Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f3b94909-4a1a-378f-8207-e0c0e8315af3.roa
File: f3b94909-4a1a-378f-8207-e0c0e8315af3.roa (raw, json)
Hash identifier: jqClT7AWaotyhhAZNOrqYCamROxMGm1mgxU6CWZZP20=
Subject key identifier: 87:3E:35:69:96:8A:57:AD:1D:99:3C:D6:A3:05:4E:98:ED:2A:04:29
Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial: 010D0C9F43285848159FE5A1C5D6F2645E8D3060
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f3b94909-4a1a-378f-8207-e0c0e8315af3.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 40033
IP address blocks: 66.35.8.0/24 maxlen: 24
66.35.15.0/24 maxlen: 24
207.32.193.0/24 maxlen: 24
207.32.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e5:a1:c5:d6:f2:64:5e:8d:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=31cf6cdb-c759-4f75-a89f-e8832d560be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:36:5b:19:ba:77:e6:de:e7:59:fd:56:df:
3e:21:77:46:ba:35:6e:42:3b:0b:97:7c:66:e4:cf:
a4:e1:ff:44:0f:e8:7d:03:c9:96:41:99:14:d1:08:
ff:91:39:2b:ff:97:f0:bb:c6:d6:a6:87:a5:ae:f4:
0d:eb:67:08:f4:7a:65:50:d4:f9:b7:a6:d3:88:95:
87:2a:cb:0a:b2:50:c3:69:a7:f2:43:2d:97:9d:cd:
87:a0:e2:2b:e8:45:61:e0:0b:d0:ff:c2:c0:62:f1:
ad:9a:b1:3a:d9:d1:77:24:34:d6:9a:2f:50:bb:a2:
9b:cd:da:ed:04:2b:2a:09:95:46:ef:ea:27:eb:19:
58:37:65:f6:b1:0b:38:8c:f2:36:8c:14:20:37:b7:
5b:d7:5e:75:78:01:af:ec:ba:bf:a6:6f:dc:3b:21:
bc:86:17:6b:4e:8e:f7:98:c9:bd:bc:cf:bf:d8:a0:
58:ba:dd:61:eb:29:dc:f7:66:e1:37:06:7c:b4:96:
c6:cc:86:e4:01:37:fa:07:b2:bc:cf:88:be:69:cc:
10:35:ae:4c:42:34:77:96:24:b8:b3:81:ed:99:c3:
a1:aa:f2:1b:ed:3b:2d:ae:aa:f4:47:e3:b7:b5:3e:
35:ae:94:03:dd:9d:01:82:68:00:65:d2:cf:ac:3e:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3E:35:69:96:8A:57:AD:1D:99:3C:D6:A3:05:4E:98:ED:2A:04:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f3b94909-4a1a-378f-8207-e0c0e8315af3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
X509v3 Authority Key Identifier:
keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.8.0/24
66.35.15.0/24
207.32.193.0-207.32.195.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:b2:f9:fd:aa:07:35:1a:4e:e0:9c:87:47:e6:9a:f4:47:a1:
43:ab:f9:3f:b0:b8:4f:b5:8d:d2:cb:39:ca:aa:0b:52:2a:10:
d3:28:2a:8e:ac:16:72:72:63:d3:d7:21:fc:c3:3b:10:0a:5c:
46:6d:ed:c8:55:7b:9f:f1:a7:9b:99:f9:3e:8c:16:b3:c8:26:
02:4e:ce:ce:80:8d:42:11:4e:6a:ba:23:73:3f:96:5f:2a:96:
ad:25:29:54:93:d3:3f:b5:99:c8:f6:50:99:b0:a5:64:fe:26:
67:97:83:2f:8f:3c:a3:57:dd:16:23:61:6e:dd:90:9e:f5:6d:
af:bb:43:72:bf:c7:56:eb:cf:a0:d2:47:69:ab:82:95:2c:8f:
cb:96:80:4e:52:02:aa:68:a8:36:db:02:07:95:2f:07:3c:92:
b0:94:b8:ce:f6:2f:d4:fd:ca:e1:48:e9:7f:be:e9:85:ee:a0:
1a:35:5d:dc:28:19:89:b2:9c:b7:24:32:7e:9e:ec:1d:e0:9c:
63:80:c5:67:e1:41:7f:ed:d6:43:12:95:7c:6d:01:41:7a:3d:
03:2f:96:e9:ff:1f:02:82:83:95:f4:02:7e:11:17:1b:0a:50:
4d:27:fb:2d:59:8e:30:5f:20:b4:2e:f3:f3:ce:9f:1f:38:3e:
28:e2:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:30 2025 by rpki-client