Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa
File: 0de08070-992e-334f-8090-a4c3a88677f1.roa (raw, json)
Hash identifier: dKwbDKGO6b7/Pc9XJvtj1kLV4ZjFk1HiK8XZlbl5+Oo=
Subject key identifier: 1C:A7:82:0C:EE:85:91:FF:7A:97:6D:06:8F:76:1D:88:24:99:AB:FF
Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial: 010D0C9F43285848100A83B1F2282047DE229C40
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 30148
IP address blocks: 66.248.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:83:b1:f2:28:20:47:de:22:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=6b362ef3-7977-4f53-8253-586a4b8b2bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:e6:b7:7c:26:d9:11:59:bd:55:40:45:77:
e3:6e:78:ba:df:24:8b:96:a1:91:43:07:24:e6:30:
27:7c:37:ef:16:23:74:f7:03:b6:a4:30:73:df:bf:
89:fc:cb:c7:82:8c:d3:69:c4:ca:68:eb:86:67:f1:
ca:54:8a:cb:f3:12:fb:00:5f:29:52:57:07:09:82:
d0:24:a0:1d:01:4d:ad:7d:93:66:db:c9:75:5d:43:
13:d2:d6:93:b7:e4:bb:a4:53:58:65:52:a9:da:1d:
d2:5c:23:9f:ab:5c:c9:f7:7a:76:8f:d1:55:ea:a4:
66:c4:89:3f:d8:85:d8:cb:a0:33:97:c7:39:7e:81:
10:bf:56:76:25:99:79:98:99:14:0a:aa:26:c5:64:
60:b5:01:98:ef:cc:39:1a:64:a0:4d:36:42:d7:76:
01:98:d9:a1:8e:fb:c5:98:c8:bd:f2:14:00:be:ff:
c2:3a:55:55:1a:69:25:d3:67:b2:0d:ec:1b:3e:95:
f8:f6:dd:5a:92:d2:39:e9:25:4c:70:88:4f:cb:ea:
12:01:b2:2e:ef:07:e7:ed:b3:7c:77:46:a1:29:11:
5e:02:4b:8a:fa:75:74:c9:1e:4c:8d:51:f6:42:44:
b5:fc:cc:17:b8:6a:4d:3e:c5:74:c2:00:fe:5e:6b:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:82:0C:EE:85:91:FF:7A:97:6D:06:8F:76:1D:88:24:99:AB:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
X509v3 Authority Key Identifier:
keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
sbgp-ipAddrBlock: critical
IPv4:
66.248.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:70:0c:62:f2:fb:63:94:9b:7a:70:63:66:3c:a9:33:84:53:
d3:ce:ec:2d:6c:1e:12:91:6f:01:61:cc:56:4d:99:bf:aa:bd:
0d:3c:af:3c:cd:9a:89:17:24:37:bb:d9:79:15:97:97:7c:08:
66:63:af:c4:28:d0:42:58:0e:e4:2b:d1:8d:f5:b2:f1:e5:da:
73:c0:2f:d3:c5:f9:03:c5:4c:40:ca:3d:e5:03:a5:25:33:56:
47:07:84:9d:bf:b0:9d:07:bc:46:c3:79:40:71:19:98:1d:ee:
3a:e3:1c:a4:69:11:5d:77:ce:e0:8f:64:c4:89:a0:76:f8:9e:
44:07:db:d9:02:85:94:b0:ca:4f:f7:fe:04:27:f5:4d:d9:83:
7b:d9:b3:65:10:4c:3b:2b:d9:bd:8b:91:ca:0e:41:6d:d0:97:
96:92:ef:83:87:e2:b6:51:c8:a4:aa:99:b8:c0:36:ed:12:84:
e5:e6:6f:0b:a7:c7:f5:e5:0b:c3:7f:65:7d:83:b1:74:a7:aa:
8e:46:a1:ac:a9:57:70:39:ae:6e:51:c9:69:ae:72:c3:5a:a5:
2a:9a:3d:02:3d:f7:28:a1:f1:52:5b:7f:7a:15:69:ca:94:e5:
34:84:3f:67:16:b2:5a:75:c5:e0:b6:47:6f:da:23:a4:92:10:
48:31:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:14 2025 by rpki-client