Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/ac3fbad4-d9a1-3456-9dc4-a168763f9c77.roa
File: ac3fbad4-d9a1-3456-9dc4-a168763f9c77.roa (raw, json)
Hash identifier: SHr0YU0ZTDhgPoiw9pc91nnpmADpBaXa/FxdFM/o5yY=
Subject key identifier: C4:DB:A4:2E:94:1A:3C:79:34:56:88:75:08:0A:93:48:30:00:1B:F3
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F4328584827C54AFA9E436C7DF4E15C00
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/ac3fbad4-d9a1-3456-9dc4-a168763f9c77.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 66.178.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:4a:fa:9e:43:6c:7d:f4:e1:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=c7a111f8-64a2-4575-9d45-ef571e1845b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:fb:06:43:6c:7e:bc:e2:c8:a9:d0:97:ee:
2c:6a:77:c6:ff:8c:c5:1b:c6:70:f7:cd:64:1e:44:
3c:65:b7:d2:2d:8a:0e:fa:02:ed:5d:07:83:f3:d5:
7c:55:1d:ac:a4:34:99:b4:40:33:60:31:94:1d:e7:
ca:da:e2:f7:24:9a:4d:de:89:00:3b:1a:73:69:a8:
f8:65:97:ab:53:d5:bd:4d:82:e3:9a:67:36:56:c4:
34:20:f4:35:31:41:1e:59:b8:af:c9:6d:26:90:f5:
89:7c:ba:24:6b:c9:ef:4b:2f:97:9c:99:e7:44:95:
17:c1:f4:d7:58:e7:bb:e3:1e:18:7f:af:a7:f2:7a:
a6:c6:77:d3:4b:f8:c9:c3:45:f6:7e:2c:db:95:7c:
a7:2d:73:d7:37:7a:0d:63:df:37:dd:bf:90:fe:b9:
2f:e3:c6:7f:16:15:28:58:8c:93:4e:d1:f3:76:20:
16:c4:1e:d5:0f:58:74:89:ee:aa:c0:3c:ce:31:95:
f2:33:53:8e:9d:fa:0f:79:7d:19:9f:b6:53:c4:90:
78:3f:67:6c:cb:46:37:e1:59:bf:4c:e7:27:5f:be:
1a:4f:f4:ec:97:f7:6a:90:22:45:b2:c7:3c:ee:ff:
58:2f:d6:c3:69:ca:55:10:72:28:81:51:b1:d6:ef:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DB:A4:2E:94:1A:3C:79:34:56:88:75:08:0A:93:48:30:00:1B:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/ac3fbad4-d9a1-3456-9dc4-a168763f9c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:46:1f:96:1b:36:fc:e3:92:9f:18:86:8d:ad:71:58:90:99:
ac:e7:e0:88:3c:10:5e:b1:78:aa:b0:d0:96:63:3e:38:c7:48:
25:4d:f8:c6:d2:c3:43:de:73:e1:79:7e:bf:10:d9:b0:98:cc:
01:6b:45:86:14:80:c3:2e:91:b8:ce:e9:b5:74:16:f9:f9:ad:
cb:07:27:c7:e0:3a:ba:0b:ff:d1:0b:bc:34:3f:07:08:af:96:
69:72:56:e8:44:62:4d:8f:9d:50:43:9d:05:18:bc:55:37:1f:
07:c3:07:74:4d:4c:2a:73:1d:fa:fe:3d:2e:81:71:18:ed:09:
5d:26:9f:df:31:b1:8e:98:d2:4e:54:bd:4a:62:d8:2c:aa:97:
b3:fe:de:f2:d2:f9:a5:e5:64:87:1b:bd:f7:d5:ab:83:44:38:
15:d7:58:cf:54:29:15:4d:bd:3f:d9:6e:7b:c9:0c:19:cc:68:
8d:5e:21:27:eb:cb:58:90:d6:59:4b:e2:d8:73:94:ba:2b:a4:
56:87:2c:30:d8:53:cb:0b:5a:26:16:92:52:7f:cc:76:a3:4e:
5f:aa:9e:14:dd:99:01:46:3e:01:74:93:9d:b1:31:88:c1:01:
b2:69:ca:06:7b:26:74:9d:7f:36:23:26:58:4d:42:96:87:52:
d0:b7:c8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:34 2025 by rpki-client