Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa
File: 1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa (raw, json)
Hash identifier: BToln9uFbSBAxS55zcTaFspawzFCdPumi7hpmZzzi6M=
Subject key identifier: 8B:ED:33:1B:F4:E0:1C:83:BB:66:97:9F:96:F8:90:04:DB:B1:9C:10
Certificate issuer: /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial: 010D0C9F432858487CEB24499401A01780B55B00
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 198949
IP address blocks: 66.22.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:24:49:94:01:a0:17:80:b5:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=9fa3fb9d-462e-4956-9533-62df4a14b09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:bd:bc:f9:f3:6c:34:3b:6d:ac:79:0b:28:
b1:32:56:5c:33:d2:17:d5:87:8c:ca:d7:fc:70:64:
35:ad:e4:f1:79:7a:f0:d0:86:23:c2:ae:3c:7e:a5:
a1:30:a6:8b:65:ea:8f:74:b5:48:57:3f:9d:12:ec:
f0:75:3d:77:28:e7:21:8f:e0:83:3c:94:37:04:dd:
1b:f9:79:4a:21:04:f0:ca:7c:bf:3b:b8:6a:d9:75:
6f:fb:a6:38:dc:d6:62:98:6d:6c:e5:bb:41:85:a3:
1d:8e:24:bc:55:9d:36:f6:2a:f0:c4:5e:34:66:ad:
78:6b:76:78:23:d7:20:b8:5f:9c:48:ab:62:1b:ea:
7c:e9:c5:3b:c2:f5:1a:5c:fa:5d:0c:d0:e4:6f:00:
e3:cd:6c:1b:86:b2:4b:32:62:f1:65:f0:94:e6:79:
46:60:34:2b:04:9f:1f:eb:9f:9d:1f:e0:c6:bc:f6:
42:cd:52:57:51:90:77:ab:4c:56:52:2b:41:32:f9:
df:21:2f:df:e9:44:bf:02:f5:d8:2a:c7:be:36:ce:
4f:df:db:c3:2f:f4:0a:5d:1d:6f:ad:8c:63:d6:c8:
f5:1c:cb:71:5c:b5:37:fe:b6:2e:0b:df:21:14:3b:
84:31:6f:12:b9:fd:0c:1c:c7:2a:fe:bc:fc:e7:dc:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:ED:33:1B:F4:E0:1C:83:BB:66:97:9F:96:F8:90:04:DB:B1:9C:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
X509v3 Authority Key Identifier:
keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
sbgp-ipAddrBlock: critical
IPv4:
66.22.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:01:07:cf:b4:03:a5:c4:f1:f7:c1:47:16:52:5f:e0:b4:ce:
77:20:ed:5c:50:d7:80:61:58:eb:2d:85:5e:6f:f8:84:d8:95:
0a:79:cd:7d:ca:04:27:99:13:1f:68:79:ad:01:99:8d:a1:6b:
89:56:aa:6c:8b:f9:3f:c2:90:90:74:b5:21:08:ab:51:3f:66:
c2:21:8d:18:70:cc:10:a5:c7:49:f3:7e:b9:10:b7:19:3b:f4:
1d:bf:da:7f:6c:63:66:b3:42:ed:f9:57:09:a4:d8:48:29:69:
de:22:89:4b:5f:1c:e4:a5:81:ef:cd:45:2b:53:a4:76:64:95:
c7:90:a2:d6:4f:96:05:4f:68:5c:16:f8:5f:35:bb:6c:1d:bc:
2c:aa:ea:ce:b5:14:95:9f:2f:aa:c0:d3:0a:9e:9c:a5:1c:f3:
d5:aa:ad:e5:5f:21:c6:8e:ab:ab:49:b5:75:34:70:7c:2a:65:
d1:26:0c:e1:8a:68:f8:83:fe:11:5c:1b:0a:a8:b9:71:1f:cc:
3d:da:63:d5:36:56:ee:68:cd:7b:2e:d3:be:83:23:d0:5a:02:
50:b5:7d:cc:99:c2:32:e2:67:25:27:0d:b6:06:25:c0:71:aa:
b6:a1:72:52:d8:51:af:86:fe:8e:97:a9:11:d8:0d:5d:37:6e:
d3:ae:d2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:19 2025 by rpki-client