Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa
File: a71bf399-4b1b-3700-8996-65eac6cc402a.roa (raw, json)
Hash identifier: 9VzAbfp1/rNDGatr7HHZSKdoJXIp2m7Y0mCLC+i52aw=
Subject key identifier: DA:65:41:AB:A6:E8:47:E5:19:8E:2A:B8:5F:91:E3:98:B0:2D:A5:C0
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584824FA8AE46A06D8293FFF1380
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 13536
IP address blocks: 66.231.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8a:e4:6a:06:d8:29:3f:ff:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=f6279fc3-6f75-472f-a881-f57e72b20f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ce:e9:4c:2f:23:81:df:af:e2:12:6d:49:c0:
62:b6:44:5f:db:29:1b:6e:98:0e:90:4c:67:ad:8f:
17:2b:e1:a5:69:68:3a:cd:0a:ef:62:38:58:2c:7b:
f2:45:62:df:84:d2:36:a7:57:76:32:40:66:49:42:
aa:9c:73:67:29:e5:33:13:a2:2c:b0:27:b8:07:80:
c6:af:51:32:f1:be:89:15:e1:27:36:51:9e:fc:b2:
65:35:1f:5c:74:cc:14:69:f1:07:14:82:9c:5c:88:
65:09:88:21:c3:59:0e:c3:da:3f:5e:88:b7:21:80:
6b:6f:4f:5a:da:1a:04:e3:95:42:7b:29:db:e9:a7:
e2:c8:52:27:38:9f:7c:87:22:62:c7:2d:b9:ed:49:
27:78:4c:7f:b2:e3:2b:9c:ae:e2:93:33:1a:38:f1:
6d:0a:58:5a:5a:d1:bb:18:38:39:4d:be:d7:61:8d:
02:87:47:15:64:d9:d8:35:10:e9:5e:da:9a:9f:df:
52:07:09:fb:37:cb:5f:2d:c3:f9:60:8d:8b:f7:ee:
33:f3:d7:ec:00:04:1b:d6:10:48:c0:a7:0c:d2:1e:
a8:12:67:81:df:d5:43:7f:07:7a:38:ce:b4:39:34:
1a:8a:2c:ea:11:a2:34:79:3e:17:52:4f:1a:dd:e7:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:41:AB:A6:E8:47:E5:19:8E:2A:B8:5F:91:E3:98:B0:2D:A5:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:20:8b:63:17:f5:39:44:57:1e:57:6c:b6:a5:33:8e:4e:d2:
19:48:32:7f:69:41:a7:f2:43:be:21:27:bd:f9:21:ae:2a:df:
b4:99:8a:9e:04:49:bf:c3:7f:5c:25:cf:65:e3:f7:ed:4d:c3:
e7:3d:93:27:b6:e6:fa:2e:2e:0d:48:01:07:03:cb:3b:31:e9:
b0:47:19:ae:28:c3:3a:c1:28:f0:fd:68:26:5c:20:eb:95:8e:
8b:31:7c:dd:9f:eb:bb:82:5c:35:67:9a:b7:05:a8:bd:9f:6b:
39:e0:9c:de:22:79:20:74:8a:d6:9e:7e:0f:aa:5c:b6:e6:13:
39:51:01:69:e8:e4:5a:b2:e7:84:ac:67:ed:46:1d:a5:97:20:
c9:f4:07:c9:63:63:67:a7:e4:b3:c3:19:a1:4a:dc:fc:b7:be:
02:93:03:8e:66:70:be:f0:fa:9e:47:71:ed:2b:8c:2d:7e:77:
a3:b3:f1:fe:42:96:7b:c8:a0:26:e4:30:13:e1:38:83:65:b6:
70:ec:76:32:3d:33:a8:5f:a9:00:5f:9f:2c:fa:87:4d:5e:e1:
bf:9a:56:58:d4:2f:1b:80:10:9e:f9:51:4c:26:d1:2d:d5:33:
24:aa:36:12:7d:1e:99:49:6c:a6:bd:14:ee:df:73:f5:79:51:
ed:85:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:16:05 2025 by rpki-client