Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa
File: d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa (raw, json)
Hash identifier: de/jn8X6BIl1iqAY7rVqmJYWb9Tgzgo8yMhpRyOEBi8=
Subject key identifier: 6F:D5:C8:C8:0D:22:AD:15:CF:3A:4D:86:0A:DC:20:B8:C2:17:C4:9B
Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial: 010D0C9F432858480EA5091405B875C625717100
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 7782
IP address blocks: 66.230.80.0/20 maxlen: 20
66.230.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:09:14:05:b8:75:c6:25:71:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=f67d6182-f108-4b46-8e68-70c8b1e7c451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:1b:df:fe:8d:b5:06:83:7c:34:69:27:61:
70:35:6a:b4:ea:d1:f6:ea:18:6d:6f:93:df:11:d6:
6a:bb:d7:2f:7d:53:a9:b8:42:83:a9:0a:dc:a7:43:
2e:47:e9:35:ca:0d:3b:23:b7:1d:a4:3d:c1:9e:3d:
a0:cd:73:ee:58:87:00:50:cb:59:3e:99:74:c8:f4:
7c:46:e7:1b:7f:47:bd:be:09:ec:55:0d:f0:32:ea:
74:3f:64:53:5b:7c:df:f8:25:5b:98:33:de:29:c1:
fb:63:f5:ec:09:32:74:36:fe:ca:a0:14:d9:9e:c8:
38:0f:08:49:18:18:64:c1:ab:c2:68:1b:58:a2:2f:
04:00:fe:4b:f8:32:e6:4b:8b:96:1c:00:83:f6:30:
87:d6:dc:94:43:7c:ef:5d:c9:1d:b6:bc:8a:58:8c:
c0:85:54:90:80:bc:77:29:19:67:fd:bd:13:cf:b6:
08:8d:87:cf:77:3d:eb:f3:38:fe:f1:a9:2d:11:5d:
f6:d5:f7:f0:73:77:71:51:ac:60:8f:cf:31:2a:c0:
dd:a0:46:2b:d2:fa:73:fb:40:e5:53:97:91:c8:47:
6b:bf:72:47:ff:77:bc:76:40:5b:82:a6:bc:d7:12:
4c:8f:67:cd:4f:92:b5:66:da:e3:94:60:89:56:4e:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:C8:C8:0D:22:AD:15:CF:3A:4D:86:0A:DC:20:B8:C2:17:C4:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
X509v3 Authority Key Identifier:
keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.230.80.0-66.230.127.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:38:80:d5:96:0c:57:8e:0d:9f:e4:3a:18:f7:cf:76:52:62:
66:5b:60:de:e1:d0:87:dd:3e:60:6c:2d:b8:d4:50:10:b3:de:
79:48:57:ca:70:98:ad:c6:cb:64:39:43:17:70:34:18:29:38:
a1:5f:5c:4a:5c:ac:f8:b9:c7:e7:48:ee:7c:a7:47:57:cd:64:
b8:65:8e:f4:b9:3e:50:41:83:2b:6a:ba:c0:47:78:27:0c:84:
0f:c5:ef:59:1c:c8:34:51:a0:62:d4:57:12:a3:94:63:47:67:
a5:0a:18:b8:fc:86:f0:d8:8d:a9:7a:b0:a8:c6:b1:5b:32:28:
a8:12:2c:be:0f:a2:66:9f:27:71:c4:5a:3d:57:fa:39:72:5d:
a7:fa:4d:99:04:24:66:2d:27:b8:4d:d2:14:7d:d4:33:23:57:
84:0a:3b:42:34:7b:68:15:fb:f0:6e:19:01:be:71:27:49:54:
9a:d2:b4:2e:ea:c3:e2:92:f2:fc:8a:8e:69:82:ad:7b:cf:a7:
da:3a:0a:2d:d5:ea:dc:bc:10:cf:ef:a1:c3:18:24:da:d6:ef:
52:a5:af:87:24:95:13:fd:11:d4:99:16:0a:9b:c7:a5:8b:54:
0e:a0:77:5c:d3:22:3e:1b:e0:7a:40:b0:72:fb:5b:af:c0:6f:
c3:fa:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:35 2025 by rpki-client