Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/68cedb4f-f003-3595-9971-5323a5ad197a.roa
File: 68cedb4f-f003-3595-9971-5323a5ad197a.roa (raw, json)
Hash identifier: GlsVSR2f5m0j6GjFU30s6B5SG+pSj2JCkO/AoVgKgCY=
Subject key identifier: 9C:CE:CF:C6:D7:74:46:DF:62:4D:AB:6F:FB:C7:94:05:F5:66:1A:A6
Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial: 010D0C9F4328584823954561454230EA7A922100
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/68cedb4f-f003-3595-9971-5323a5ad197a.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 13845
IP address blocks: 66.51.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:45:61:45:42:30:ea:7a:92:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=445c5b5c-d00a-48be-b17e-2c418652c177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:23:1b:e0:55:e8:42:ce:87:30:9b:bb:fd:
43:c3:41:c4:d3:ec:b8:e4:61:2e:e2:7d:6b:4d:bc:
ab:d1:3c:e5:ed:6e:4c:f7:81:0b:1d:2b:57:aa:f6:
66:cc:51:bc:14:f6:e0:70:66:42:76:9f:47:dd:e1:
fc:68:c0:73:26:8c:1b:3b:66:9d:03:77:49:e1:5a:
07:78:8c:0b:4b:65:ed:62:41:ab:d1:eb:11:73:38:
cb:8c:36:04:5e:a9:34:a9:19:fa:2a:4f:69:21:cd:
54:cd:2e:d5:ea:6d:3d:7b:6e:b5:21:51:4f:3f:e5:
77:c3:7a:97:dc:6a:60:df:75:d5:dd:b1:3f:bf:0c:
a1:97:0a:4b:80:bc:c7:f4:07:b5:10:bc:2b:d7:68:
5b:45:11:5b:e0:87:a1:29:2d:3e:96:a6:94:6f:c1:
49:4c:16:70:7c:02:04:fc:4b:7e:58:fd:cc:f3:3d:
72:63:d5:3c:5f:eb:93:9c:e7:46:de:51:05:4c:eb:
1c:14:6b:bd:87:b8:7a:78:0f:db:5c:5e:b1:59:db:
27:36:ea:39:2e:7e:4d:b8:24:35:e6:9b:88:05:05:
d3:59:cc:3a:ed:20:23:8c:e0:e8:28:d9:10:a6:49:
13:8b:2d:4f:89:c2:58:61:cf:2f:c2:eb:a0:57:43:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CE:CF:C6:D7:74:46:DF:62:4D:AB:6F:FB:C7:94:05:F5:66:1A:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/68cedb4f-f003-3595-9971-5323a5ad197a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
X509v3 Authority Key Identifier:
keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
sbgp-ipAddrBlock: critical
IPv4:
66.51.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:11:62:d5:98:83:c0:87:46:82:46:61:6b:d3:b5:48:24:32:
cb:77:59:a0:d4:67:32:95:6c:0a:db:0d:cf:f3:2f:cd:77:16:
84:9c:ee:5a:41:a1:91:77:11:65:e9:d8:14:dd:03:96:0e:d1:
d9:98:05:b4:62:82:76:1d:ad:7c:fc:e5:46:d3:f7:e9:8f:67:
93:5d:54:cf:b6:4b:de:12:36:98:99:4c:c6:a5:8c:2c:53:78:
a2:ad:c7:d2:3e:ea:ec:8c:29:47:87:f8:96:ba:b2:0d:33:69:
ca:d2:59:62:a2:20:e8:45:43:32:ad:d0:95:41:e5:40:93:10:
6d:68:c3:27:63:99:25:ed:2f:0b:3c:69:95:6c:9c:4f:ca:a7:
4b:cc:b5:1b:a1:f5:1f:c9:a1:b2:70:49:59:d5:ec:bf:c8:b1:
46:e2:b3:9f:05:28:5f:7b:04:e3:a5:76:c8:7d:50:74:88:7f:
74:42:8c:fa:9c:65:74:ee:a3:ee:73:15:f1:27:b5:26:23:ca:
a8:72:63:c4:7f:e0:ae:1d:a1:66:77:c9:e5:07:f7:1c:b5:a3:
5d:5a:f4:42:4a:cc:0d:d7:1a:c4:b6:4a:3a:df:18:6a:8c:2b:
74:4f:60:28:69:72:a1:cf:92:17:06:99:6c:bd:b9:f9:f1:af:
67:91:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:55:48 2025 by rpki-client