7-130e-436e-91fa-f8c26acd8bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:2b:6b:a6:ab:cf:2a:90:28:23:4a:8a:f7:
4e:dd:bc:d8:9c:ba:ba:af:a4:7a:fc:9d:13:d1:ce:
68:e9:c9:5d:77:e3:76:95:0c:a9:90:21:3f:43:9b:
f5:73:fe:84:19:a1:45:38:bd:3b:e9:f4:18:e1:84:
09:81:41:06:54:25:b2:56:ee:b8:69:37:f4:58:68:
b9:2e:33:3e:23:5d:9c:45:f1:07:df:18:95:c5:66:
ca:fe:15:bb:5e:b7:be:51:1c:99:b3:95:54:f5:2c:
45:94:12:8e:21:66:8f:92:b9:79:29:93:44:26:0a:
4c:84:a7:a9:43:11:e5:6d:88:aa:9d:c3:3b:33:73:
87:16:57:0d:c3:b7:16:9c:cf:0f:78:90:15:7c:a8:
57:4d:ab:43:0d:21:47:18:85:a5:51:24:13:5e:da:
fe:e6:04:59:20:63:6e:df:bc:d7:f0:cf:bc:96:26:
b4:17:28:f8:43:ea:db:98:b5:de:d6:3d:f3:9d:f6:
e8:9b:60:ed:cd:d8:96:1c:9d:92:f8:60:5e:1d:cd:
9d:0d:ee:9f:7f:2e:87:86:db:a7:ee:bf:f7:bc:2c:
ec:45:0e:fc:20:1b:59:d0:9a:85:e5:65:aa:8b:b2:
db:65:0b:ca:9a:b8:ab:66:59:0f:95:ac:a2:9e:84:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8B:EB:41:FC:0F:7A:A0:11:29:86:65:1E:7C:32:B4:02:32:34:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.96.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:26:3f:64:98:4c:0a:fe:19:e8:68:14:fa:4d:0a:c9:5e:2e:
1e:5d:66:1f:3e:dd:36:22:8f:ff:d6:36:d4:86:b4:80:aa:63:
cf:ef:8f:6e:0f:48:32:09:df:5b:4a:ce:45:56:12:d4:d3:af:
32:a9:72:91:6a:f4:1d:bd:30:51:4e:c1:ce:4d:3f:b6:be:32:
47:1a:4a:f2:e2:84:a4:a2:be:88:10:a1:1d:92:d4:ce:ec:d7:
a1:af:87:c1:14:fc:c0:a2:dd:28:1f:0c:db:ce:c6:d2:4d:58:
1a:4d:e4:f2:8c:bf:d8:f4:b2:06:4a:d2:54:d9:c1:70:17:57:
e8:f5:47:17:16:65:43:14:4d:e6:b8:94:4a:ae:e7:b6:48:9f:
03:e1:e4:c4:4e:b4:a2:1b:13:8a:bf:75:81:3f:2c:9d:82:f6:
a9:17:28:26:00:e4:59:f1:df:1c:98:38:6a:65:23:cc:f8:18:
d6:b8:34:3f:72:0e:a1:7f:63:29:88:2e:21:30:82:33:eb:2d:
4b:bb:e9:88:29:3c:6b:8f:81:e6:98:1f:d9:c6:a0:00:6e:a1:
4b:d7:7e:a4:0e:e7:6d:5d:f2:8a:5c:d2:87:ee:f9:8e:84:99:
e6:68:45:3c:77:f0:7d:8d:87:f5:d7:3b:e0:00:52:3c:1e:5b:
94:4d:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:40:45 2025 by rpki-client