Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
File: 541af175-265a-3096-8295-96504805d06d.roa (raw, json)
Hash identifier: 8OcS0sgd2M5vH9EhZZq/GjXjcqI6RRe8i9tPtZestF0=
Subject key identifier: 67:71:C0:77:01:55:A9:92:0F:E7:26:C0:C8:19:6D:A1:43:B8:95:D5
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F432858480645077D4AB1D67A63E00000
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 62537
IP address blocks: 66.85.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:07:7d:4a:b1:d6:7a:63:e0:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=dee40655-ce56-4539-905f-e10cce336880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:a1:be:a6:83:c4:36:ae:e3:61:cb:80:ff:
e9:b5:94:bb:e1:52:85:cf:97:aa:3f:3f:7d:a6:38:
06:95:0d:d2:ed:82:b2:0b:e2:44:b4:fe:5d:54:ab:
52:c8:1c:30:1c:a0:72:e5:61:9d:19:9f:04:c0:95:
46:10:3b:20:b5:71:11:ed:61:64:7c:32:c0:50:2b:
d9:37:c5:32:d5:44:cf:c4:c1:54:e9:98:04:18:ef:
47:5f:df:93:05:df:c8:6f:4b:cb:0a:8b:74:03:a0:
a7:fb:42:47:43:f3:97:63:b0:80:b3:a2:0e:44:c0:
b5:8e:77:d9:e7:cc:73:3d:26:8b:38:51:73:6f:70:
52:ad:af:b0:85:6f:db:88:d9:dd:25:e9:07:0f:a2:
d4:07:59:71:94:ed:9c:ac:b7:e5:1d:e0:82:1c:43:
71:eb:a8:26:28:aa:a0:85:d4:76:c4:92:ea:20:1e:
79:fa:fe:2e:c4:27:67:30:48:11:9c:19:d3:39:fc:
fa:7b:7f:e3:ba:ec:36:c4:5f:a3:5e:98:7b:89:b4:
c5:ee:32:89:f7:c1:fc:4b:d0:3d:f1:dc:a6:e0:07:
b2:aa:87:95:5b:a1:d3:d4:b2:20:ba:7e:d3:7d:8a:
28:77:e3:f7:74:02:1d:4b:d0:8d:c8:69:86:e3:42:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:71:C0:77:01:55:A9:92:0F:E7:26:C0:C8:19:6D:A1:43:B8:95:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:cc:15:68:7d:91:1a:09:53:30:f9:52:5c:8c:f4:96:78:76:
8e:bb:9c:83:f0:c1:f1:0a:1a:6c:55:a7:a8:8a:e1:c9:26:63:
d4:04:16:5e:33:fa:44:e9:f7:be:dc:d3:88:eb:16:9c:61:f5:
73:a5:4a:86:ae:29:e7:b6:99:87:be:4d:44:67:3a:be:cd:28:
6a:bd:39:ee:60:ed:a1:e5:e5:63:6f:0b:4e:4b:91:13:d8:8c:
63:43:1f:6d:05:f8:c1:65:23:e3:0f:da:30:dc:61:5a:c9:52:
e3:d2:c5:22:5b:dd:85:8d:59:5e:28:4b:c5:9e:31:c4:fe:19:
cd:40:c6:1e:b0:15:87:d2:62:e0:1f:ae:2f:a9:d4:e4:5c:52:
c1:70:3e:04:d2:79:6a:bb:10:93:44:af:fb:7b:22:e8:87:3c:
09:50:77:07:ae:28:76:21:11:fb:7b:64:70:ff:28:66:64:f3:
55:01:c6:d8:3d:93:9b:e6:0a:0d:72:24:73:cb:43:e2:c0:eb:
3c:7a:b0:49:6d:1f:b7:64:1d:03:f9:06:17:fa:8d:b6:b6:fe:
d8:21:60:61:81:17:ef:e6:15:2a:ae:17:39:13:05:d5:4e:0a:
9d:84:3e:00:67:05:30:af:b0:ad:48:39:ca:af:fb:5a:a2:f6:
d5:17:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:51:48 2025 by rpki-client