Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/cec13f1c-2894-3fc6-b1f5-a75573f57e18.roa
File: cec13f1c-2894-3fc6-b1f5-a75573f57e18.roa (raw, json)
Hash identifier: E36yyG/WELq0rE7lLBOfmwy/VqAwybquCDh9Hy4I7pM=
Subject key identifier: DC:91:68:C8:C8:5D:79:B5:68:55:97:D4:0C:AB:6D:BD:C2:4A:52:FE
Certificate issuer: /CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02
Certificate serial: 010D0C9F432858481F651EC3FBE71C0463716E80
Authority key identifier: 1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/cec13f1c-2894-3fc6-b1f5-a75573f57e18.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 14532
IP address blocks: 66.203.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:1e:c3:fb:e7:1c:04:63:71:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=e4ba6e50-816d-438c-9c20-a37376700215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:40:8b:74:01:d8:e7:41:c2:3f:86:62:68:
4b:f3:fb:6b:d6:0c:36:b7:62:d4:ff:16:0e:30:71:
ca:37:4a:43:d1:8e:66:af:af:70:85:16:a4:36:a8:
21:47:f1:e3:16:22:79:23:22:da:05:71:c7:4a:b3:
6d:59:c8:16:a2:84:0f:9c:06:1e:fc:46:14:1e:8c:
41:46:b5:40:ec:d0:e5:a0:0f:ab:17:19:64:f9:df:
62:7d:63:b1:40:17:ec:b2:bf:19:3a:af:dd:19:ef:
9e:d9:05:61:28:e6:30:d7:88:35:9b:47:7c:84:fb:
f5:91:b7:e4:0a:28:2c:97:5d:69:aa:3e:b2:29:12:
4d:2c:2a:fe:9d:57:38:6e:8c:34:a6:50:ce:12:23:
bf:b4:4b:1f:b0:7b:bc:c4:4a:1f:a3:18:ae:19:fb:
d4:e3:f3:68:9a:cc:73:3b:d8:7f:38:f0:7b:a2:15:
fc:be:c6:6e:81:cf:9d:ac:4a:eb:52:c6:d3:d0:ba:
1a:0b:48:34:40:70:19:b2:c3:82:9b:77:74:64:2b:
c3:5b:1f:d6:ca:a8:b9:5d:3e:c1:1c:38:da:e8:f3:
bb:8d:54:e6:90:7f:4c:e2:5a:b1:c9:30:9e:d4:48:
cb:94:33:ba:33:dd:bd:cd:a2:17:2a:7d:ca:60:d9:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:91:68:C8:C8:5D:79:B5:68:55:97:D4:0C:AB:6D:BD:C2:4A:52:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/cec13f1c-2894-3fc6-b1f5-a75573f57e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.crl
X509v3 Authority Key Identifier:
keyid:1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer
sbgp-ipAddrBlock: critical
IPv4:
66.203.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:bf:99:59:12:99:06:bd:49:f5:0f:a7:fe:40:ed:ae:43:fd:
88:b9:4b:b1:5b:08:d9:2a:06:4a:e1:54:c5:59:49:f3:ea:7f:
bc:46:1b:5e:c2:24:ae:e2:fd:41:ab:7c:41:5c:49:d9:18:56:
52:e3:89:5e:9b:d4:ae:67:5f:ed:29:fe:58:2b:c8:e0:ae:3a:
3d:02:83:36:d7:b3:18:46:06:02:df:d0:a6:1c:49:d6:38:de:
25:a5:39:cd:6a:62:52:b7:27:37:ee:a7:f2:27:2b:90:65:ac:
a7:1d:f7:c3:f4:02:c0:78:73:1e:e0:d9:d9:22:3e:ff:d4:7e:
ce:89:bf:5d:b9:6d:c4:98:c8:5d:27:7f:57:6b:a6:aa:e3:c9:
61:14:97:d3:ae:a7:f6:8c:00:ee:37:dc:6b:f2:59:f1:53:f1:
f2:b8:66:94:b3:8e:12:15:34:9b:6f:db:b4:72:de:6d:a2:31:
5d:8f:ba:b6:5f:fa:ff:f4:f7:6e:22:af:c8:72:1f:61:d3:2c:
ea:82:f1:ab:50:b0:4b:3a:ac:66:0b:2f:9f:68:42:39:aa:0d:
35:e1:ed:4c:51:b0:54:35:aa:08:89:ee:ee:6d:bf:f4:4c:11:
4b:42:32:ff:16:1d:3d:61:34:8d:9f:e8:95:71:86:61:a9:0d:
03:4d:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:44:55 2025 by rpki-client