Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e67808e-f879-39fb-96e6-9d7194cb0487.roa
File: 5e67808e-f879-39fb-96e6-9d7194cb0487.roa (raw, json)
Hash identifier: QgkgeIJTetnEUdjYmSHiAiYRtlzGGWlYJeUQiZ19H7g=
Subject key identifier: 04:40:A2:40:88:2B:B0:C0:6B:00:9F:B4:6E:3C:4E:E0:F9:75:CE:CF
Certificate issuer: /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
Certificate serial: 010D0C9F4328584819CFDE6BFEB4E873C1B9DA00
Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e67808e-f879-39fb-96e6-9d7194cb0487.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 7018
IP address blocks: 66.207.176.0/24 maxlen: 24
66.207.177.0/24 maxlen: 24
66.207.178.0/24 maxlen: 24
66.207.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:de:6b:fe:b4:e8:73:c1:b9:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=de7240b2-504d-45d0-852c-9e153ba07f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:07:2f:d8:89:1e:de:93:da:e4:36:ff:8f:
1a:ec:bf:c4:0f:3c:bf:4a:e3:a4:5a:a2:68:d4:ed:
2e:23:dc:f1:1c:8c:8c:89:31:3b:7d:6f:83:39:03:
28:a9:cf:52:27:f5:2c:6c:84:83:e5:69:91:d6:de:
af:18:5b:53:21:08:c7:c7:f4:f5:53:3c:7d:64:1d:
e6:4c:8c:1b:a9:be:0b:10:e1:19:3f:52:5e:fb:c9:
01:7a:1c:15:01:96:9e:3d:33:4f:4e:36:e7:08:ce:
99:86:13:90:0a:dc:37:28:17:1c:b7:b2:92:0f:32:
94:4c:cd:ae:d3:c5:0a:46:dd:6a:df:fc:5b:26:c4:
78:a5:cc:38:8f:d4:e3:60:29:cf:8a:d8:71:ad:71:
ee:b5:87:4f:9c:2f:82:2d:c0:ea:81:07:ea:70:4a:
11:90:b5:e0:ff:00:9a:3f:46:94:24:87:1b:e3:bb:
f7:50:0d:e6:a5:68:38:d9:6c:b2:08:c6:c5:37:9c:
71:95:9b:3e:52:4e:81:8f:e6:ba:80:cb:12:81:6c:
c2:7e:0e:b3:bc:4e:76:42:1f:f9:8b:8b:67:9f:1c:
b9:b6:7f:b8:d9:0e:31:c7:f4:f4:39:dc:8b:03:f6:
15:54:bb:d2:14:26:34:d6:dc:4a:9a:7c:0a:dc:11:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:A2:40:88:2B:B0:C0:6B:00:9F:B4:6E:3C:4E:E0:F9:75:CE:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e67808e-f879-39fb-96e6-9d7194cb0487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl
X509v3 Authority Key Identifier:
keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
sbgp-ipAddrBlock: critical
IPv4:
66.207.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:4c:30:1b:64:7a:17:eb:e7:af:3b:07:05:aa:3c:4b:03:73:
95:86:b9:d9:9f:4c:1e:25:bb:7c:05:44:76:f1:a8:78:bf:86:
24:e0:8f:f2:40:a4:c4:07:a7:ce:0c:30:a9:3a:c7:06:bf:16:
aa:fa:b0:da:4f:87:92:c0:c4:f6:1b:0c:b3:e9:9b:21:f5:11:
2f:c4:63:ae:89:f3:02:52:ff:7f:86:a4:4e:bb:f6:1f:f2:16:
d2:c1:a3:a8:c4:35:82:c2:0f:ab:14:20:5e:ab:8a:b9:14:96:
2b:af:0a:bb:af:bd:07:78:19:38:b4:bb:6b:62:bf:3f:d2:dd:
07:0f:1d:bb:0b:23:34:5e:63:3a:76:84:62:0f:6a:c3:66:f7:
c9:bb:48:e5:b3:a5:22:c9:e1:5b:4e:3e:28:85:f4:e1:8f:19:
06:bb:5c:94:19:bd:f3:fc:34:c7:64:3e:52:cb:be:66:6e:d0:
83:52:62:fb:5e:0f:1e:2f:a9:16:5b:79:ad:22:3e:48:be:0f:
bc:e0:2c:ef:6c:07:e3:ed:9f:2c:df:b1:fb:84:91:ad:e9:82:
ae:77:6e:b3:7d:49:c1:3a:81:6f:00:2f:1e:32:b8:94:a0:d7:
6c:21:a0:c3:63:7b:a0:50:26:90:32:ca:37:31:80:1e:af:0c:
d4:55:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:36 2025 by rpki-client