Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa
File: aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa (raw, json)
Hash identifier: FfATmFXKCk7gi+cThc595Z25/W7QAA37QLEdwgOerfQ=
Subject key identifier: 7B:35:35:68:77:B6:A2:EB:11:60:9B:40:F1:D8:56:1E:AD:E6:98:82
Certificate issuer: /CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3
Certificate serial: 010D0C9F4328584875F0536270D4F6E91C1B0000
Authority key identifier: 99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 30247
IP address blocks: 66.33.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:53:62:70:d4:f6:e9:1c:1b:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=a92032d0-2e3c-45bd-aad5-7fdbbea3e4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:57:ab:ea:ea:6f:f6:3d:8a:e2:a5:76:e8:
53:7c:93:12:c9:4c:0c:2a:0f:e2:c3:57:d4:1b:72:
53:1d:58:63:30:74:e2:43:93:f4:16:a1:47:7d:14:
0f:82:dd:e4:db:9c:48:98:c3:69:01:9f:56:29:ed:
c0:77:92:32:f7:0f:61:2a:fa:ab:f7:3f:ab:ef:c0:
f5:67:5b:5c:f8:89:20:16:5b:8f:62:98:f2:71:3b:
28:ce:7f:41:91:f8:ba:a5:ee:6a:67:e1:d6:28:a0:
0f:4b:42:05:7b:bd:14:98:58:28:f4:8d:cb:6c:fc:
60:36:26:cb:d7:18:39:90:55:42:df:b6:8a:f9:5f:
ec:d8:f8:6a:55:5e:35:2e:87:26:f4:d6:db:c3:11:
4b:35:b2:46:cb:c4:65:a8:f6:bc:8f:bc:a5:7a:e2:
8a:1f:1a:e8:c5:bb:11:b5:7a:a1:59:65:5a:7f:f9:
b3:f4:a3:61:01:4b:d8:03:41:17:cb:71:d6:e3:6c:
61:d4:cd:92:75:d4:bc:fd:95:72:01:8f:94:43:40:
d5:4e:06:3b:df:5f:d0:06:45:96:0b:19:4c:08:cd:
83:60:79:fa:91:45:b1:b5:15:6c:ce:5f:a1:58:8b:
1c:ee:c8:c8:e3:6c:d5:16:ce:ae:ec:89:90:e7:50:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:35:35:68:77:B6:A2:EB:11:60:9B:40:F1:D8:56:1E:AD:E6:98:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.crl
X509v3 Authority Key Identifier:
keyid:99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:fa:39:54:56:35:3e:91:7b:6e:6c:04:9f:22:c9:d1:b3:f6:
4c:80:2f:e5:4e:64:66:4f:cb:2b:7d:61:1e:fa:1e:23:5b:4e:
f4:2b:af:54:db:4d:57:66:d4:84:41:b1:d6:e9:ca:5a:a8:fc:
b1:69:9c:ca:37:52:43:1a:65:0c:fb:ca:90:54:08:50:9e:85:
49:27:69:85:39:6f:d8:1f:40:2d:2f:99:93:94:a0:40:b6:c1:
3f:fb:c7:39:b5:1e:a0:9e:0d:bd:76:cf:f1:f3:7a:b6:57:d9:
d7:3a:31:d5:f5:0f:34:2d:76:1d:05:64:b0:65:46:f6:ac:93:
c8:ba:88:43:a3:27:c8:a9:36:9f:28:c6:0a:2e:53:2e:b9:72:
c7:9f:57:7a:0a:f6:a4:a6:66:61:39:8d:fc:00:30:e6:9c:4c:
d2:cb:8c:f2:6c:29:1a:40:b0:61:98:cf:9b:d3:57:90:ed:1e:
19:2e:1c:ab:73:a7:52:a9:e0:2b:3a:12:e9:e4:37:d0:0b:e5:
7a:15:93:d1:ce:6e:6d:53:27:d7:9e:6a:83:db:56:8c:68:dc:
e5:17:fa:d1:70:02:af:c7:11:c7:2b:59:b9:f9:98:66:1c:88:
24:c1:41:7c:f4:2f:d2:c3:85:c5:d8:5a:e6:ad:8c:25:b6:d8:
44:c3:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:33:49 2025 by rpki-client