Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f8da808f-47b5-34dd-b483-f75e9c99551c.roa
File: f8da808f-47b5-34dd-b483-f75e9c99551c.roa (raw, json)
Hash identifier: S0qNSEFWHXx9CgoheJKNlNDcqBnwCcbGR15Rxb9KibI=
Subject key identifier: 52:98:38:7F:67:F0:D2:4C:9C:FE:BE:90:7A:85:EC:FE:8E:0D:A5:6E
Certificate issuer: /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial: 010D0C9F432858487755C6C6BD0B117760DF85C0
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f8da808f-47b5-34dd-b483-f75e9c99551c.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 16992
IP address blocks: 66.37.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:c6:c6:bd:0b:11:77:60:df:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=0fb6e432-272d-46b8-8b6c-c0c5e67d558d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:5f:03:9c:e4:43:92:36:3d:04:6c:ba:11:
1a:16:3c:5f:e3:87:af:b6:b1:b4:e6:6e:8c:e1:2b:
f3:f0:29:f8:4d:29:67:5e:91:41:fa:55:f7:34:16:
fe:a0:61:e8:ad:f1:e3:8e:8b:a8:dd:95:05:33:07:
06:f1:e4:34:74:98:fd:bd:e3:a0:fb:55:e9:2a:b2:
af:1e:fa:dc:90:ac:ef:a9:a9:04:7f:8a:fb:c0:37:
e3:7e:e3:66:4f:52:3d:c6:ba:4b:1d:ef:8c:b8:8d:
1c:41:64:8c:df:84:e6:91:c8:d7:b2:5a:c2:19:c0:
42:2e:e3:2f:e7:5f:9f:ae:6a:33:ce:f6:cc:38:d6:
8f:4a:91:f5:3d:cf:0f:e4:82:d9:46:9f:1a:7b:a4:
c3:46:ec:2a:c5:93:3c:87:6d:cb:aa:62:dc:1a:9d:
4b:fc:29:a6:7a:9b:6e:81:c0:fa:fa:fd:56:60:4d:
75:c6:0d:02:cb:af:3a:26:ed:c0:e8:de:fe:f2:67:
dd:02:42:c0:65:f5:aa:e0:4c:33:2d:86:59:10:74:
ea:b5:a8:23:7b:6c:59:c9:d0:71:b5:cc:82:65:58:
eb:bb:96:4a:ea:e7:2b:62:64:ff:2e:c3:72:39:6d:
e8:10:17:a8:b4:d6:71:1d:30:da:da:94:e2:95:17:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:38:7F:67:F0:D2:4C:9C:FE:BE:90:7A:85:EC:FE:8E:0D:A5:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f8da808f-47b5-34dd-b483-f75e9c99551c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
X509v3 Authority Key Identifier:
keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
sbgp-ipAddrBlock: critical
IPv4:
66.37.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:f3:0a:45:9f:c7:a0:b7:d6:73:be:54:ce:58:0b:70:02:ac:
e2:db:1b:3d:54:4c:dd:33:7c:80:c5:f3:d4:b8:1d:d5:4e:68:
a3:16:e1:a9:39:42:e9:81:e7:12:a4:b7:ac:71:06:59:a4:55:
ba:14:5c:11:a6:53:cd:73:c0:19:18:90:71:3a:9d:1b:2f:fc:
51:e3:f6:cc:39:34:09:e4:6c:53:87:d6:23:c1:93:d5:bf:07:
4e:da:f1:44:80:38:45:57:2c:28:4b:bb:f4:98:e3:18:f8:9f:
aa:89:10:4a:90:0e:de:c2:18:1a:84:62:02:3e:82:06:25:f0:
f7:14:64:05:45:4f:f8:1b:97:5c:ff:c1:5b:e7:12:31:cd:d3:
f7:5d:20:fa:df:6c:32:7a:07:d9:bd:1e:6d:69:29:2c:58:b9:
c9:9c:61:b2:39:55:66:5a:24:bc:75:58:1b:91:8e:a9:33:56:
c5:2c:50:a7:5c:ed:40:70:e6:a3:e0:1b:bb:df:f9:9d:70:43:
5c:a1:df:38:a2:a6:9f:7a:58:be:bb:83:3b:ee:96:fa:a7:0a:
71:32:5a:c1:99:a5:f6:49:66:4a:3f:8c:88:47:01:e9:5b:85:
57:66:f9:86:02:18:9c:5f:73:16:f0:5a:8c:f2:ea:31:bc:c4:
e3:f8:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:57 2025 by rpki-client