Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/8dbd80b5-5760-364a-9aa7-dad68a442f8d.roa
File: 8dbd80b5-5760-364a-9aa7-dad68a442f8d.roa (raw, json)
Hash identifier: prvfwiNIkbqWfZHsPTScJ6EIRFzR7DQURBhiAyO5LJ4=
Subject key identifier: B4:95:49:85:6F:78:85:D1:15:95:21:7F:85:32:FF:4A:6D:4B:0F:83
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F432858481C9A797DD05CCA1D7857D680
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/8dbd80b5-5760-364a-9aa7-dad68a442f8d.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 66.22.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:79:7d:d0:5c:ca:1d:78:57:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=c1af9f30-73e8-4413-8ab0-dd26b8fd8513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:db:63:03:86:6e:46:77:1d:17:a9:e4:24:
89:84:78:6d:16:7d:99:dc:4e:a3:0a:ca:60:f1:96:
4e:85:5c:90:37:ff:96:6d:2e:a5:cd:0e:e8:21:ff:
8f:98:79:75:be:4e:00:bc:6c:73:24:14:7b:b1:6b:
fd:db:17:f4:aa:5f:1f:02:de:83:d9:1d:c2:22:cd:
0d:42:22:60:81:51:6b:d0:7b:fd:50:17:21:a5:fb:
94:c1:0d:af:3b:69:24:24:d3:cd:30:a3:63:56:33:
c3:f5:ef:1e:8b:e5:2d:9c:09:68:33:c0:4a:f2:cc:
36:05:8f:61:1a:21:9f:b0:23:51:0e:b5:d6:21:18:
e2:37:ea:f3:d7:fc:98:ba:ce:8b:68:6a:8c:9a:85:
a9:b4:45:fa:b4:12:c6:8c:57:61:a4:cf:3f:f9:d5:
c8:4b:24:8c:e7:55:b1:7d:df:38:a2:f5:5b:43:40:
16:c9:66:20:4a:88:ed:c6:9c:7f:b8:be:28:7c:83:
36:86:f4:e8:60:3b:c4:2e:51:fe:53:82:12:2b:25:
cd:d9:24:92:e5:23:8e:68:33:8d:ae:b7:72:0d:82:
97:0b:8b:0d:bf:84:de:d1:33:4d:df:d6:7b:8d:4b:
86:a1:6d:f1:2b:3d:1f:34:73:37:7e:d4:fe:98:87:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:95:49:85:6F:78:85:D1:15:95:21:7F:85:32:FF:4A:6D:4B:0F:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/8dbd80b5-5760-364a-9aa7-dad68a442f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
66.22.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:6f:6b:c9:cf:e2:a7:f3:d7:12:e6:e0:9f:a4:d2:dd:bf:b5:
18:a1:fa:72:cd:e1:48:0d:e7:99:84:ba:eb:e6:d7:07:6a:c4:
82:2b:82:ba:df:a7:67:80:31:f9:6a:82:33:7b:5b:2a:fd:c3:
f5:cc:63:e0:c3:2f:ef:dd:6c:b1:eb:08:2f:37:02:cf:07:d1:
a2:70:75:9a:a1:48:83:e0:af:ee:05:13:6b:a7:fe:da:dc:b4:
ab:8a:22:e3:45:19:79:ae:2b:7c:0a:5b:8d:f5:f3:7b:8b:64:
b7:65:44:f5:df:61:48:d8:cd:b0:3a:22:98:6c:71:28:4e:4d:
ed:e4:b9:17:dd:01:9a:52:4e:da:5a:52:88:05:95:6e:82:34:
04:62:84:bc:66:bc:68:a7:9d:a3:a7:75:25:bd:13:7b:6b:fa:
b4:77:f9:3a:a0:98:ad:36:ab:7e:a9:cd:a2:17:51:6a:66:7a:
8b:8a:82:a8:44:02:29:ff:93:03:30:ea:90:be:1c:0c:3f:25:
d4:e2:0f:6c:3e:03:01:52:76:6e:8d:b0:57:2a:4b:d2:fc:c8:
bd:43:54:fe:99:14:8f:6a:3d:ad:d5:ee:a9:ff:69:3b:c0:1f:
f7:90:e3:c0:6b:90:b8:c9:1c:26:14:11:f9:6f:47:4b:1a:8a:
c4:f4:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:10:44 2025 by rpki-client