Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa
File: d8781f8b-bea3-3cce-88ff-84fa5117d863.roa (raw, json)
Hash identifier: 0xZjm/O9kLN0+oh8nfKozh5nqvPydkCxjTIIeyzCvXE=
Subject key identifier: 53:93:73:74:AB:69:0F:8B:76:2A:37:F6:84:96:92:28:C3:77:D7:E0
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F4328584827C54B28287C85047DDDADC0
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 66.178.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:4b:28:28:7c:85:04:7d:dd:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=d3e40033-7faf-4a6e-8696-721ee6c6b870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:93:48:d1:22:aa:af:58:88:48:7f:03:ba:
6c:b1:15:9a:84:fd:c6:71:2c:70:14:bd:5e:c4:63:
74:17:6e:27:54:db:bb:59:fd:21:4a:97:fa:d1:65:
7b:e5:ce:a0:d3:c6:d8:a0:ff:dc:42:17:26:87:26:
d9:f1:cd:47:cf:90:67:93:f1:af:be:a4:27:3c:61:
9a:54:3c:66:13:b1:43:d6:fb:e8:69:ff:a3:de:bc:
56:02:5e:9f:cb:0e:2e:85:26:0b:2f:15:b1:cb:1a:
8c:61:f2:16:60:cd:96:a6:e9:ab:a2:00:05:56:da:
76:36:a5:18:81:cc:2b:09:27:98:d9:a5:84:8c:12:
54:b1:2c:73:45:52:24:d4:93:05:70:07:dc:72:06:
51:5e:36:d1:81:d3:e5:f6:02:14:b9:4f:d1:f7:3f:
35:b1:d6:4e:e6:41:e8:ea:24:75:2b:d8:7b:d1:f8:
12:e3:5a:be:78:b3:1b:14:d3:63:d1:67:a3:31:ab:
49:b4:af:0d:e1:a8:9c:0e:6d:19:bc:49:56:af:7d:
63:cc:8a:ef:d1:b7:5c:70:d5:98:8f:41:81:40:2a:
39:9b:ee:db:bf:db:55:6c:ee:11:c9:63:76:92:4f:
b4:63:66:94:97:9d:73:a5:2e:66:9f:40:1a:9c:42:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:93:73:74:AB:69:0F:8B:76:2A:37:F6:84:96:92:28:C3:77:D7:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:12:c9:9d:3e:3c:71:b6:9c:40:00:10:73:39:93:51:08:29:
d6:4f:6d:ec:23:27:1e:14:f1:ca:4d:75:ab:0f:31:12:b5:4f:
80:00:1b:53:a4:a0:d3:a1:ab:85:87:df:5f:dd:1a:29:3c:7a:
17:2d:8a:0a:0b:0b:5f:6f:a6:26:9d:69:66:87:9d:dc:1c:e3:
ec:77:ff:76:94:fa:d4:90:16:76:da:38:a4:04:9b:eb:fd:ba:
3b:95:f4:5b:65:2d:e5:f9:88:fa:76:e3:4e:f0:b5:6f:87:7f:
11:5d:6c:7f:af:3e:0a:da:b4:33:b0:20:ce:bf:54:e3:53:07:
8e:6c:eb:8a:d4:e5:aa:98:76:ba:e7:f8:09:c0:d8:58:bf:16:
27:08:12:2a:f9:8b:88:4c:a2:11:e1:d7:4f:c1:80:8e:46:5c:
e7:b3:a4:b3:05:bd:68:37:70:bc:30:a3:9b:fe:11:c0:b3:3f:
70:d0:de:36:14:63:62:66:0f:2c:61:aa:ee:e9:69:3e:70:9d:
bd:a0:18:46:67:0e:0b:3e:cd:e6:0d:bc:b6:de:11:70:e7:b6:
1e:9e:e8:4c:21:4b:ec:32:93:e4:fe:ee:26:cc:4b:03:e2:06:
70:40:a7:bf:e6:31:23:f0:a4:c3:b6:0d:73:cd:d5:f4:b3:d9:
c2:60:5b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:05 2025 by rpki-client