Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa
File: ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa (raw, json)
Hash identifier: 8p2lnMlzkRnE3VW9qWOggv9IdkP8K/D8rhjTRuQZC0c=
Subject key identifier: CA:F7:50:C3:23:7E:4C:B9:59:5D:69:AC:71:FE:6D:FC:F8:A1:C6:49
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482BF54FA57B046021D22F0FB0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20454
IP address blocks: 66.85.128.0/18 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:4f:a5:7b:04:60:21:d2:2f:0f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=423f7b4d-ab1e-4e94-96fe-b47b10cb6c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:e3:b1:de:10:41:77:1b:80:7b:4e:3d:9a:
44:9e:98:d1:ae:54:d0:0e:dc:50:32:15:c6:fc:f1:
cc:5a:8f:d7:72:d5:69:22:a2:cd:fc:c4:43:84:eb:
e5:3f:42:f1:7f:19:61:18:ec:1d:7c:e1:ec:af:3c:
15:33:82:42:68:e5:c3:e1:81:ac:d0:e7:fa:92:29:
c1:47:bd:e3:df:f0:aa:1a:fd:6f:72:29:07:0e:48:
14:03:bf:5f:57:e3:44:4d:e8:b9:5e:1a:89:33:52:
b2:46:90:68:40:d5:ab:a8:e6:ba:d3:ff:0f:ce:5d:
14:28:18:cd:5b:ff:c3:c4:74:cd:30:1c:ef:fa:ab:
0f:c0:0f:8b:52:24:a2:e0:e5:b5:fe:db:f7:2c:6f:
92:6a:6c:40:79:8a:c6:db:da:86:51:cb:2e:49:f9:
48:1d:8c:47:44:26:5e:95:d1:7e:93:9f:7e:7f:69:
12:d1:24:9c:93:5d:94:38:31:15:2a:83:15:f4:c0:
d0:a2:2f:2d:7d:b1:64:f9:f6:ab:29:37:41:98:8e:
73:24:6b:72:eb:b2:00:f0:4c:0a:a2:d5:a8:a6:92:
54:62:8b:3b:d0:9f:20:ce:c9:3d:8f:0d:4e:7a:80:
1a:44:77:29:eb:02:00:d5:06:78:e8:b1:aa:de:be:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F7:50:C3:23:7E:4C:B9:59:5D:69:AC:71:FE:6D:FC:F8:A1:C6:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:95:e2:07:62:76:78:d0:80:95:f5:80:66:7e:19:45:09:c9:
d9:55:b1:3b:82:32:78:ca:f1:f7:0d:2e:1a:3e:c3:70:2b:d5:
2e:90:85:73:bb:19:3c:30:5e:2b:f0:4f:3a:ba:2d:f2:7a:65:
d7:eb:38:e0:50:4d:ee:84:22:e7:db:be:a9:6e:9d:64:d2:73:
44:8f:3d:86:c7:69:db:71:61:0c:1d:9f:2b:ff:e8:16:3d:06:
0c:66:59:39:30:d2:1e:e2:d9:f7:fd:3c:ef:c9:5d:5b:6d:c1:
37:19:94:40:a3:8c:c9:0d:a6:4c:a9:57:e8:70:ea:f5:f2:aa:
8a:78:87:ac:f7:30:b8:28:8f:c2:9b:05:d7:f3:e0:cd:a2:39:
b7:ab:a9:ec:13:10:fd:15:b7:a1:a6:10:af:0b:59:60:4c:f2:
25:c9:2a:23:f0:a6:dd:3d:ec:4b:23:0c:c1:91:38:0b:cf:92:
ff:3d:11:da:df:b7:16:ba:ee:74:48:d7:54:b7:47:9e:40:84:
e2:42:28:d2:b5:65:8c:26:7f:27:48:7f:29:10:ff:b2:8d:f8:
8a:a7:fe:c4:8d:11:23:18:1d:f0:4b:22:19:db:3d:8e:8e:f6:
1b:90:15:6c:ff:13:ce:41:2f:90:6a:17:ee:93:df:e2:a0:09:
57:90:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:04 2025 by rpki-client