Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a61ac961-5ff2-3cfb-a919-e0928d53be63.roa
File: a61ac961-5ff2-3cfb-a919-e0928d53be63.roa (raw, json)
Hash identifier: EpseGcIehcj0zJ+q8Fq855Auh2gWNZPUbUPACmiq6Z0=
Subject key identifier: E9:24:04:9A:16:C3:51:6C:E0:94:33:A8:80:DD:9A:08:AD:A9:58:F3
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858486C58CEF11DE78044E2E10C00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a61ac961-5ff2-3cfb-a919-e0928d53be63.roa
Signing time: Fri 03 Jan 2025 15:33:08 +0000
ROA not before: Fri 03 Jan 2025 15:33:08 +0000
ROA not after: Thu 03 Apr 2025 14:33:08 +0000
asID: 394437
IP address blocks: 66.249.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:58:ce:f1:1d:e7:80:44:e2:e1:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Jan 3 15:33:08 2025 GMT
Not After : Apr 3 14:33:08 2025 GMT
Subject: CN=717f77cb-1037-48ab-8d17-20b10be28301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:d5:cf:f1:1a:a0:02:0a:04:c5:13:11:cb:
b1:81:2c:d1:c2:68:80:9e:b7:cb:b8:cf:4a:d8:30:
13:c5:60:72:fc:be:79:3c:62:2e:f1:19:58:db:7d:
1a:f4:5e:13:84:ab:6d:1d:84:da:a5:89:08:a7:3f:
12:ad:65:d8:81:eb:7c:14:db:ac:ee:58:4c:2b:fc:
0a:ac:1e:03:00:9c:f5:60:63:c2:3f:3d:93:43:e4:
4e:a3:85:6e:cf:08:52:66:be:8c:c4:78:f6:40:3f:
31:ed:e8:90:64:b8:d6:8c:f7:e5:a2:cb:19:b1:f6:
b5:d7:56:a5:c3:59:d9:6b:a3:41:09:4b:1e:c2:0a:
40:fc:a7:e6:56:2b:67:f3:28:61:c7:48:0d:44:99:
a9:c3:ae:85:36:af:b6:49:53:0d:f8:cd:16:a5:53:
87:72:5c:88:6b:5d:09:4a:da:59:41:6e:4c:b9:37:
8b:e4:ed:48:27:e2:83:3c:47:f1:e0:6e:3a:74:c8:
87:24:95:d9:12:3b:4a:f6:e8:0e:97:2f:65:9b:9f:
fb:6b:71:76:19:b9:af:ad:13:31:61:2b:94:f3:2d:
3f:67:16:7b:b6:2c:21:42:db:2f:8d:e1:d1:5b:22:
24:fb:21:4a:fc:09:31:2b:35:2a:92:ab:51:67:c9:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:04:9A:16:C3:51:6C:E0:94:33:A8:80:DD:9A:08:AD:A9:58:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a61ac961-5ff2-3cfb-a919-e0928d53be63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:93:4c:da:7d:80:95:2a:e3:13:1f:fd:90:82:d7:ee:1a:e8:
91:ff:21:c5:9a:48:4d:2f:bd:de:20:96:6d:72:9f:28:a1:cd:
5e:a5:0f:8d:2d:e4:5c:4b:60:aa:86:ef:57:89:0f:42:66:43:
d5:b0:61:38:d1:92:78:25:e8:52:52:a7:5a:90:02:af:a9:86:
34:2a:47:d5:63:e1:67:8b:1d:2e:ae:cc:39:f2:c3:da:3a:60:
24:40:91:07:cb:b7:b8:ae:9b:a5:d2:57:14:93:3f:76:68:b7:
14:48:d3:32:48:a1:b2:65:9f:68:fb:21:13:d7:d4:52:a9:d7:
9d:e6:49:c2:77:7c:c8:34:fa:0a:4c:6e:8a:22:15:7c:bd:b8:
55:1c:5c:4f:63:9d:00:07:6a:c1:0f:ec:c5:59:9c:06:e7:bb:
bb:33:72:64:58:9f:4c:29:ec:d9:13:62:55:9f:e1:57:25:c8:
35:93:2e:35:d5:ec:59:55:83:a7:02:4e:11:e9:08:3d:3d:d9:
c6:02:ae:23:4c:23:c5:f2:1b:d4:01:bd:2c:c7:bc:00:91:32:
08:79:dc:9c:7e:c7:9a:79:f3:e2:f4:17:eb:02:f7:b5:cd:f4:
2f:5b:59:0c:4d:fd:56:a1:ac:38:6f:32:34:48:0d:2f:87:9e:
8e:6e:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:02 2025 by rpki-client