Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/afa1f093-5503-391c-a8f2-273dc3af519e.roa
File: afa1f093-5503-391c-a8f2-273dc3af519e.roa (raw, json)
Hash identifier: R+p3pazTFufMEZlaIiuYyNW0KeR6OL8ePngTos3fZL0=
Subject key identifier: 55:7E:09:69:E8:C7:34:88:DD:24:AB:36:1C:0D:62:4D:A2:F6:15:59
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DBE883223FC05326B2B65600
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/afa1f093-5503-391c-a8f2-273dc3af519e.roa
Signing time: Tue 12 Nov 2024 21:50:28 +0000
ROA not before: Tue 12 Nov 2024 21:50:28 +0000
ROA not after: Mon 10 Feb 2025 21:50:28 +0000
asID: 394437
IP address blocks: 66.60.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:e8:83:22:3f:c0:53:26:b2:b6:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 21:50:28 2024 GMT
Not After : Feb 10 21:50:28 2025 GMT
Subject: CN=c8d5c199-8152-423f-964b-a02af6eee97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:ef:31:97:0f:41:5f:57:b2:bc:d8:0c:c5:
26:3e:64:0a:1b:1d:fb:74:09:ef:84:ff:e9:89:27:
84:5d:83:be:9a:30:4d:4a:24:d8:30:0d:9b:e7:bf:
37:fa:1b:fd:02:91:3e:60:c5:27:62:fe:0e:65:eb:
24:00:66:c9:5b:f6:62:38:26:35:ce:b9:ff:1f:7c:
8c:9a:12:e8:41:ea:d9:00:d2:d9:2f:e9:06:9a:46:
07:de:a0:b6:6c:c4:3d:23:99:b0:a5:91:ff:e3:64:
58:e7:a3:75:42:dd:91:e3:94:12:ad:82:b3:f6:16:
ae:5d:51:83:7b:ea:81:59:30:44:c4:1a:dc:26:81:
56:fb:ec:7a:22:89:2a:7e:13:3b:9a:d0:85:2b:05:
c7:9f:1e:09:50:ba:b1:34:5a:e7:d5:46:13:47:0a:
c3:40:0c:9a:6b:c3:35:9f:41:f4:85:16:7b:3f:f5:
91:95:31:6c:67:e9:96:92:e1:2b:d0:b7:2f:f4:a4:
4b:da:dd:d7:6d:ad:9b:2e:4d:ac:ad:e2:2a:8e:79:
70:8f:9c:31:35:7f:73:7e:29:a0:73:35:48:41:7e:
e1:0e:18:84:2d:b9:b9:78:dd:50:62:e8:c9:16:74:
03:02:26:ef:39:9d:0b:4b:2a:ab:a8:c7:8f:fa:ac:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:09:69:E8:C7:34:88:DD:24:AB:36:1C:0D:62:4D:A2:F6:15:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/afa1f093-5503-391c-a8f2-273dc3af519e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.60.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:8e:47:e4:ab:5a:eb:af:3d:f5:67:14:f0:71:17:ca:a7:87:
28:fa:67:64:41:83:87:17:23:a5:4c:06:d5:87:b6:49:32:67:
47:5c:b1:27:c6:46:ab:bb:d9:c2:e0:8c:f7:25:78:94:39:51:
49:43:12:8a:fe:fc:c8:85:07:d3:e0:24:4f:78:8b:8c:7a:71:
14:0f:d4:f4:86:77:87:a2:8f:10:18:84:0b:43:7d:23:a2:19:
8f:42:c9:48:b0:6e:f2:98:8c:19:cc:0d:f1:2c:9c:c4:3c:1f:
8d:9d:f2:a0:f1:87:b1:7d:41:20:81:96:52:db:d2:b9:a7:83:
79:75:4f:e8:9a:3c:4b:78:30:a5:3c:6b:a7:e4:01:9f:fe:ed:
03:5e:5f:69:11:91:ec:63:e6:4a:f7:7d:c2:f8:35:53:d9:95:
c4:5f:e8:42:99:09:32:0b:56:1f:c9:41:0f:4e:ac:24:bb:42:
37:8d:06:77:1a:3c:11:9c:28:e5:70:ca:e7:8f:21:39:45:a1:
a9:9a:11:3f:6e:8c:23:b2:5b:92:42:31:78:cf:7b:24:3c:ff:
de:1b:55:2c:31:41:29:74:d1:f3:c0:4a:3d:67:c2:47:0b:1e:
96:fd:47:d4:13:90:4c:ce:4a:c6:a8:01:36:e6:fa:28:a8:19:
0d:0a:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:29 2025 by rpki-client