Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/1e204b9c-d198-320b-b509-fd1c19879317.roa
File: 1e204b9c-d198-320b-b509-fd1c19879317.roa (raw, json)
Hash identifier: BQ5eVOwiQ2GfOIYLxZLdSaJgGbY30/H67JK7gVxdZYc=
Subject key identifier: 5A:1A:22:EB:BB:15:79:74:0E:94:14:34:F4:85:CE:F6:90:24:D0:7D
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848116FBD7EBC10D0CD8B22B740
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/1e204b9c-d198-320b-b509-fd1c19879317.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 2734
IP address blocks: 66.128.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:bd:7e:bc:10:d0:cd:8b:22:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=cfe9286d-b338-4dca-904c-d09a760df186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:44:d1:8a:ad:80:10:77:9b:91:d6:cf:4b:
13:ad:1e:96:0b:1c:f6:a1:37:b5:c8:e8:85:42:66:
4b:06:97:87:7d:f5:84:51:3d:db:11:42:52:11:56:
c3:c7:08:ae:b2:c1:17:a2:fb:fb:74:c1:4d:d8:f2:
a9:52:cc:9d:9a:33:57:a2:3a:43:20:5f:a3:b4:28:
1d:0a:f5:94:ac:31:20:35:b3:d4:34:fc:4f:e2:f6:
11:3b:d0:ee:01:98:c1:a3:58:27:fd:1b:ed:f5:45:
d1:1b:18:0f:8e:c2:c0:97:da:b4:59:38:d8:56:44:
13:52:f1:98:ff:a2:95:29:ec:73:ae:12:0d:e2:93:
94:f0:d8:90:93:fd:a3:d8:08:f8:13:9c:da:19:00:
db:1e:b2:20:a6:df:cd:5b:df:5c:c5:be:44:32:53:
16:2f:b1:82:fb:fa:d2:e9:bd:89:6c:37:d7:08:06:
75:46:68:46:88:c5:18:aa:ed:79:95:2e:d7:87:be:
12:69:08:f6:52:12:dc:33:41:6f:60:eb:cf:2e:c7:
c6:67:40:20:e7:21:52:3b:ea:61:ca:ae:fa:da:c3:
4e:e9:d8:a3:2e:ae:f6:6a:22:5c:98:e9:0d:28:dc:
73:61:e8:3f:aa:bb:a4:36:d7:ea:3f:b6:8c:a7:6e:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:22:EB:BB:15:79:74:0E:94:14:34:F4:85:CE:F6:90:24:D0:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/1e204b9c-d198-320b-b509-fd1c19879317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:55:38:a0:71:97:20:90:3f:01:d7:41:4c:76:ae:37:61:1c:
9c:69:0b:42:12:d1:20:31:2f:fb:4e:6a:38:16:dd:85:17:11:
88:85:36:42:59:73:93:d3:c9:0b:b5:19:32:4b:71:e2:c0:0c:
da:d6:2a:13:05:85:0e:e5:1c:a6:2d:49:bf:7f:ca:89:ff:04:
70:a3:f4:1d:3f:8c:2f:65:27:c8:23:44:79:3c:55:03:81:2c:
84:19:fa:5f:bb:c4:2c:b4:ec:41:55:b5:e1:9a:af:78:6e:15:
b0:21:1c:87:92:54:2c:92:1b:2b:c7:ef:51:ae:9e:46:a9:e1:
47:f7:29:65:32:2f:ed:52:c1:e5:e6:13:04:3a:23:14:08:8d:
9a:12:c2:6f:99:e0:c2:53:22:c0:5b:e8:3b:81:ae:1e:7d:40:
82:80:63:0d:e7:a2:b5:65:4d:9b:ad:e7:01:f0:6e:78:61:59:
d0:de:96:e0:89:4f:51:88:23:21:bf:97:c3:28:26:56:6c:c9:
31:07:4b:0a:13:0f:c8:ad:2f:2d:1d:18:04:c7:73:67:d0:ea:
7e:af:75:ac:fd:1e:e2:9f:d8:be:00:2c:7c:7f:3a:76:f1:8b:
8c:0f:5c:ed:3c:51:d6:68:e6:11:f7:ab:f1:b2:e4:2b:ce:57:
38:28:55:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:28:45 2025 by rpki-client