Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/941a6f47-59af-3c1c-8104-bf3efddc1d95.roa
File: 941a6f47-59af-3c1c-8104-bf3efddc1d95.roa (raw, json)
Hash identifier: 2ny84BNGNPHDI/A+eTyNczFpBbdt1yvVVtuf7P117PE=
Subject key identifier: 3A:00:09:0D:64:1A:EB:E0:3D:CC:C2:C1:23:CA:06:57:67:7C:FB:6B
Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial: 010D0C9F432858487A2084CBE10CE21E465B2D20
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/941a6f47-59af-3c1c-8104-bf3efddc1d95.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 66.197.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:84:cb:e1:0c:e2:1e:46:5b:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=876dc494-17e2-4a83-b907-4b70f1058be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:1d:87:12:e5:f2:30:ad:89:52:af:7e:96:
d9:1b:f1:52:19:a6:a7:3a:5b:ae:de:c9:75:66:6e:
52:43:f1:56:6c:4f:21:35:74:a0:14:b6:ae:1c:02:
13:be:ea:5a:9f:26:bf:30:3b:87:d8:a1:a8:b5:03:
3c:1e:15:17:c7:35:ea:82:9a:99:ef:94:ce:92:51:
45:33:88:bd:17:9f:04:05:f1:a8:c7:8e:36:4c:af:
c0:58:88:68:7a:92:07:6c:5b:47:b7:b9:d6:38:4f:
bb:f0:b3:32:1c:72:9c:2a:fe:2e:30:d9:fa:d2:2b:
0d:a8:ee:28:68:cd:14:56:25:18:25:e3:0b:78:cc:
cd:f4:ae:69:4e:a3:34:fb:0e:34:84:36:68:e5:04:
62:b3:41:ab:d2:cb:21:af:67:1d:a4:4c:c4:e3:8d:
31:b1:30:fa:96:19:b7:85:5a:8e:44:20:ef:8a:1b:
49:fe:13:1d:47:8c:37:74:a2:e5:69:aa:23:c7:f0:
26:89:e8:88:67:7f:ac:f7:ed:d4:45:17:8e:77:6a:
7d:b6:6e:27:34:4e:45:3a:86:35:e6:1b:7c:c5:dc:
c0:43:bb:85:51:03:50:16:78:9b:dc:4e:ad:a1:ec:
f9:6e:db:19:e6:96:d2:99:f7:16:3e:fb:9d:b9:e8:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:00:09:0D:64:1A:EB:E0:3D:CC:C2:C1:23:CA:06:57:67:7C:FB:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/941a6f47-59af-3c1c-8104-bf3efddc1d95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
X509v3 Authority Key Identifier:
keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.197.184.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:0c:a2:5c:a6:d7:bc:17:b7:9a:5a:e4:ce:71:88:97:23:e7:
4f:b2:ea:60:66:41:fa:89:3d:e5:c5:af:71:a6:c6:f6:f9:1d:
d8:f7:92:86:9c:de:b7:0e:08:e8:66:d5:82:56:0f:9c:a6:5a:
ac:75:61:28:77:64:19:1f:0c:a3:d5:7d:ac:8b:60:4e:70:0d:
56:cb:ac:1b:91:f3:37:92:a2:db:fe:99:13:12:d9:01:05:ae:
b4:ee:ee:1f:b1:57:8d:40:7a:43:2f:9d:2d:21:57:2f:72:b9:
17:90:ad:5e:25:13:f3:94:05:b2:04:3e:81:cb:a0:66:03:8c:
7e:b1:62:c0:48:64:44:fe:c7:77:27:52:f2:6e:3d:28:d5:e1:
12:d4:81:67:2d:50:c4:9e:ab:22:01:b9:96:6c:c5:a6:cb:2c:
d5:7b:ca:05:cc:41:07:ed:99:48:f1:fb:f9:b0:26:79:d1:fc:
00:12:84:ae:bf:02:e9:cc:47:b4:35:3e:78:a7:aa:ab:ac:60:
7e:02:35:53:b5:53:05:66:5e:90:76:b3:31:c4:3a:02:88:3d:
91:70:e7:00:a3:57:f3:4e:ca:1c:d9:5c:92:4a:f7:e7:6c:a7:
46:82:cc:f8:74:f6:10:86:0b:bb:05:41:40:8f:79:6c:a6:bf:
f6:76:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:30 2025 by rpki-client