Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
File: f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa (raw, json)
Hash identifier: Zhn3jmk8YDDmFIigb+ZvO2qtU599Qg9T4tfOD15x0KM=
Subject key identifier: 47:FB:D5:35:B8:C7:02:12:91:B6:E3:4E:B1:89:5B:22:30:84:03:FE
Certificate issuer: /CN=39fdcce5-d149-4129-97c3-c60e86600fb8
Certificate serial: 010D0C9F432858487B85B25C6872076E8CF15AC0
Authority key identifier: 8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 15121
IP address blocks: 66.102.144.0/20 maxlen: 24
198.105.28.0/22 maxlen: 24
2604:a780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b2:5c:68:72:07:6e:8c:f1:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fdcce5-d149-4129-97c3-c60e86600fb8
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=48bc8e14-999c-4ca0-baad-f8eec7a0ef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:05:43:11:0b:a8:6d:cc:16:0a:4b:1a:74:
91:3b:79:84:d4:e5:1c:2e:c9:d8:ad:0f:61:ef:f7:
84:9c:02:c1:84:dd:a3:fa:cb:c9:79:98:6e:7f:50:
58:1a:65:7b:7f:64:72:4c:4d:84:5c:46:5f:29:e3:
ac:fd:eb:d7:b4:6b:bf:55:1b:38:e0:cc:69:b6:e9:
c8:eb:08:bf:c5:07:9e:e7:11:11:92:b1:7c:45:c3:
ae:44:69:80:09:3c:e4:a9:0d:d7:2a:4f:98:e1:5f:
8c:fc:35:4f:7b:6d:99:16:b0:fd:94:79:55:5d:25:
93:a1:e4:c4:c2:78:8b:47:17:24:3e:8e:f8:87:12:
6d:72:b7:9e:dc:5a:d3:85:24:d5:d3:47:4c:68:6f:
bf:bb:43:1b:bc:23:ce:f6:69:0f:dc:e6:25:d9:13:
ef:fb:73:34:99:ed:83:37:fd:1d:ab:e3:ef:f7:32:
d7:ad:aa:1a:9e:b0:b1:38:a6:62:6c:79:f6:9c:a4:
99:bc:cb:75:4d:4e:af:c3:83:f6:3d:35:24:1b:e8:
cd:9d:ab:e7:a0:8e:1a:81:83:01:41:8f:c4:6c:a7:
a2:29:82:54:0f:11:15:6c:ec:47:d3:ef:be:a8:97:
ad:ab:df:0a:c2:f0:e6:e9:ef:33:18:4f:be:ca:7e:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FB:D5:35:B8:C7:02:12:91:B6:E3:4E:B1:89:5B:22:30:84:03:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.crl
X509v3 Authority Key Identifier:
keyid:8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.144.0/20
198.105.28.0/22
IPv6:
2604:a780::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f6:17:06:94:20:1e:0c:be:e8:e9:8b:e5:d3:53:52:28:e4:
4b:53:10:2e:a7:7e:8a:83:73:4e:cf:25:ba:bd:42:4d:14:63:
58:2a:58:d0:a1:20:74:34:7f:8d:8b:8e:3e:f7:cc:65:2d:db:
99:37:38:19:3e:55:94:ce:27:5e:5b:1a:c3:76:be:3c:ff:a6:
46:cd:d2:51:53:cd:99:26:3f:dc:e3:aa:f9:b3:22:9d:90:71:
58:5e:ef:96:9c:00:c0:1e:5b:b3:23:d5:99:82:19:28:5f:35:
be:de:10:e3:43:1b:88:0e:a8:33:52:bd:0c:af:7f:88:d5:45:
ec:86:64:57:04:21:ed:67:3d:14:60:33:f9:2f:5e:39:cc:1e:
f5:01:57:14:90:55:bc:0a:78:ff:da:6f:2a:96:d8:d6:97:05:
1f:8e:c2:cf:33:90:26:db:52:d1:4f:aa:ba:4a:a6:f2:3a:2e:
2b:c2:c2:bb:79:9d:e8:ed:86:7d:2e:4e:50:61:87:c2:4b:eb:
e2:f7:82:9f:77:df:72:46:dc:ab:da:a2:1a:80:f8:d3:cb:af:
7c:5c:7d:0f:c2:2c:8a:cc:72:bc:02:5f:52:2d:56:9d:1e:ea:
90:c2:01:3a:49:bf:da:8b:dd:f0:f6:91:c7:6a:56:26:21:df:
91:94:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:10:52 2025 by rpki-client