Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/20309439-f571-3955-aa56-4b45b9844dd2.roa
File: 20309439-f571-3955-aa56-4b45b9844dd2.roa (raw, json)
Hash identifier: hLtb9B1/v9frNe/EDm67q2GSOrgGSKF7T3pc9GMDDcM=
Subject key identifier: B6:4C:53:34:72:92:D6:E8:93:25:5D:F4:BB:3A:62:25:E5:34:FC:C9
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858486EF5B4BA3D4205BA3EA09608
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/20309439-f571-3955-aa56-4b45b9844dd2.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 2559
IP address blocks: 66.185.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:b4:ba:3d:42:05:ba:3e:a0:96:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=45e42f72-2a3a-45d4-8830-af2d83657809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:f6:2e:60:aa:bc:39:d9:86:34:71:3b:d6:
3f:c8:8c:29:4e:dd:05:d4:9f:3b:e0:1e:eb:8b:7b:
62:af:6c:3d:ef:24:08:c6:05:eb:36:16:bc:7b:90:
b6:24:6c:bf:e8:cf:e5:ab:00:ca:ca:5c:cc:a3:53:
2b:74:fa:e7:5e:d9:c1:a3:08:8b:7d:04:42:f9:b6:
36:4b:6e:dc:ac:17:1d:f9:91:d1:cf:6f:65:55:a1:
58:45:d2:fd:0f:dc:0a:c2:eb:19:5f:36:79:52:78:
cb:70:17:53:8e:f9:d8:9a:81:f3:56:c5:02:02:f6:
1c:a8:da:c7:ad:e6:15:c0:5c:a4:b4:14:ae:3b:3c:
d7:0f:c1:66:d6:a7:37:80:3c:d9:13:36:3b:d1:ae:
3b:ab:1b:bd:aa:76:b7:14:c6:fa:0e:44:04:cc:6d:
00:95:43:c9:92:18:9b:fc:ab:28:23:95:d8:26:e6:
02:3a:5b:bd:c5:f5:0b:f3:08:9d:53:74:da:1d:6c:
92:9a:38:c5:1f:a7:ba:38:0e:89:a9:1e:27:a4:38:
f2:27:57:82:54:41:6c:9a:28:32:34:8e:04:39:bb:
5e:54:69:02:7e:36:50:a4:15:a5:68:91:86:06:ab:
d9:07:d6:6c:0b:a1:f7:be:79:f9:f3:d3:a5:70:f0:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4C:53:34:72:92:D6:E8:93:25:5D:F4:BB:3A:62:25:E5:34:FC:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/20309439-f571-3955-aa56-4b45b9844dd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
66.185.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ea:43:68:57:d0:24:63:28:cb:22:fd:dd:4f:16:41:38:d3:
ad:1e:e0:81:ce:9b:e9:8f:eb:cb:a7:ff:45:4d:6e:b5:f5:02:
f2:be:03:d8:59:ef:89:84:37:12:aa:f2:8e:3d:de:01:51:3f:
1d:60:0d:0a:00:85:5d:03:f7:bf:dd:95:cf:52:43:7e:03:4a:
3d:99:46:64:c7:03:50:f7:e9:14:87:35:a4:60:18:45:cf:a9:
c6:84:35:f0:f8:60:ee:70:26:ac:e6:5b:3d:fb:31:7d:1d:35:
6d:14:1b:c7:43:df:c1:5f:8e:8c:f3:1c:f0:d7:47:f3:c4:ba:
e5:24:93:af:94:76:55:c4:62:1d:94:15:3c:04:c2:d4:bd:25:
7d:05:11:1e:be:8b:96:7b:1c:6c:43:07:ae:0a:e7:eb:74:c0:
13:7e:bd:89:a1:3c:5b:8c:91:8b:ce:30:3a:ad:c8:8c:10:a8:
ca:5a:e6:15:33:d7:06:66:1c:33:ca:62:f6:3b:5d:c6:f0:cb:
7d:8d:79:47:a2:0d:df:bb:d3:0a:d9:3a:ca:b4:3e:e7:c6:cf:
5a:12:4a:9d:04:fd:39:34:9d:d6:8e:a7:91:79:98:73:d8:52:
cc:a1:69:43:41:ed:32:1b:fb:60:db:98:2e:96:12:c1:45:d4:
a9:9a:f3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:29:38 2025 by rpki-client