Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1375f1a9-57ee-37a4-b36d-10c1b5a6da24.roa
File: 1375f1a9-57ee-37a4-b36d-10c1b5a6da24.roa (raw, json)
Hash identifier: Wty6Q7q0T7tG29L5/+crSf5Gznat/GQlh5lyxh22I8E=
Subject key identifier: 27:74:CC:3F:A3:20:06:E3:18:1A:61:C3:BA:F7:B8:32:A7:B9:F6:B4
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DBEBF0981F158B757628A900
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1375f1a9-57ee-37a4-b36d-10c1b5a6da24.roa
Signing time: Tue 12 Nov 2024 21:57:22 +0000
ROA not before: Tue 12 Nov 2024 21:57:22 +0000
ROA not after: Mon 10 Feb 2025 21:57:22 +0000
asID: 394437
IP address blocks: 66.249.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:eb:f0:98:1f:15:8b:75:76:28:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 21:57:22 2024 GMT
Not After : Feb 10 21:57:22 2025 GMT
Subject: CN=af3fac36-c269-4921-844a-74deedcc0f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:cb:44:55:25:c1:40:49:50:17:22:6f:1d:
af:80:fe:b9:b9:d3:4f:be:29:c2:5e:8f:54:10:36:
ba:3e:74:d4:91:22:5c:e2:35:72:cf:df:b1:a6:7d:
19:5b:c6:ee:b4:8a:ea:b6:4f:21:cd:ac:fa:9b:a8:
c9:e3:d5:35:56:1c:64:54:4f:06:9c:39:77:47:af:
fc:50:21:f6:5f:dd:17:53:4a:bb:ce:79:0a:27:6b:
ad:f0:fe:90:65:be:18:92:aa:39:38:92:5c:97:c6:
75:a2:3e:d7:f2:d0:f6:c8:ae:58:56:fb:3e:88:dc:
4d:85:e1:77:df:05:cf:2b:6c:f4:7d:92:f6:45:f9:
af:e5:c7:bb:ed:5b:1a:02:24:b5:8b:9a:b8:e1:2e:
6f:f7:0d:96:6d:65:dc:0b:3a:af:eb:d0:e5:ca:61:
53:b1:92:0d:77:c1:78:39:b7:0a:67:2c:52:a2:23:
f6:16:90:be:74:33:b5:56:fb:a5:95:db:28:2d:2f:
a4:4b:0b:15:7b:bd:b2:f8:35:d0:33:91:f5:e7:0e:
d4:cb:fc:47:62:47:a1:be:1f:26:3b:05:6a:40:10:
2e:dc:83:5c:36:a7:5f:6e:77:fd:b8:26:e0:81:80:
33:5f:cd:c8:9a:5f:6d:e6:0a:8b:df:fb:68:47:2f:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:CC:3F:A3:20:06:E3:18:1A:61:C3:BA:F7:B8:32:A7:B9:F6:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1375f1a9-57ee-37a4-b36d-10c1b5a6da24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:3a:75:2c:7c:5c:2e:94:4a:7e:14:fb:66:65:d6:d7:ae:50:
67:9f:38:ca:26:b4:da:7d:2f:f2:a3:47:8d:ca:e1:89:ed:dc:
75:bb:8e:ba:7e:ed:fa:53:d3:93:3c:7c:bd:cb:90:b1:4c:5d:
f2:60:d2:db:b6:c8:f9:11:f6:a4:4c:60:6f:9f:31:9f:1d:3f:
3f:83:80:bd:45:64:d8:56:ce:79:fb:38:f2:be:ca:58:db:1e:
b7:cd:51:45:e1:9a:53:4e:ad:40:65:18:57:76:e0:3f:63:b9:
7f:81:74:4b:60:c3:c3:38:7b:ea:72:e6:4a:ad:6d:74:6d:52:
ab:09:59:bc:65:4b:b5:c0:00:72:da:67:13:81:15:55:e9:a9:
39:ee:ea:fd:91:81:91:58:6a:4f:ee:4e:22:1d:99:0d:53:6d:
b5:d1:de:f5:56:91:d6:70:0b:03:6d:75:86:1b:b3:e2:43:42:
52:b5:31:a2:b6:77:06:99:31:85:d8:9f:9b:fe:bf:04:7b:09:
0c:40:26:87:82:b4:1c:c4:d2:9b:47:46:da:34:b1:ea:b1:db:
83:f2:bd:b3:92:ba:c8:58:d4:8d:39:10:ed:1d:3a:6b:0d:ee:
6c:14:ed:18:fe:cc:3c:12:54:fd:9a:77:d2:5b:6e:ec:70:a4:
0c:72:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:59:35 2025 by rpki-client