Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b5378acf-7548-3e56-8626-ae1f7d6c1241.roa
File: b5378acf-7548-3e56-8626-ae1f7d6c1241.roa (raw, json)
Hash identifier: nGbm6HanqJHoV8/0Dq4RegYfq7c9QohcaMR4kfQlwQ8=
Subject key identifier: E3:43:12:07:97:A4:EA:23:60:20:5C:B4:00:3A:6E:BC:2A:CC:BD:6B
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858486EF5B4A1E3DD2C418AB39600
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b5378acf-7548-3e56-8626-ae1f7d6c1241.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 2559
IP address blocks: 66.185.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:b4:a1:e3:dd:2c:41:8a:b3:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=7d567625-fbf3-4af9-9802-6c0fcbfae93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5b:e9:6a:96:55:ad:99:8d:25:07:89:b2:97:
c4:63:27:23:11:8e:e1:cb:03:24:c6:58:51:bd:ae:
25:b1:56:4e:c8:84:c5:8b:77:7b:4e:d5:95:bc:6c:
73:e2:57:4d:7e:b7:ad:31:79:f7:b5:b6:30:59:01:
a2:38:f6:0d:ae:33:b7:f6:9c:af:4c:94:a6:17:d9:
b1:1c:cc:6f:ed:e2:35:0b:89:1a:41:71:7b:f3:22:
e9:da:2d:cb:0d:eb:60:0f:34:55:2e:75:8a:55:51:
ee:cd:d7:86:dd:e0:73:5f:f3:e7:9a:97:bd:51:71:
44:3f:2d:16:35:a0:2f:d7:1c:f3:77:20:60:c5:73:
5c:b4:af:55:ff:07:dd:19:55:21:58:8c:7f:36:bb:
c1:39:ad:3b:46:d1:2e:c3:9a:e6:e6:bb:b4:a2:09:
9a:fe:18:34:68:94:fb:90:fc:28:c4:c7:3e:fa:a0:
f0:54:69:cf:b1:3c:4c:7c:af:59:c0:52:55:b5:d8:
c2:10:cc:b8:ac:c4:e3:ab:d3:02:89:7c:48:b5:41:
ac:9d:cc:25:ac:70:35:27:5d:bb:6f:ab:22:aa:75:
19:04:a9:0b:e9:d7:15:12:62:0c:a3:7d:1e:95:c0:
19:a7:e6:56:54:19:55:e4:d4:72:50:b7:b6:95:13:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:43:12:07:97:A4:EA:23:60:20:5C:B4:00:3A:6E:BC:2A:CC:BD:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b5378acf-7548-3e56-8626-ae1f7d6c1241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
66.185.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:7b:38:f4:ba:b6:6f:1c:16:f3:97:26:9b:0c:64:ac:c7:27:
ea:d6:7a:4c:22:0b:12:3f:04:f9:0c:ee:f3:56:2d:1b:d8:74:
76:f2:55:af:03:d9:f4:9d:ae:ce:ce:2b:a2:2c:7f:76:ec:80:
ad:bd:0e:76:b3:9a:d9:3b:47:d2:db:cd:b9:7c:28:23:c0:32:
8f:85:e9:3e:ef:5f:2b:e7:ae:b1:00:5c:5b:1d:4d:48:7e:d4:
8e:97:32:af:50:cd:4e:08:1f:df:d6:f5:6f:93:a9:d0:ed:d0:
99:1e:90:75:a8:67:51:22:6f:33:c8:c5:d7:2a:90:e4:7b:bc:
95:60:a2:a6:c8:68:6a:ae:9d:61:cf:9d:02:92:51:3e:b5:d0:
84:cb:c3:85:f6:84:bb:33:84:48:b5:28:71:10:49:0f:a8:fa:
eb:9c:27:73:d7:b9:0b:a7:5c:26:87:36:4f:86:f1:b4:11:4c:
3b:b8:b5:ec:51:b2:70:cd:f2:2f:86:ac:50:d5:6f:a7:23:38:
70:e2:ff:3d:f2:cb:83:a8:2e:94:32:15:8b:b4:39:a8:70:5a:
af:a5:ee:30:e7:9b:6e:f2:2d:7e:09:68:c4:5b:dd:4a:03:23:
bc:86:95:72:17:0e:ca:9b:0a:4c:64:e8:e1:c5:41:a1:65:88:
a0:48:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:22 2025 by rpki-client