Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa
File: cfe1da32-8410-369b-8311-ea32b3bd8657.roa (raw, json)
Hash identifier: UtTY2RyoyIvSrpUAuhRmYu+isrLpFSnxjQtW/hyP0Rc=
Subject key identifier: F0:9E:D3:EE:61:8B:81:0E:CF:2E:D2:B3:D7:34:7F:72:95:02:B2:0F
Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial: 010D0C9F432858488DAB463DF4E9935E40817280
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 559
IP address blocks: 66.180.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:46:3d:f4:e9:93:5e:40:81:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=94339c0d-1207-4ebe-9f2f-1b0ad8a85f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:89:83:b8:05:9f:61:7b:8a:34:9a:13:e7:
91:f0:4e:57:20:43:0f:a3:0e:f6:f0:cd:c4:2c:98:
79:ed:33:62:0f:38:0a:10:37:f9:6e:a2:6a:bd:61:
72:94:bc:6a:67:6c:1b:63:e0:cf:e6:a4:c2:dd:fe:
51:49:6f:d4:29:8f:64:35:b2:65:49:60:22:78:81:
42:93:41:13:46:3b:0d:ec:de:69:da:d1:63:0c:f3:
ca:72:c1:fd:69:f4:91:a3:74:b2:4b:f6:50:3a:4b:
ce:1d:bb:09:0b:63:66:7a:ec:41:32:02:7b:74:36:
1a:73:fb:7a:b2:ff:ed:b9:42:14:4f:60:dc:e8:4a:
35:40:79:a7:d2:38:01:13:05:5e:4c:dc:41:7e:1b:
48:86:d2:b5:f3:b8:34:5a:1e:d0:ff:b9:f0:19:1b:
ea:ce:32:0c:fb:fe:9e:62:95:5e:c4:5c:a2:67:af:
2d:15:4d:3b:0d:dd:71:83:ae:54:d8:dd:7d:25:f9:
fc:ef:c8:5a:33:50:24:5a:28:0a:ab:3d:62:c2:d3:
e9:89:c4:5f:cc:a3:7b:1e:df:55:46:4e:d1:c4:f0:
62:03:e1:0d:fa:5e:af:77:57:d5:e2:3c:4f:e2:32:
59:55:e4:6c:af:a1:ef:c1:4e:7c:57:21:62:60:bc:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9E:D3:EE:61:8B:81:0E:CF:2E:D2:B3:D7:34:7F:72:95:02:B2:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
X509v3 Authority Key Identifier:
keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
sbgp-ipAddrBlock: critical
IPv4:
66.180.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d9:3a:74:04:a0:e3:aa:e4:39:a2:ba:1f:44:0c:85:29:21:
1c:80:4f:77:11:29:e6:f7:bf:21:fe:8c:90:49:f7:40:39:65:
d0:01:31:2f:52:bc:e8:92:6e:06:62:75:28:42:21:28:fe:4a:
d5:8f:a1:45:c4:f3:24:da:4b:03:32:27:af:50:3c:04:b9:99:
f7:0b:71:d0:77:d2:dc:95:be:24:41:78:94:ee:30:02:d0:72:
c1:1c:33:db:56:34:47:2d:d1:f3:39:cc:b2:30:77:75:00:00:
30:28:a1:69:1a:6b:97:c9:55:e7:0b:2a:b4:0d:e6:1d:64:03:
40:dc:d8:5c:06:bd:ca:33:4b:71:d7:04:3e:04:3b:dc:5a:95:
a4:0d:f1:b5:73:d2:fb:84:fd:0c:b9:a1:85:b7:35:48:85:0a:
31:06:44:80:fb:70:77:d2:29:95:18:9e:99:66:27:9d:cc:49:
63:a6:83:bc:4c:c0:a1:34:b4:be:63:88:91:61:09:0f:61:f0:
ae:63:eb:5f:2d:e1:36:a1:f9:a7:ef:63:95:07:56:72:24:0c:
41:24:26:c3:60:e1:f2:15:30:65:3a:14:0b:63:59:be:3a:54:
0a:e9:2a:db:ad:d2:93:1d:c8:9a:bc:da:ca:01:fa:c0:28:65:
f3:20:02:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:39 2025 by rpki-client