Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa
File: 3a16288a-c441-313a-a400-24f9d544cdfa.roa (raw, json)
Hash identifier: FCI++arChcgec4NVC/LaAfpOO9VKLIUQBBe8X318ZHw=
Subject key identifier: 7D:47:EE:E1:6D:18:9A:EA:0E:11:16:E5:1A:45:DE:FC:97:BC:21:5C
Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial: 010D0C9F43285848021508C15B9CFB80186BC520
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 33139
IP address blocks: 66.49.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:08:c1:5b:9c:fb:80:18:6b:c5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=0d70809f-9339-460b-9403-607b951767c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b3:87:d9:05:64:a6:2e:e4:b6:fb:1f:c7:dc:
6a:6d:42:02:ab:85:4c:98:6c:fa:b5:6b:51:45:30:
6f:33:5d:a7:68:cd:61:92:fa:68:48:b7:99:45:41:
b5:be:da:3d:ce:ee:8d:c8:a3:0e:6f:7f:aa:5c:f2:
29:44:7b:d0:0a:3a:8a:c3:a8:80:59:db:31:1f:38:
a7:77:9f:7b:70:87:38:40:29:c1:35:22:76:c9:3f:
4a:da:17:d7:1a:d1:1a:2f:46:33:db:57:e2:20:1a:
b2:31:6f:bb:3c:70:bb:d1:de:8e:29:db:27:dc:bc:
40:6e:5c:7a:f5:7e:22:6f:19:67:e2:90:ff:1c:70:
64:c4:cb:ea:30:c0:0c:51:f3:3c:1e:43:8b:d8:0d:
1e:d5:6f:dd:03:4d:f8:f1:6a:5a:6f:90:f4:71:d5:
d2:fa:28:19:79:ef:98:a6:e2:27:64:65:e8:d6:ee:
13:0b:66:a4:78:eb:87:fc:d8:9d:22:94:39:13:0a:
44:3b:69:ac:aa:a9:3b:e5:fb:5b:9f:12:c3:ae:6b:
b5:52:c5:06:d1:31:1f:0c:b9:6d:d5:d5:d8:64:c1:
eb:c9:45:77:2d:52:6c:52:83:05:c4:d1:bb:3e:b0:
44:20:c2:ba:66:db:82:b6:d7:a6:5b:f6:2e:0e:2d:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:47:EE:E1:6D:18:9A:EA:0E:11:16:E5:1A:45:DE:FC:97:BC:21:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
X509v3 Authority Key Identifier:
keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
sbgp-ipAddrBlock: critical
IPv4:
66.49.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:02:d1:6a:62:40:94:46:cb:5f:89:f8:cf:bc:91:b3:61:d7:
d3:dc:f7:0c:d7:d6:79:1b:17:94:c9:f1:4e:2e:4d:c8:0a:13:
bd:49:21:84:e1:1e:fa:c2:24:e2:7a:9f:41:d1:a6:2a:3b:ba:
25:34:b9:30:38:c3:9e:1a:c1:b5:a5:60:ec:fb:04:5d:c8:6d:
a3:71:10:1f:04:97:f7:17:e0:7f:c1:78:41:7e:08:66:4f:a4:
77:2a:7c:21:06:3e:33:97:9c:5e:3c:8f:1b:65:94:37:22:bd:
b4:fc:03:0b:86:e5:ab:a2:98:e8:ce:af:30:4b:04:bc:e4:bd:
80:3a:06:27:fc:6f:d3:4f:8a:36:d6:31:70:ab:98:2e:6a:96:
1e:a6:fb:9f:59:62:64:64:08:a1:56:2d:60:d4:5c:ee:5e:ae:
f8:05:3b:e9:5b:88:03:9a:ba:de:0d:0b:22:b9:06:34:3c:19:
63:2e:13:9f:b9:2c:6d:5a:2a:21:c9:59:c5:f5:e9:33:b9:95:
bb:b6:05:a3:1f:11:2c:22:12:76:f0:45:57:25:2f:d3:1a:42:
7b:76:03:3a:bb:a6:01:43:74:fe:57:3e:25:9f:1b:ca:96:27:
f4:dd:15:ed:2a:d8:8c:23:ac:9c:4a:32:b5:11:6a:37:0a:a1:
f1:4c:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:19:20 2025 by rpki-client