Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa
File: 628d4d18-2b20-319e-8245-80ecdf68c5f8.roa (raw, json)
Hash identifier: iUmDHaDEQdOeaOzkRD6Dii9vdvq7Zcn2e/Rhds467uA=
Subject key identifier: 0F:C9:4F:51:02:C4:EA:6B:01:67:2B:4D:C1:0A:D6:CA:4E:D2:3B:96
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F43285847EA5A121B8D31869C5E615980
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 16509
IP address blocks: 66.59.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:12:1b:8d:31:86:9c:5e:61:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=24426985-9c52-44d9-96e0-c3b809027a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:1f:4c:2f:15:32:f4:7d:04:93:47:cb:fb:
8c:a9:87:89:0e:27:5b:a8:99:0f:bb:e2:d1:75:91:
b1:fb:1b:36:ab:c7:d6:7f:b4:38:d0:0b:97:89:9b:
46:d3:7b:86:c6:7f:59:3f:4b:f4:73:ae:0b:02:b3:
1a:42:65:71:71:90:88:e1:7c:54:39:e3:dd:34:4a:
af:6e:4a:2a:fc:a3:7f:bc:ae:ee:bb:67:cb:61:b7:
49:a9:fd:15:fd:c3:1d:4c:5b:d1:de:3a:53:ad:6b:
bd:e1:1b:89:65:8e:c0:2e:0e:67:2f:5a:9d:ba:e7:
3f:e6:02:cb:cc:24:ce:77:bf:b5:9d:83:73:2a:40:
aa:db:78:7f:ef:37:92:4d:0d:4d:53:97:87:88:e0:
53:db:58:09:68:fb:8d:55:99:21:f0:9f:46:ee:b2:
00:e0:08:04:33:a2:0d:9d:e5:59:df:1d:48:3d:f7:
ae:7e:74:a7:a5:65:6c:4d:71:f3:38:e1:db:58:c4:
35:62:0e:f0:f8:75:85:ef:19:bb:61:71:0a:e7:aa:
37:7c:b2:cc:3f:8b:80:cf:58:58:22:c6:ba:b3:0b:
f8:17:63:e6:4c:41:69:94:f1:60:f3:66:a7:6c:2a:
b4:66:16:05:5c:89:ea:90:29:2b:f9:90:7c:09:78:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:4F:51:02:C4:EA:6B:01:67:2B:4D:C1:0A:D6:CA:4E:D2:3B:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.59.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:21:df:75:5e:f3:e5:51:ba:c0:bd:d4:3c:19:cf:24:ad:0f:
89:71:ad:1b:d0:80:d3:e0:a9:1c:11:50:19:66:5c:f8:9f:5d:
01:b1:71:82:24:a2:9c:c2:b3:fd:b1:6a:61:21:14:d8:88:5a:
36:d0:f7:a1:84:b1:26:97:1f:e4:d0:ec:ef:4a:f3:7a:1a:73:
a0:2d:c9:f0:57:e3:b5:51:76:7a:b3:1a:20:8f:6f:b9:5f:bd:
f8:3e:07:b9:47:6e:a2:2d:5f:22:45:47:be:cf:0d:64:08:b1:
33:09:a7:a6:05:7b:46:73:3c:0f:6f:8d:48:7c:4d:33:22:3c:
5a:ed:97:40:e6:34:c6:2e:4d:0a:c6:3b:fd:90:a4:65:5f:aa:
69:e7:a4:ca:ec:6e:2b:a2:4d:50:e8:c5:96:3e:29:ec:28:cd:
fe:ef:6b:cc:71:2f:79:3b:de:0b:99:cc:0a:8d:a0:5d:f3:2f:
83:a5:52:a3:08:c2:43:e9:9b:3a:95:df:a5:6e:fb:2e:cb:9f:
58:3c:76:69:90:c6:68:26:35:c4:32:42:70:c1:60:ba:0a:75:
bd:10:14:4e:e5:28:80:65:7d:09:d7:5c:c4:2c:93:b9:c6:2b:
2b:02:79:3f:da:d6:08:56:2a:96:dd:64:2d:a3:f2:ce:55:7f:
41:c4:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:37 2025 by rpki-client