Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
File: 30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa (raw, json)
Hash identifier: iXooJcfk7vTA9h0l8JkfUYF2lK6GBybInl2EFXaxwbY=
Subject key identifier: E3:04:A5:55:5F:FB:96:44:53:0B:49:BF:BC:E9:D8:98:E4:F8:F8:D7
Certificate issuer: /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial: 010D0C9F4328584851A57602E1986D2AD5A5D680
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 33185
IP address blocks: 66.187.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:76:02:e1:98:6d:2a:d5:a5:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=7cebb1e7-74e8-4682-a527-5b2f77fdeaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:0f:13:21:ea:92:7b:9d:f2:42:17:ee:05:
53:fe:54:b7:b1:ed:15:fc:50:1b:18:7e:38:e9:6b:
e7:8c:1d:0b:30:d1:13:2c:0b:bd:26:97:4c:05:54:
10:0b:6f:dd:82:65:2c:31:b6:68:a5:b7:3c:06:36:
d7:b0:81:ad:9f:72:03:af:a5:7e:92:53:a1:65:dc:
a1:e4:4a:65:54:57:af:28:bc:11:91:03:8d:d7:dd:
86:dd:bd:60:9f:95:39:ec:6e:0c:a1:9f:a6:2f:1a:
23:61:4e:87:d5:6c:e0:4a:f2:9d:ad:ae:60:b8:c8:
1b:9f:f6:33:db:18:3d:22:24:6c:72:78:91:b4:cc:
c4:78:dd:07:77:75:fb:73:9b:c2:e1:8a:62:c9:8e:
07:69:c7:6e:ec:43:d6:5f:a2:5f:d3:42:4f:a3:28:
3c:df:fb:69:d9:2b:2f:70:0c:f8:2d:e4:d8:91:88:
09:e0:22:d7:d8:ca:8b:6e:d0:40:68:8b:b0:33:ef:
7b:01:83:e1:ba:54:99:47:eb:b4:5c:01:2b:b4:ee:
0d:3f:4d:aa:f7:91:b2:ff:ef:ca:6c:fb:39:3a:ab:
2f:6d:5a:e3:73:3d:67:6f:17:bf:04:b4:bb:be:f3:
20:55:b9:02:3d:0e:51:fa:8e:fd:c3:55:99:43:68:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:A5:55:5F:FB:96:44:53:0B:49:BF:BC:E9:D8:98:E4:F8:F8:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
X509v3 Authority Key Identifier:
keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
sbgp-ipAddrBlock: critical
IPv4:
66.187.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e2:62:47:1e:0d:e2:99:e9:43:0c:2b:e2:8f:53:82:0c:2a:83:
74:eb:d0:46:5d:d0:f2:33:72:59:71:3b:e3:10:fe:60:be:6c:
98:80:84:5d:5f:a1:e0:12:29:8d:f9:67:6f:5e:48:33:02:6a:
a5:55:bf:be:b7:15:30:62:46:f9:61:c9:64:53:64:d6:76:46:
8c:03:06:39:ef:95:ed:ec:32:d0:95:05:a0:ff:f0:86:73:9c:
6e:54:1b:af:c2:46:b4:62:34:be:3e:ca:bf:b2:4c:3a:3d:c1:
b7:54:28:25:28:ac:36:d8:ce:82:fe:02:1b:c0:0f:99:2b:fb:
5d:c6:4f:8e:32:7c:26:71:af:88:a8:a5:09:aa:40:c4:56:8d:
b7:14:b0:d0:30:88:69:1b:56:11:b1:99:1a:85:43:97:e4:f8:
8a:c8:e5:2c:f3:a4:90:8d:b4:c7:b2:8b:9e:63:b9:c8:33:7d:
11:f5:0a:86:fa:b4:54:59:d2:71:5f:fb:5e:b1:ea:fa:27:34:
65:f1:45:f6:0c:5d:d7:19:cf:62:a8:b1:b4:49:f3:e4:4e:b1:
c7:0d:29:e1:f7:e1:cf:48:94:cc:6e:88:c7:b4:18:58:97:cc:
cf:6a:a0:36:c0:93:3e:a7:7f:b4:59:34:00:d9:f1:65:43:c6:
dc:a8:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:38 2025 by rpki-client