Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa
File: 7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa (raw, json)
Hash identifier: m61udL8umc5GPI1HeLFjRYN7beaj6mGAumq10JyA3EQ=
Subject key identifier: 45:9A:06:15:3A:F8:45:E2:76:FB:BD:63:E2:D4:34:DE:D6:B1:C9:1F
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F432858481C9A796BEB27CBAFA8E78280
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 66.22.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:79:6b:eb:27:cb:af:a8:e7:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=b8d51a75-4bcd-4ba6-92ba-b9798c1d6f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a9:4d:ec:a1:ee:75:e7:5b:64:ab:8d:ef:4c:
0b:9a:55:c1:20:51:87:c5:df:a7:82:31:8b:78:6c:
d3:99:e5:21:89:73:ac:6f:5d:0e:90:ee:8a:e8:3b:
cb:e1:7e:a2:4e:22:23:4a:f4:d4:c8:08:48:2e:3c:
71:a8:c3:32:47:b4:37:6d:f6:aa:2f:9f:84:50:c6:
8e:82:fd:8b:d4:c3:34:de:06:c4:e4:f5:3c:13:92:
a6:15:e6:7c:de:4f:63:ec:10:d2:27:fd:04:45:90:
48:cc:46:ba:f5:b1:65:31:2c:d1:8d:f2:8f:e2:49:
a4:a8:b4:bb:5c:c2:64:e2:6f:3b:1e:7f:48:92:27:
6c:fd:6a:49:81:d0:84:71:d5:ca:cb:11:20:e8:00:
4c:60:cf:0d:6e:e3:02:21:43:67:8d:a3:15:a0:db:
c9:0e:e5:a1:96:05:5e:ec:12:f2:eb:73:91:de:dc:
49:da:39:77:7c:ac:a4:ca:35:76:fc:cc:10:bc:63:
15:52:cc:41:e4:9b:50:8b:d3:4d:7f:99:a4:63:c1:
2a:47:2e:2e:f0:fc:29:27:42:4e:8b:95:a5:27:6a:
9e:8b:57:e3:6b:96:87:78:d1:15:7b:99:5a:72:60:
25:1d:5c:62:cb:ab:13:ad:23:ea:b6:a6:3f:60:d3:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:06:15:3A:F8:45:E2:76:FB:BD:63:E2:D4:34:DE:D6:B1:C9:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
66.22.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:44:73:3a:f3:86:f9:b3:bc:5b:5e:05:92:5a:fa:08:ee:b5:
1e:d9:9e:27:c1:91:1c:f3:03:2c:12:5b:08:d1:39:f9:d5:41:
cd:63:14:5d:35:bd:8d:39:85:1d:a1:fb:7f:91:c6:ed:3d:9e:
b7:45:88:56:3f:cc:29:2f:fc:e8:94:8d:b9:01:b0:4a:e5:03:
5a:16:be:ad:c0:87:d8:25:cd:18:f4:e0:f4:66:e1:e6:0b:bf:
d5:bd:a8:17:a3:46:cf:ef:df:4d:86:88:1b:83:44:59:df:f5:
ec:0b:c9:27:30:bd:b8:ab:b1:ee:08:56:0f:1a:db:19:65:3b:
4a:cd:db:05:d9:b4:23:53:c1:95:5f:c0:6a:c3:d8:61:e1:bc:
9e:db:66:2b:23:c8:9c:36:d7:77:b3:6c:f9:2c:8c:8e:e1:d9:
a3:74:f6:c4:d0:34:9e:3d:3e:41:cc:9e:0b:6b:87:7a:cf:f0:
7d:0a:23:68:aa:fd:17:50:9e:09:94:3a:b8:ed:97:da:7d:4e:
fe:dd:56:95:3b:86:d9:51:8e:8e:6d:e3:98:4e:31:f4:92:d6:
e7:67:ff:f6:30:f8:08:a4:a0:a9:4d:cc:28:1b:45:f5:96:30:
e4:95:f2:5e:db:ea:40:1c:e5:9e:7d:91:e7:18:41:7e:8a:46:
19:5e:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:32 2025 by rpki-client