Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/df4aa3f2-8050-3462-82bb-4eba1152bc33.roa
File: df4aa3f2-8050-3462-82bb-4eba1152bc33.roa (raw, json)
Hash identifier: 7c83igozR77hqSkfTLaqmPBE6I1aRfMe9ctHw/eQKJE=
Subject key identifier: 22:DC:0B:AA:7B:2B:93:9C:83:D3:DA:FE:67:AE:77:0D:BB:59:29:86
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F4328584827C54B17EF030608C214C980
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/df4aa3f2-8050-3462-82bb-4eba1152bc33.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 66.178.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:4b:17:ef:03:06:08:c2:14:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=7f80f354-72a0-44df-9f2e-da6a0922d169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:70:2f:3e:db:43:8d:bf:41:44:1c:1c:d9:
42:87:d5:4a:2b:bd:3c:59:6b:56:e5:1b:91:3d:58:
25:0d:98:92:20:95:b1:5c:ee:63:26:59:2c:dc:2e:
c6:d4:76:a1:3b:ff:b8:45:dc:c5:f7:7b:a9:9d:c0:
1f:c6:ef:05:b9:0b:36:b9:54:a8:ef:23:69:54:75:
69:62:44:7a:24:41:b4:bf:4a:0e:61:20:7b:cc:53:
94:02:0c:fc:ef:54:30:05:65:ba:4b:46:a0:2b:c9:
67:92:66:ef:a8:44:7c:92:b0:9b:35:85:eb:95:d4:
d4:b7:3f:28:64:5e:12:b1:49:b2:81:b0:4e:fb:62:
e5:aa:17:b5:88:ef:4c:a3:28:77:4f:60:db:10:c6:
c3:a2:ac:37:a6:16:64:d4:1d:2d:58:d7:3f:19:7c:
4f:37:db:66:bb:44:d5:47:ad:24:3a:29:f9:5a:64:
12:8b:ff:3c:a4:a9:bb:87:84:04:eb:53:94:01:f0:
3a:76:0d:25:7c:50:59:44:ff:d3:ac:28:f8:56:0a:
22:68:49:ce:68:fd:87:ee:fb:6d:cf:d9:cc:c1:3f:
1a:7a:7d:65:69:fd:ab:65:da:c2:f6:45:76:b9:0c:
ab:7e:41:cc:2d:aa:80:d9:5e:9e:eb:d0:37:b2:0a:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:0B:AA:7B:2B:93:9C:83:D3:DA:FE:67:AE:77:0D:BB:59:29:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/df4aa3f2-8050-3462-82bb-4eba1152bc33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:60:8f:a3:cf:9a:1d:98:ca:30:77:d5:1f:28:ae:68:13:37:
db:3a:b0:e0:ce:3e:f6:f3:89:30:02:8f:49:32:7e:42:94:f2:
4d:bc:91:c0:2b:7c:80:fe:cd:07:d5:31:01:61:bc:a6:43:b6:
50:8b:5e:6d:df:c4:0a:3c:f5:e5:be:f1:67:4c:8f:aa:56:6f:
c1:60:b9:dc:86:b9:13:e4:be:f7:36:10:f7:1b:3f:46:8d:ef:
41:dd:15:ed:70:bd:23:c9:37:22:ce:3f:bf:79:d6:01:db:14:
4e:0f:4a:e0:4b:2c:cf:49:d0:71:da:62:87:7a:fa:9a:d7:e0:
15:ed:a4:66:8b:06:0b:ea:af:20:7e:21:f4:37:30:a2:56:85:
8c:38:b9:8b:d9:6c:b6:32:1a:47:71:eb:46:c0:4a:28:04:72:
07:d1:29:18:61:96:70:d3:30:7d:e9:c1:2e:a4:e1:76:2a:d6:
6f:05:05:0d:6a:e1:9b:bd:f2:ba:2b:9e:c3:68:b7:7f:53:bb:
88:1c:e2:1c:a5:03:a3:53:df:cd:e8:97:05:06:11:ac:28:03:
c6:35:78:50:99:7f:46:a9:8b:da:18:18:d5:b7:59:3c:bd:2f:
81:19:fa:f9:61:36:bd:ef:57:76:84:c2:98:84:60:43:f8:ea:
37:e6:fa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:29 2025 by rpki-client