Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
File: 8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (raw, json)
Hash identifier: Pyhak50tP8Cl3AzwUoWhSfPiSUWWIopQFXBqneU++cE=
Subject key identifier: F5:BF:E7:DB:00:84:AF:E5:67:52:69:D6:FB:91:20:88:78:7B:77:1D
Certificate issuer: /CN=de8b5430-108d-4deb-960f-6c438a23adc4
Certificate serial: 010D0C9F43285848B8F0D02AE99B8393067C6580
Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 66.132.138.0/24 maxlen: 24
198.73.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:d0:2a:e9:9b:83:93:06:7c:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=3f9e472c-04f2-4ffd-8daf-2788ed103c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:6c:30:ce:f4:22:f8:ee:6a:33:cc:4b:f2:
38:d0:9b:e3:e8:c7:7d:43:ce:16:84:0b:f4:4d:fd:
24:9e:93:88:9f:73:27:ff:03:25:2d:2b:27:02:97:
c5:61:ad:16:2b:66:59:c7:3c:f6:45:9a:58:75:8a:
70:fb:fd:b0:e6:f0:fd:ed:4f:16:42:82:9d:e7:0b:
22:cf:9d:e7:dd:44:f0:73:72:32:50:5d:20:dd:77:
8b:61:57:77:52:fe:3a:8f:b9:7a:38:56:33:82:9b:
52:dc:de:a0:2c:f3:66:38:17:49:6c:bc:7b:92:f7:
7f:93:9c:a4:3b:19:ae:2c:13:f7:66:f8:c7:a0:11:
d6:32:7e:3d:ac:dd:39:f8:5b:73:5d:85:41:09:9a:
f3:6f:cc:e2:af:d8:4a:91:52:a1:19:f8:76:f7:04:
21:75:70:d6:6e:d0:e5:ac:fc:ad:a0:8b:8b:d3:a8:
b3:8b:e7:5d:23:30:be:ee:c9:78:a4:af:61:10:17:
da:ca:87:f2:6a:a9:e5:b9:06:56:42:d8:1a:fd:ee:
6f:b4:04:f8:09:d6:10:a3:9a:5b:30:5a:c1:40:6a:
61:4e:5d:51:f2:69:78:5d:de:3a:49:ea:7d:04:95:
f2:93:d7:dc:e5:ed:c3:46:00:16:f7:82:75:e8:53:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BF:E7:DB:00:84:AF:E5:67:52:69:D6:FB:91:20:88:78:7B:77:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl
X509v3 Authority Key Identifier:
keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
sbgp-ipAddrBlock: critical
IPv4:
66.132.138.0/24
198.73.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:e4:2f:65:af:0b:1c:e0:08:be:a3:3e:df:ce:a8:aa:aa:81:
24:fb:ed:bc:db:a1:94:d9:88:d2:2a:b9:51:b2:ae:40:98:23:
68:53:c9:b3:23:4d:c4:6e:bb:2a:86:1b:89:16:08:a4:8a:25:
20:9f:86:56:b1:b8:08:16:27:0e:f1:d8:9f:67:87:56:31:f1:
dd:e7:b5:ca:35:80:66:8d:4a:06:ce:bd:d7:d1:b7:16:15:9f:
a6:b5:6e:b8:43:75:f3:10:e0:bd:ca:37:ce:f2:1a:b2:21:eb:
e1:24:fe:2d:70:e6:e1:de:36:0c:c2:59:9a:ac:4b:ad:db:c6:
da:76:81:e0:e2:77:d0:f7:c9:7d:a7:88:98:01:6b:ed:e9:2a:
24:d9:cb:09:3a:c8:31:3f:c8:61:e3:ef:1c:56:59:b0:f0:f0:
70:6c:d9:02:7f:ca:dc:84:07:0b:81:cb:eb:22:37:40:bb:5f:
c9:be:e4:6c:21:d3:f0:5d:80:7d:22:ae:ed:51:84:77:a3:a2:
80:dd:54:3d:66:61:8d:cc:b0:f0:86:e0:b9:c9:c9:6f:5f:d3:
f4:76:c7:29:a1:0f:d9:3a:cd:61:dc:3e:0a:f6:ca:38:13:2e:
86:52:73:d8:f6:eb:0a:a1:e1:44:27:57:8c:09:35:5c:d3:54:
6b:3a:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:12 2025 by rpki-client