Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa
File: 677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (raw, json)
Hash identifier: s6I6EO5xFJdaJ7ruD54XDoH4NLX653vAcdk0pwTxHOg=
Subject key identifier: 6C:8F:F6:EE:6A:7D:47:3E:CB:FF:C3:E2:18:21:5F:57:80:D5:3E:E2
Certificate issuer: /CN=669f938e-8371-4220-9059-9081449ba23b
Certificate serial: 010D0C9F43285847FDE4D0147E10EA4C388574D0
Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 46694
IP address blocks: 66.209.240.0/20 maxlen: 24
192.68.190.0/24 maxlen: 24
2607:6280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:d0:14:7e:10:ea:4c:38:85:74:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f938e-8371-4220-9059-9081449ba23b
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=5487d319-d75d-4e53-8cdd-5097044e207a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:aa:b3:b0:97:7e:75:81:5e:34:9c:dc:44:
87:62:40:75:ca:b3:2f:76:1b:a8:ca:43:08:33:6a:
e3:5e:81:de:86:9c:ef:bc:c5:79:08:ff:29:35:c1:
21:fd:8c:44:e2:58:41:21:2a:0a:0d:d9:cf:d7:99:
45:df:ee:2a:64:23:89:c9:11:00:8f:03:79:e8:cc:
09:36:f0:9c:44:62:09:83:c1:19:d0:e1:8b:c9:67:
d3:53:12:52:f1:cf:57:12:e4:3f:a6:f1:08:9a:d1:
b8:28:02:df:1d:47:a1:0a:dd:26:da:e8:8a:f0:48:
b3:f8:0f:1d:81:de:a0:19:f6:61:d5:99:cf:70:c8:
d6:77:5c:bf:e7:ce:89:ce:2d:8e:24:f5:82:12:3c:
2e:2c:a1:98:cd:39:76:f0:19:81:66:af:c7:67:42:
61:e3:8f:e7:bb:5f:a9:67:18:7f:14:6b:07:4b:c0:
a7:ac:11:a4:45:73:06:46:d4:e5:95:e2:41:47:66:
f1:a6:07:e2:5f:4d:d7:f9:f8:f4:45:e3:a3:47:98:
19:ec:b2:aa:3c:c8:c6:ed:ee:d9:89:28:bc:d5:c2:
2f:65:c8:6d:df:20:a3:b3:e9:56:ca:2a:aa:9c:06:
fa:7c:ba:00:37:d7:1d:96:cc:36:84:49:af:3d:81:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8F:F6:EE:6A:7D:47:3E:CB:FF:C3:E2:18:21:5F:57:80:D5:3E:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl
X509v3 Authority Key Identifier:
keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.209.240.0/20
192.68.190.0/24
IPv6:
2607:6280::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:08:b1:93:97:05:ff:34:6e:97:6d:4c:e1:7f:02:38:d0:6c:
76:aa:99:3e:c1:8c:81:a3:8f:f3:c2:1c:5d:3a:c2:a7:40:ec:
d2:e0:59:2f:17:c8:e2:65:41:67:27:c1:1a:1f:d3:d9:3c:6c:
c6:f2:df:4c:b4:9f:e6:5c:96:74:27:e0:57:5d:6e:52:9a:6b:
65:30:c8:e9:09:66:16:07:d5:8c:de:a2:ac:63:42:66:83:f1:
59:ba:68:e0:8f:56:03:75:75:51:3f:cd:c3:99:f9:64:1f:77:
cb:ce:ff:d3:b4:31:e1:a8:0c:cf:ae:ef:dc:21:f6:11:fd:f0:
06:42:5a:3d:ab:1d:d9:96:a9:9a:e1:e3:d3:0d:92:41:fb:0b:
7d:a2:8b:28:56:6b:80:df:c2:e9:56:3c:85:b6:0f:3d:43:de:
c7:0c:db:7b:5f:f9:56:60:c9:af:78:76:34:1e:73:50:c2:09:
f1:06:98:1a:8c:dd:29:d9:36:c4:75:d3:8a:b1:8b:38:f7:d7:
5e:d9:80:5d:ee:42:2d:c1:cf:ad:83:f2:44:3c:cc:1c:ef:cd:
fc:b1:f2:52:fe:b5:8e:66:c7:3a:9e:ab:17:89:1c:7e:b5:cd:
46:99:0d:bd:18:ba:a6:d6:7e:b5:93:92:da:b9:f8:67:10:ce:
ae:ea:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:39:12 2025 by rpki-client