Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/38a1563f-ce8e-389b-9f2f-076aa60ec307.roa
File: 38a1563f-ce8e-389b-9f2f-076aa60ec307.roa (raw, json)
Hash identifier: uFrcDQRU8lg6Ap2c/m327qQiHZkxkbGV617hh4bMfd0=
Subject key identifier: 3B:AF:EE:A5:5F:78:F4:FB:17:86:93:B2:8D:92:76:94:6C:65:F8:57
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848143A6B5CC1B5EB16F136D400
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/38a1563f-ce8e-389b-9f2f-076aa60ec307.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 8560
IP address blocks: 66.179.248.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:6b:5c:c1:b5:eb:16:f1:36:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f71bc427-6d9d-4810-8d42-f5c22483bda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:90:06:05:ef:d4:b3:c7:f1:45:7d:ad:92:
cb:46:fe:45:d5:50:52:57:8d:a3:73:a6:8c:89:86:
f4:b1:94:c5:9e:ad:b7:41:b3:9e:50:94:8d:67:9a:
02:17:7b:d9:4a:40:e7:8a:01:2e:5d:81:e0:67:ff:
f6:ec:cf:7e:08:e1:67:bd:7a:24:73:8b:d4:5d:1a:
57:50:d3:b4:13:07:8f:63:f7:26:aa:e3:64:0f:84:
3d:22:94:aa:db:ce:fa:77:af:ac:47:dd:cf:2e:0d:
af:d2:59:e0:50:88:02:b4:a3:9a:d2:3e:38:6b:cc:
da:d6:e5:b6:4c:10:d9:61:86:0a:fa:3b:9a:f7:8d:
2c:1c:bd:1e:12:cb:bc:c0:e6:44:3b:39:a2:90:46:
10:8a:23:1a:7d:7e:f1:e1:48:fa:5b:b2:2f:2d:da:
89:16:e0:3c:ee:a1:98:d4:4a:bb:f7:e3:6e:2e:5d:
da:9b:f9:f4:55:99:fa:66:3c:35:6a:03:f0:13:2d:
f5:15:fb:cb:91:a0:6e:53:a3:21:ae:95:03:df:65:
06:ab:30:ca:fa:39:e3:4d:4f:61:51:29:54:0a:1c:
98:7f:d0:b2:16:b9:7d:cf:fe:ef:f4:27:98:02:36:
35:91:19:81:15:5f:56:a8:97:d8:6e:66:3b:59:5d:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AF:EE:A5:5F:78:F4:FB:17:86:93:B2:8D:92:76:94:6C:65:F8:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/38a1563f-ce8e-389b-9f2f-076aa60ec307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
66.179.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:4c:ba:83:1f:b5:15:af:43:64:79:93:9e:05:d5:cc:68:17:
53:77:0f:fb:fa:24:04:9d:3b:2c:37:c0:2d:aa:71:9d:f2:33:
1a:9d:16:a6:eb:0a:ce:1d:16:6d:62:3c:65:0f:29:01:a8:ad:
ad:e5:7b:0f:7d:e3:de:18:ab:c1:83:92:c0:6b:d5:f4:ec:57:
9d:49:97:0f:29:49:b1:c4:5a:ba:3a:51:52:49:31:5d:cc:ce:
a1:92:e9:d3:33:ae:f3:36:59:97:20:e4:88:00:5d:49:33:50:
bf:16:20:2d:74:cd:72:b9:cd:d9:f2:6e:91:82:f1:96:27:7e:
49:84:98:80:4a:f3:70:f5:cf:8a:fa:69:87:41:ad:1d:43:11:
e3:62:db:8c:07:1c:ca:4b:93:dd:26:70:bd:0b:b4:28:d0:0e:
a6:9d:79:56:f4:ed:8e:65:50:2b:3c:6d:c0:85:a4:b1:db:f0:
cd:21:24:95:fe:c7:0e:ac:e6:a5:8f:b1:2c:cf:ae:80:35:68:
b0:87:0a:84:72:7a:83:18:8f:43:e3:ac:34:df:e6:33:2f:77:
3f:83:b9:83:70:ac:b3:9c:d1:ef:90:77:ec:7f:1c:69:d3:fc:
a9:07:bb:bd:b5:5e:01:51:dc:9e:ef:89:a3:de:53:80:02:b8:
1a:d1:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:30:25 2025 by rpki-client