Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa
File: bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa (raw, json)
Hash identifier: M9Y5Z9w8JJQiXyox8Wu/1t5sX94orSOf7NSTpTMLf9E=
Subject key identifier: 41:C7:92:EF:A3:5C:62:E8:4E:B3:AA:69:50:E6:1A:FF:2F:54:F4:F9
Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial: 010D0C9F43285848530AF53CF7CF71013BF486A0
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 396417
IP address blocks: 66.203.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f5:3c:f7:cf:71:01:3b:f4:86:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=1d30cf55-1045-4127-9063-08b34531ec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:08:9c:3f:31:3f:74:53:3f:8e:35:86:1c:
99:ee:cc:a1:8d:29:de:b7:81:ef:fe:aa:93:7b:06:
78:40:69:7f:7a:dc:c0:c0:58:58:82:57:d8:56:ab:
aa:11:72:d8:50:4f:e2:28:b1:d6:17:6d:7b:af:f5:
ae:b2:fb:b9:08:f4:16:5d:4d:56:9c:fe:e0:85:74:
b2:b8:40:b2:26:1f:e0:f1:ac:5c:fd:ec:f8:03:b1:
64:57:13:1e:6a:2c:67:8c:23:ed:f2:6d:d3:a5:56:
dc:1d:d4:36:09:84:43:82:7b:5a:10:c6:75:fd:44:
e4:b4:7f:30:bb:58:3b:eb:8f:9a:10:53:2c:c1:7c:
fe:9c:2d:59:88:7e:b5:20:60:d2:d3:49:db:dd:10:
c6:6b:71:76:12:d2:f6:32:04:d9:61:b9:a4:0a:2d:
52:d4:5f:dc:d4:b7:35:08:de:78:13:4e:60:a5:84:
3e:97:fe:64:e2:62:04:dd:76:94:cb:96:29:c8:1f:
c6:95:5e:6e:7f:6a:2f:18:b3:08:07:b6:f3:c9:39:
c6:43:e7:40:20:f3:7e:02:a6:47:3c:5c:b4:a6:6c:
87:34:ae:0c:6b:4e:c7:1f:b0:1f:15:ad:b6:3d:3e:
0b:74:c0:0c:ac:66:ac:a2:93:5a:db:1e:f7:4e:98:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C7:92:EF:A3:5C:62:E8:4E:B3:AA:69:50:E6:1A:FF:2F:54:F4:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
X509v3 Authority Key Identifier:
keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
sbgp-ipAddrBlock: critical
IPv4:
66.203.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:a2:f1:8b:13:b9:06:be:fb:38:de:c1:42:5c:f7:c6:b1:77:
54:92:9a:0a:0b:38:b5:9a:f0:3a:b7:e0:1c:d3:4c:be:1c:7e:
c5:94:a4:92:46:81:8b:f3:dc:e5:20:0d:e8:6c:33:22:44:e9:
00:83:10:a8:a9:77:82:74:9f:95:5d:a0:90:75:6d:1d:1d:15:
a4:87:df:23:7a:d5:d9:94:2b:00:7a:61:40:fc:e6:d7:4c:72:
40:42:9e:c0:f6:47:f7:e6:57:78:ee:98:d2:b3:33:6c:43:cb:
ff:c6:8e:ad:4b:a3:a9:f1:22:60:a9:ac:af:82:12:4d:11:2c:
c2:12:d2:8a:f2:84:34:3c:3c:67:5f:2e:e5:d8:0d:7c:da:a0:
ef:cc:9b:a3:18:72:92:89:95:c2:45:4a:99:e4:70:67:2a:67:
7c:b3:09:f3:40:98:3a:98:8f:94:18:9c:25:16:ca:86:99:01:
05:97:b8:8c:e4:9d:53:23:fe:c2:8a:10:9a:32:5b:b3:56:f9:
61:3e:dc:b3:37:d0:6e:1b:90:33:fe:43:94:ea:4a:31:cf:5e:
52:cd:9e:22:ae:c2:b8:21:2e:3b:84:e2:59:58:db:6d:52:e9:
b1:7d:eb:da:b7:0d:8e:a3:67:ad:cf:07:ce:a6:90:d2:87:0b:
f7:ba:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:52:41 2025 by rpki-client