Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/e4d04ea1-1acd-3e1c-a781-9e89cf23ef6d.roa
File: e4d04ea1-1acd-3e1c-a781-9e89cf23ef6d.roa (raw, json)
Hash identifier: yGxoM9EyxHvmiR88Gg0W3qlhSA5w8hpCdCW2Z4Ugyzg=
Subject key identifier: 7B:F4:B2:78:BE:C3:BD:47:7E:0F:DE:57:72:C9:C8:04:F7:A3:01:49
Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial: 010D0C9F432858488C45CE19AE842604DADD7540
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/e4d04ea1-1acd-3e1c-a781-9e89cf23ef6d.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 16509
IP address blocks: 66.117.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:ce:19:ae:84:26:04:da:dd:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=e16634be-b0bd-428c-a609-c0b0b51be008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:81:cc:bb:07:8a:b3:c8:73:d0:36:b4:e1:
46:d6:65:74:47:3d:27:86:65:dd:0b:35:1c:da:e8:
c7:8d:29:16:a3:40:13:00:27:d8:37:35:50:53:62:
63:05:b1:f7:22:4f:cb:72:ae:f8:15:06:b7:6b:0f:
cb:2d:d1:cc:71:45:28:a8:92:3b:39:88:c8:b6:f6:
fb:1e:df:5b:7a:6b:f7:ba:ab:78:4b:2b:29:a0:7c:
db:5a:46:14:f3:10:69:bf:5c:07:32:1b:74:f9:c4:
45:98:23:2e:00:f6:0a:9a:e5:09:ad:9c:74:4d:e6:
3f:cd:21:f9:97:c4:2c:4e:6c:de:a9:7e:77:49:ac:
ea:ee:71:f5:fb:35:ef:67:80:e3:d5:ea:4c:a3:b6:
22:e0:1c:a8:2f:4d:57:b4:80:5b:a5:5f:29:53:a8:
7d:df:b1:5b:0d:48:f1:45:ff:e8:ef:eb:c8:18:d6:
e0:ac:06:d4:7f:4d:b3:6c:37:fb:93:e7:1e:64:2b:
cc:22:9f:31:2c:d7:55:8a:76:a0:8e:ac:71:72:0c:
ec:93:44:70:88:29:cd:14:e0:4a:3e:1c:37:2e:07:
c7:cd:4e:fa:38:5a:b9:e5:46:a6:88:d1:37:91:17:
c3:ec:d4:c2:58:e8:07:ac:c8:dc:a8:ff:ac:b7:91:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:B2:78:BE:C3:BD:47:7E:0F:DE:57:72:C9:C8:04:F7:A3:01:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/e4d04ea1-1acd-3e1c-a781-9e89cf23ef6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
X509v3 Authority Key Identifier:
keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.117.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:53:9f:d4:ac:ba:a8:85:7b:ea:4d:20:b2:a5:2b:d6:45:f4:
fe:ef:7c:e2:35:ce:25:4a:71:25:26:ed:34:7b:a2:4a:7a:e7:
33:c3:54:7f:fb:45:31:b3:a1:94:12:54:f4:a0:fc:a4:30:df:
f5:b6:be:9b:0c:3c:66:e4:aa:48:49:06:cf:87:73:5a:73:9a:
ef:39:0b:42:71:10:b9:0e:86:dc:c6:0e:00:ed:05:0a:43:b3:
fe:04:bf:9d:d0:e5:15:8a:a6:3a:3a:03:e8:a3:d3:cb:9f:51:
30:0f:6c:13:e2:14:b5:cb:02:65:d8:1c:99:b7:1a:e5:ea:3b:
4d:93:f2:e5:89:f3:df:18:fc:5d:55:f3:8d:27:4b:21:38:d2:
63:b2:5f:07:4c:36:ea:20:8a:4b:db:78:e2:42:94:b3:3f:ba:
fb:9d:41:d8:94:3b:cf:54:8e:41:92:3e:02:fa:22:41:dd:ee:
e4:33:a5:0e:3e:64:d1:01:77:17:72:84:7b:d5:97:6b:69:2d:
ae:ce:3c:50:ef:c7:49:08:40:96:1b:75:8c:fd:ec:17:1f:28:
a6:b3:b2:88:fc:43:57:89:7b:33:c6:57:2b:6a:87:3b:d0:15:
51:78:6f:ca:1a:ea:e6:e3:f8:fb:68:dd:68:27:cb:5d:bc:24:
75:6a:74:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:10 2025 by rpki-client