Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa
File: ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa (raw, json)
Hash identifier: k6JkSJo4wrHeKX0afm6gRDFwaXT3rya0UUcwIQYbikc=
Subject key identifier: D9:F5:7B:73:1C:48:AC:31:F2:ED:7B:FB:98:B9:69:AB:C9:AD:46:AD
Certificate issuer: /CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff
Certificate serial: 010D0C9F4328584821C19BF7F81FF6D21E66FA00
Authority key identifier: 35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa
Signing time: Sat 07 Dec 2024 22:18:40 +0000
ROA not before: Sat 07 Dec 2024 22:18:40 +0000
ROA not after: Fri 07 Mar 2025 22:18:40 +0000
asID: 54381
IP address blocks: 66.180.72.0/21 maxlen: 24
199.122.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:21:c1:9b:f7:f8:1f:f6:d2:1e:66:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff
Validity
Not Before: Dec 7 22:18:40 2024 GMT
Not After : Mar 7 22:18:40 2025 GMT
Subject: CN=cb04bab2-64d4-47e1-86c1-63777fa2b4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:02:22:94:6b:46:ca:cc:06:06:16:cc:bc:ea:
2a:73:77:b9:3a:e0:ca:05:38:86:2d:a6:f3:aa:19:
7b:36:01:76:50:17:70:6a:4b:47:c6:bd:f0:53:59:
58:9a:40:36:8a:8f:ff:3a:a2:03:d9:fd:27:12:b8:
13:db:55:1d:a3:35:99:64:93:21:b9:76:a9:7a:21:
fd:c9:13:31:fd:0d:c4:76:ca:30:a9:2e:6d:30:21:
4b:4a:67:6a:b2:39:af:05:a4:a1:fa:43:21:bd:aa:
bf:2a:e7:f3:a8:1e:99:3b:c1:f9:8d:7e:55:3d:0a:
17:53:ba:a8:f9:d1:81:a9:60:9c:9d:8c:02:4b:80:
66:7c:a9:b4:c8:16:59:cd:ec:6e:1d:da:60:90:c7:
c8:44:1c:2c:eb:77:2b:f8:c2:ca:fe:24:34:16:c1:
e2:71:65:ee:fe:dd:fc:d9:17:69:2b:44:30:c2:fb:
eb:ba:42:7c:61:84:95:b0:4d:c7:50:f5:04:01:14:
21:e7:89:05:82:07:ca:8b:87:98:71:f0:e7:09:dd:
fa:25:f1:7c:fe:75:a7:c7:e6:46:d7:32:10:51:7e:
2f:40:9e:f7:fb:fa:54:25:99:e7:8d:ec:24:fa:b2:
66:8b:4b:5a:73:58:c4:8a:17:38:10:58:6c:70:c6:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:7B:73:1C:48:AC:31:F2:ED:7B:FB:98:B9:69:AB:C9:AD:46:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.crl
X509v3 Authority Key Identifier:
keyid:35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer
sbgp-ipAddrBlock: critical
IPv4:
66.180.72.0/21
199.122.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:f3:59:52:cf:b7:75:f8:e2:83:dd:d2:cf:3a:57:65:23:d2:
6f:96:a0:90:45:af:99:e2:ce:fd:a3:3a:d3:04:d6:53:ed:43:
56:a0:18:c1:f6:1b:66:21:3b:97:19:f6:6d:40:27:c1:59:59:
15:ce:78:c5:d2:15:29:29:b1:50:e2:a9:d9:ab:31:72:85:4b:
f8:0e:3a:b0:8e:84:d9:ff:84:6c:92:d1:2f:ce:ae:f8:c6:30:
f9:27:ab:c0:8e:50:68:15:d7:07:cd:60:83:d9:cd:43:83:b8:
f0:41:8b:ca:6a:e6:70:37:a3:d8:92:75:c1:62:87:96:2e:58:
9b:96:66:da:6c:1c:f4:1b:5e:a8:48:da:c6:44:70:72:56:d2:
ed:01:fb:f3:4a:3f:e0:60:1f:b1:59:6a:50:d6:24:b3:8d:62:
b3:64:b3:3a:4b:60:d6:89:64:0c:6c:db:d3:19:09:67:64:b6:
76:a4:17:01:4c:f9:78:ba:cb:fb:6b:c5:38:e2:7c:1c:cd:c9:
60:8b:f1:93:f4:14:a3:a5:b8:e7:da:b4:32:22:77:97:0a:c7:
6d:8f:e0:eb:26:28:b0:a8:86:5d:46:84:bf:11:ba:19:47:da:
fd:1e:43:80:6f:6d:bc:26:35:15:9e:ec:1c:0d:ac:0e:cc:53:
fd:c9:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:20:50 2025 by rpki-client