Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa
File: 71b533e2-7f33-3621-b9d4-739786613f23.roa (raw, json)
Hash identifier: gRvBZur2tGu53xITfY7fy/d+rgNrB/VemSNalm+WswU=
Subject key identifier: 82:56:3B:C5:F3:28:BC:D3:DA:F8:D9:50:47:6C:80:AE:C7:4A:2F:7D
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F4328584812D531A48CFF745960E652A0
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 62537
IP address blocks: 66.85.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:31:a4:8c:ff:74:59:60:e6:52:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=41e87077-84ba-4de8-a10c-3ecaca169fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:24:84:b0:72:76:39:35:4e:47:cf:85:44:
0e:b7:8e:e5:f8:c3:4e:24:14:28:43:57:a5:2a:ac:
9f:f2:d2:e8:dd:fa:cb:1f:e9:9c:19:c6:6a:b1:aa:
df:01:69:7e:7f:77:ac:e3:ec:e4:65:cf:5f:90:5b:
80:cc:20:fc:e1:b3:71:04:4f:0f:4a:cd:b0:53:8e:
63:d8:98:2f:89:b9:b9:5a:f9:c0:be:96:d8:93:ee:
2e:89:cc:25:6e:2c:53:e0:f1:64:e4:79:b5:f0:cb:
e5:93:90:e5:df:46:57:ec:08:e1:49:91:4d:8f:8c:
de:b4:c9:e8:34:05:1c:1e:6f:87:33:69:32:05:af:
4a:50:af:c9:1d:59:77:f0:95:85:6b:40:8f:1a:57:
b9:ce:27:75:4e:59:c7:bd:de:e1:8b:38:43:57:6b:
89:15:6d:3e:ea:7c:f7:73:01:75:4d:a9:e0:6b:44:
8d:14:56:90:e7:42:64:a8:49:4e:20:5e:a4:86:f8:
da:74:93:81:51:bc:f3:c7:4a:11:29:db:35:96:f7:
08:d0:ca:4b:da:43:aa:aa:ac:14:4e:7e:fc:5c:0e:
40:80:17:8e:35:08:b3:35:60:66:7e:52:c0:db:e2:
94:c4:c3:80:5e:eb:8f:fb:bb:34:27:bc:0e:77:83:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:56:3B:C5:F3:28:BC:D3:DA:F8:D9:50:47:6C:80:AE:C7:4A:2F:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:0d:99:51:91:20:87:e5:28:e0:c9:65:c3:e9:e5:af:25:d0:
b3:9f:61:a8:50:5e:c6:34:30:6c:28:40:f1:71:13:e5:68:a1:
53:a6:25:90:98:e5:41:fa:fd:9a:3a:cd:9f:15:e3:60:0c:de:
bc:b6:e4:b3:ac:26:51:71:24:70:ae:59:73:42:7a:42:bb:b4:
48:69:cf:93:4c:70:65:d1:66:5b:d1:57:67:bd:fc:73:25:c8:
c9:0c:d2:a2:ea:95:a5:a5:b9:d3:55:ec:67:b3:4b:89:03:d1:
a7:2f:53:cd:5d:ac:50:3c:cc:ce:bc:0b:06:c5:85:9b:9a:52:
02:59:90:8e:93:dc:3a:7f:0c:ad:e0:c9:c1:90:2a:95:31:71:
17:1d:6a:86:d6:56:b1:bf:6e:98:9d:5c:84:1d:db:6f:2e:7a:
5b:ff:76:00:22:85:2a:22:f2:e3:03:25:1b:50:23:9e:ee:b9:
60:ff:49:42:a7:13:5b:7a:95:0c:f0:a1:57:43:6c:eb:e2:9d:
5a:67:0f:0a:3a:75:80:15:e2:d7:fa:ae:7c:d6:e1:50:c1:f7:
70:b3:1e:5b:e2:49:b9:da:ff:8a:7f:59:fa:21:41:08:e4:da:
b3:0a:af:0b:c4:d7:6b:12:1a:8d:3e:99:fc:8e:7c:8b:df:91:
d4:9c:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:45 2025 by rpki-client