Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
File: ba243f99-0c02-3caf-abae-a7672e161f0a.roa (raw, json)
Hash identifier: JSNH5XjTJ0hNSf/bctQPkvQRxPMDstNWa4j7m9/o68o=
Subject key identifier: 34:7A:24:BC:D4:FC:CC:80:C4:AB:76:BF:E4:94:75:B4:D5:59:F7:30
Certificate issuer: /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial: 010D0C9F432858481C9A7B1ADB27058B1A98D8B0
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 18875
IP address blocks: 64.66.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:7b:1a:db:27:05:8b:1a:98:d8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=7674a85f-5af2-4a0c-9be6-107ef23edd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:23:7d:59:a1:3e:02:b8:11:11:06:25:2d:
8f:70:b6:78:3c:83:fa:99:19:79:7f:30:11:64:19:
84:de:0f:ec:18:79:57:3d:2e:99:02:e2:c3:fe:b3:
8f:23:67:80:b9:fe:28:41:12:c0:66:2c:c1:b1:70:
7c:7f:e2:3a:74:d3:86:5f:4a:76:de:1a:d2:13:34:
36:f8:85:83:e9:6e:12:58:b0:de:3a:f7:a8:9b:0a:
6d:ae:01:44:23:31:23:a1:54:81:84:25:13:1a:be:
17:1d:5b:4f:12:c4:75:94:52:78:c9:7b:0e:71:c4:
a5:ed:9e:b1:0a:96:ed:46:56:2d:37:02:18:be:ec:
eb:41:93:92:5f:bb:ff:0d:b5:0e:2e:40:c3:95:97:
dc:f0:97:cb:54:fa:39:d0:6c:6d:83:bc:83:23:f2:
ae:21:01:40:14:1b:2b:56:6e:19:70:91:73:c6:bc:
e7:ea:68:52:02:5b:24:33:a3:74:0a:b7:da:c1:9f:
cd:96:2a:87:48:92:d1:2b:64:1b:6e:7b:e7:fe:ed:
a6:b4:fa:7e:7a:11:71:f0:a4:1c:53:a8:7c:52:2a:
9b:a1:f1:9c:24:ff:72:cd:1b:b6:ed:ca:e0:46:6e:
ab:cd:75:e9:f1:22:5b:36:e0:9f:62:71:fb:c3:03:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:24:BC:D4:FC:CC:80:C4:AB:76:BF:E4:94:75:B4:D5:59:F7:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
X509v3 Authority Key Identifier:
keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
sbgp-ipAddrBlock: critical
IPv4:
64.66.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:ce:e2:b3:67:e7:d0:c0:42:2b:46:85:c7:41:6b:a8:35:4e:
4c:07:ee:56:a8:71:19:9b:3f:ff:9d:eb:ec:7a:37:a5:ed:30:
28:53:59:f5:e3:36:3b:1b:f7:09:54:45:f7:72:f6:3d:06:9e:
3d:7c:30:93:39:ea:6a:f0:08:60:a1:7c:b8:3a:a4:60:70:f2:
47:aa:ec:d6:5a:d3:10:2b:9f:53:54:63:0a:79:80:f5:1c:ec:
20:0f:b2:62:b9:c1:f8:c4:ce:9f:71:cf:d3:5e:3f:79:e5:61:
28:84:e0:21:c4:c4:fe:7f:fd:c2:09:4f:ea:37:fc:d0:4a:12:
26:6f:68:e0:9d:6e:43:d6:04:1e:eb:45:f5:00:a8:48:36:97:
6d:2c:61:86:6c:22:15:3f:7b:fc:c6:07:f6:14:ae:e0:e8:05:
87:55:1d:cc:0b:73:c7:13:5b:cd:1e:18:1f:31:61:ae:31:07:
3a:5e:22:7b:78:7a:2a:e8:1d:c4:99:32:df:68:49:4b:0a:81:
d9:4d:76:72:c0:94:6d:b9:43:bf:98:30:d3:a7:a1:30:3e:4b:
c4:57:40:08:c0:e7:22:4a:6c:d6:09:2a:01:45:cd:9d:71:9b:
94:b0:4f:10:96:d6:8c:37:41:7f:b7:4c:8d:08:3b:86:68:27:
25:8c:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:51:12 2025 by rpki-client