Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
File: ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa (raw, json)
Hash identifier: JfsPqgmnWTrzWhjq/xoZqYw7dXBmZyHDfjwbA+eWmz4=
Subject key identifier: 70:DD:31:C3:82:CB:82:ED:93:72:35:BA:27:C2:04:F7:A8:66:C6:95
Certificate issuer: /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Certificate serial: 010D0C9F43285847FB1A338CAE91258423DE06C0
Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 21723
IP address blocks: 66.163.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:33:8c:ae:91:25:84:23:de:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=a83e9e9c-ca4a-466f-8acd-831c3e52f339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:76:cb:27:f4:3f:6c:e5:db:39:eb:13:13:
8b:2d:cf:46:8e:19:54:ac:ed:3a:17:40:10:cd:bc:
73:10:b6:84:59:ba:d8:8a:92:58:1b:93:3a:52:0c:
76:9a:38:d1:aa:f8:22:cb:6d:9e:43:48:56:7c:7e:
33:76:46:f0:03:3e:f3:17:98:35:b9:40:fc:fb:ab:
2b:08:00:28:78:52:73:ad:eb:59:ad:a3:e7:9b:ce:
58:69:3f:60:da:f5:c1:a7:28:e3:0a:06:41:9b:bb:
17:4b:a3:3a:bb:7b:ab:0f:59:a4:63:f2:7f:3c:59:
82:dc:c5:b1:ea:37:62:0e:15:bd:62:d3:ef:6a:3d:
ab:49:27:42:c5:b5:88:6e:59:26:6a:57:9b:4c:6f:
cc:41:3c:69:d6:e7:d6:44:6e:62:96:0e:bf:13:84:
12:68:99:a6:4e:c7:e1:9d:cb:61:61:66:8d:ae:1a:
a9:bd:7c:48:76:9b:28:60:55:72:67:e9:3b:81:42:
30:5f:4b:8f:36:48:ad:df:9f:b9:8a:6f:19:d9:0b:
31:6b:24:e0:af:1c:30:ba:7f:43:31:3e:93:e7:7d:
36:6e:36:16:42:69:92:c6:66:31:e8:a2:19:d0:74:
47:c7:e6:ad:65:1c:9f:5b:3c:4f:6d:f7:f0:2b:78:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DD:31:C3:82:CB:82:ED:93:72:35:BA:27:C2:04:F7:A8:66:C6:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl
X509v3 Authority Key Identifier:
keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.163.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:d4:c8:7b:8e:ad:46:94:67:30:2a:1d:ca:a1:a3:80:ac:e7:
8c:c2:13:d6:57:96:6b:36:79:16:34:8d:0a:9b:fc:d4:34:04:
99:c1:fe:19:0d:5b:44:8c:fe:7e:5c:b3:1e:82:0a:fb:1c:35:
46:f1:dc:7a:a0:96:b2:55:ee:14:ad:d1:ee:38:56:71:1a:b9:
ad:7b:33:5f:1b:3f:9e:95:bf:3b:ba:ec:16:fe:1f:1a:dd:5e:
74:e2:b8:7b:d6:43:f6:45:3e:da:b3:2d:b1:ce:da:0d:51:73:
a4:dd:3f:33:1e:cc:65:04:3d:10:5a:51:cb:43:bb:7b:ce:2b:
fa:0f:92:ef:1a:f4:25:38:98:4d:b6:4a:08:e2:3b:38:3c:2a:
88:5e:38:87:47:b3:d1:e5:aa:16:28:51:df:a8:1a:41:b6:5b:
d0:6f:6a:89:7e:15:2e:85:33:02:80:ca:9b:34:eb:38:30:0e:
18:69:11:3b:c6:27:e3:c7:f1:62:83:c9:3e:6a:72:8b:93:e6:
7b:bf:13:bc:7b:c3:41:65:4e:32:f6:29:48:d7:99:e6:96:32:
ad:e8:ed:82:96:08:c0:a7:a7:b7:78:52:39:bb:77:5a:13:bb:
7e:bf:0b:91:6b:cf:68:de:cf:97:3a:4f:86:04:10:9d:74:6e:
94:18:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:53:32 2025 by rpki-client