Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/9ebc6e19-6898-3425-96e8-436375d49903.roa
File: 9ebc6e19-6898-3425-96e8-436375d49903.roa (raw, json)
Hash identifier: zjtY9gOCZyvH6uGwszZ4fpypVNwD51kbX1PlTR+yrWM=
Subject key identifier: 34:34:76:12:C0:6F:6A:2B:C6:44:90:6C:8E:E4:BC:97:70:0E:45:95
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F432858482D5A8F802C23F8BDF8C9DE00
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/9ebc6e19-6898-3425-96e8-436375d49903.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 23408
IP address blocks: 66.178.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8f:80:2c:23:f8:bd:f8:c9:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=f42e1945-6d9c-4cd4-b5a2-f5ecd10442e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:12:b0:c0:3a:5f:88:54:5b:68:9b:ca:3f:
43:d7:64:ff:51:9c:c9:28:67:08:19:7e:d4:44:dc:
68:c0:28:8a:1e:18:28:8f:91:98:14:55:26:f3:56:
9a:d6:24:af:c2:de:d1:29:aa:74:9a:9d:4f:61:00:
c5:bd:f1:a5:6f:a6:1f:0d:37:2b:78:1c:82:cf:8c:
23:bf:85:0e:07:cd:50:d4:08:4e:5f:8c:08:57:61:
f6:7a:04:3b:8a:d7:89:fc:72:f0:3b:76:87:fe:15:
ab:0f:0d:d6:bb:4b:db:a7:73:58:fa:db:87:ab:23:
e2:fe:35:ce:9f:70:69:a8:a7:70:f9:43:04:67:9c:
2a:f4:bd:e1:1c:78:b2:19:40:a7:d2:a7:ee:96:1b:
0b:92:b1:53:76:3c:a9:c7:31:4b:e3:1e:8e:d7:fa:
25:fd:2c:e4:a2:c8:5d:a8:11:ed:8e:46:b3:8d:ca:
c3:13:cd:a4:4e:49:63:23:c8:60:03:15:d9:de:54:
0e:da:1d:d3:57:e3:f2:a0:f5:1a:f7:b3:b8:ca:9d:
a5:c7:15:0d:4f:5e:bc:ee:ea:a9:6f:df:2d:f5:55:
07:5c:40:b3:ce:c7:25:97:08:a4:3a:fc:db:38:9a:
23:f9:ac:e2:1d:f5:bc:ed:20:cf:b4:2a:e2:8b:65:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:34:76:12:C0:6F:6A:2B:C6:44:90:6C:8E:E4:BC:97:70:0E:45:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/9ebc6e19-6898-3425-96e8-436375d49903.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:0c:55:60:13:0c:d5:5d:0d:64:f7:1e:fb:40:f8:04:f3:67:
73:24:2c:ef:de:e9:0a:15:5d:2d:6e:68:f8:58:bf:85:bc:68:
4a:73:e0:c5:53:59:18:24:f1:cb:0c:bb:4f:f8:f8:96:95:2a:
8f:46:37:89:05:58:9a:5a:79:8d:f3:48:78:11:00:c4:c8:1f:
07:ef:bf:76:e4:b0:e0:fe:a7:ca:a9:c8:9c:32:bf:23:ea:fe:
bc:55:f2:81:9b:8c:9a:02:a6:73:6d:94:20:47:11:20:ea:78:
90:eb:39:76:ce:44:c1:14:3b:b3:16:ae:ec:54:9f:bc:70:7b:
5a:13:c3:4c:21:f7:fe:b5:28:c5:3a:48:ec:41:be:5c:bc:53:
49:ec:c8:ec:fe:e5:cf:35:6b:c2:8d:c2:56:ea:e8:a1:5b:78:
11:18:d3:b4:df:76:72:03:4d:2f:2b:df:38:2b:b4:53:c0:ad:
02:90:48:75:a4:9d:b1:2b:80:fd:63:4b:3c:44:4a:c2:c3:91:
7b:a6:9e:9f:3f:d9:4b:18:8b:3c:5a:3d:66:e0:cf:90:47:3d:
ca:b4:fa:b4:cc:24:1e:40:79:2b:92:02:d6:f3:70:3b:d7:ae:
b4:b6:a3:d3:8c:dd:3e:94:8e:9f:c6:94:00:a5:75:2e:56:86:
1f:c3:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:36 2025 by rpki-client