Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa
File: a661538f-4136-32b8-a899-88104881e2db.roa (raw, json)
Hash identifier: E1JEEtaSenVh719W4ETt4pJtl0b1KDBL78nlCj5/dYc=
Subject key identifier: 16:F7:EB:6A:67:C4:78:37:04:C1:A3:B2:89:8B:22:12:99:BE:46:10
Certificate issuer: /CN=d64341ea-4a31-4684-bf89-237774f5a468
Certificate serial: 010D0C9F432858487A20826CBFF0D1A1B6D61300
Authority key identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 66.22.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:82:6c:bf:f0:d1:a1:b6:d6:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64341ea-4a31-4684-bf89-237774f5a468
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=cf67060f-5c12-4572-8599-193597780356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:3a:d8:0b:ce:ef:1f:bb:18:96:c5:fa:90:
c0:00:79:24:5d:46:89:85:02:e9:0e:72:72:52:7a:
72:7b:d0:28:14:96:f1:ee:c7:07:18:70:3b:d8:28:
cc:bb:c6:0a:53:d4:87:da:15:18:99:02:2e:15:ae:
54:d5:c5:5a:c1:dd:8e:25:b0:50:73:ce:f7:5b:48:
8f:a9:b4:c4:7e:f5:59:3e:6c:25:60:c8:27:02:8b:
39:fb:8a:0d:8e:d3:e2:d6:cb:0c:37:7b:e5:8d:b7:
5d:db:1c:c0:73:a0:0b:78:15:9c:c0:f4:7a:5f:2c:
c5:b5:37:e6:09:9e:34:e2:27:21:ee:3a:c7:34:d6:
3e:56:32:2b:50:1c:dc:60:a2:8c:4a:ff:3b:b9:d1:
de:f3:a0:ee:07:cd:26:8a:2e:6d:35:a0:ce:2f:7a:
5f:d2:7b:bf:51:8e:ad:21:eb:ec:99:b7:f0:a6:13:
18:42:f2:c8:b5:3e:58:7f:d2:61:5d:af:5e:f8:2b:
71:b1:ed:65:1a:46:74:1f:30:01:58:b9:1e:82:79:
c4:c4:b9:6b:de:d6:f3:86:fb:d0:6c:fd:7c:9e:0e:
5c:cc:7e:13:ca:73:f2:48:d6:fb:21:a9:33:da:4e:
53:0d:ce:bf:31:89:05:f5:d1:77:e2:92:f5:74:c7:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:EB:6A:67:C4:78:37:04:C1:A3:B2:89:8B:22:12:99:BE:46:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl
X509v3 Authority Key Identifier:
keyid:A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer
sbgp-ipAddrBlock: critical
IPv4:
66.22.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:44:a4:80:d2:cf:b5:45:b8:a9:ff:9f:30:df:36:30:3d:a9:
1e:e2:4b:3a:7c:3e:9a:99:93:81:8e:32:19:70:e7:b7:dc:27:
a6:e9:f9:6b:ee:b5:b4:6f:96:fb:3f:41:23:43:f0:45:e6:e8:
50:cc:f4:e9:a6:bf:ec:64:f4:f1:d4:43:d4:ab:5e:2f:55:f8:
6b:a5:28:43:62:e7:ce:fa:d3:49:65:c2:24:8e:50:cd:a8:e0:
46:b9:36:ce:3a:de:23:01:29:ea:68:0f:9b:70:cf:ae:61:b0:
ce:60:23:66:67:4e:51:3f:d1:49:90:0f:d0:67:8d:d3:0b:0b:
aa:0f:bb:6f:43:aa:ff:be:91:b0:7f:02:d5:51:27:c4:b1:1d:
04:83:4b:91:4d:f9:04:6a:3e:6c:9d:44:89:06:9a:08:82:6e:
3b:c5:57:51:5e:e7:80:39:77:6b:97:1c:0d:5a:ec:20:ce:67:
7f:98:dc:22:3b:27:76:9a:cc:c6:83:7a:a9:de:a7:4d:48:67:
44:49:bb:99:85:89:fe:5d:de:66:e1:df:03:4a:88:15:77:68:
d4:ab:49:0a:52:9f:d0:49:66:2a:a4:18:6e:96:81:43:a8:21:
98:cd:b9:16:95:03:4f:80:7f:b3:07:bd:51:b7:da:39:ed:0a:
c6:4e:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:47 2025 by rpki-client