Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa
File: 34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa (raw, json)
Hash identifier: lXfE94+kJa5f9pZ3yzqWelLyUiLtSkppZ2woBrXyMuw=
Subject key identifier: 4B:4E:83:88:13:E0:AA:B2:C6:BF:FE:DD:E7:8F:4E:28:F3:A5:D6:B7
Certificate issuer: /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19
Certificate serial: 010D0C9F432858487FB5E848920A23F22F4FF800
Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 63208
IP address blocks: 66.33.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e8:48:92:0a:23:f2:2f:4f:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=39477791-ae17-48a0-825d-58cb7d105596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:cf:99:93:b4:1c:3d:5c:6d:9b:0d:23:cf:
ac:43:e1:78:1d:dd:11:2b:66:bd:7a:78:2c:0b:e2:
67:90:aa:c5:0e:14:fb:ee:87:8a:21:ba:29:c5:be:
9c:4c:55:46:c8:99:3d:60:be:d1:bc:fd:60:ed:1a:
c0:cf:7e:4a:d1:a6:95:7b:3f:cc:19:3b:82:af:ae:
0c:fd:58:a6:5a:17:8d:78:af:24:21:2b:5c:7d:97:
66:03:29:ae:06:6b:f9:3c:f6:db:8e:81:5c:04:6b:
ec:e5:b1:c6:51:ad:87:37:e8:8e:64:18:3c:19:68:
6a:db:a2:58:71:65:91:a2:5b:50:1f:a5:4a:3f:23:
ed:04:9a:11:32:a5:4c:ac:68:e5:ad:19:18:23:20:
8e:7f:99:af:e0:8e:a1:b5:35:30:86:b4:3c:c3:11:
68:ee:ba:95:cf:e9:bf:53:8e:55:c3:c9:60:97:28:
01:27:67:5e:8c:13:2d:20:9c:e4:77:32:5c:42:a1:
69:83:9a:ce:e8:55:a0:bb:43:04:0b:04:a2:63:e7:
20:59:a6:56:00:ef:8b:4f:80:cb:85:c0:69:f6:e8:
af:40:08:4a:79:9c:cb:67:54:69:a2:a0:1a:94:69:
d3:9b:07:23:b4:62:32:a6:f1:27:14:80:ba:82:ef:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4E:83:88:13:E0:AA:B2:C6:BF:FE:DD:E7:8F:4E:28:F3:A5:D6:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl
X509v3 Authority Key Identifier:
keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:bc:5f:bb:44:51:f6:81:7a:19:73:6e:5d:f3:06:1e:f2:32:
2e:af:2e:d6:0b:72:ca:11:95:07:48:fc:a4:ee:4d:3e:0d:77:
7a:9b:09:37:76:a2:cf:8e:0e:9d:1d:89:4c:ca:9e:c1:4c:0b:
da:1f:12:7e:c7:99:12:9a:2a:4a:fd:bb:45:08:8e:53:6b:e0:
0e:04:9d:f6:6c:88:a3:f9:7b:29:f3:94:2c:d1:13:1a:db:7e:
46:61:da:32:ad:a3:86:86:e1:6c:b6:fc:c9:74:59:08:bd:f0:
18:12:c9:62:89:ff:29:fe:02:f0:eb:8b:9c:19:4f:70:15:da:
e0:49:3f:aa:17:e5:ea:df:31:75:44:71:c9:9f:d2:7d:b5:72:
39:0c:4f:b7:a0:01:f6:5f:d7:2f:74:39:8a:32:11:0a:9a:f6:
be:a1:9b:2e:d5:78:68:8f:98:11:1f:26:97:c3:19:57:ba:06:
fa:52:6c:98:a0:65:a7:c9:de:5c:6f:d9:dd:05:fb:6f:e6:c9:
b9:a0:37:df:4f:90:44:d7:01:2e:cf:bc:6a:0c:c3:18:14:a7:
62:cc:87:68:c5:12:ce:3b:5b:16:6e:18:c9:fe:d1:b6:38:fb:
dd:f3:d0:ed:f0:3f:c7:1b:0f:2a:d4:a6:b5:00:11:40:d8:e1:
fe:d6:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:12 2025 by rpki-client