Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/57df41e1-ad7b-33d7-a1ab-e83d3de5d06d.roa
File: 57df41e1-ad7b-33d7-a1ab-e83d3de5d06d.roa (raw, json)
Hash identifier: xkDXFyCrHZy/M9yCmdsv/7bJE9jer1Ari8HmyFDmPPg=
Subject key identifier: 35:6E:5C:F3:70:3E:BF:93:96:8A:D0:0D:0B:2F:B9:3F:B2:AD:87:49
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F432858481DFFE195788F3FAF363A4A80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/57df41e1-ad7b-33d7-a1ab-e83d3de5d06d.roa
Signing time: Fri 06 Dec 2024 14:00:51 +0000
ROA not before: Fri 06 Dec 2024 14:00:51 +0000
ROA not after: Thu 06 Mar 2025 14:00:51 +0000
asID: 2734
IP address blocks: 66.35.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1d:ff:e1:95:78:8f:3f:af:36:3a:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Dec 6 14:00:51 2024 GMT
Not After : Mar 6 14:00:51 2025 GMT
Subject: CN=f7c57797-1cd5-4fca-b31f-84bd772172f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:41:5e:c1:7b:ed:f0:a8:b4:a4:18:5f:13:
04:95:18:3e:3b:4c:76:a7:ca:ba:1a:51:91:7f:27:
0f:48:11:2d:c6:ee:60:d2:40:c4:a9:06:ef:38:c3:
aa:fb:8c:da:ae:18:d1:bf:9e:89:a2:7d:2e:27:99:
7a:f9:0e:bb:f8:69:bd:17:4c:7d:ff:0b:e8:6b:47:
e9:5a:60:83:c9:21:5a:e7:fb:77:fa:77:1f:b7:cd:
e1:4c:80:6f:9f:23:47:d6:09:6b:fa:43:dc:5a:b7:
4b:c8:17:9d:f6:00:3e:f2:f8:11:5c:1f:b4:4c:af:
46:1d:ea:7b:00:da:60:be:fa:38:47:56:22:bd:60:
a2:69:ca:4f:95:c2:0e:d9:9d:52:b3:a7:75:58:10:
67:bd:b0:fe:a6:c6:3a:03:31:bb:f5:d2:8d:21:a0:
7e:a1:1b:94:71:66:a3:77:29:08:8d:f1:f2:8f:b4:
91:e5:31:24:13:91:5d:ee:b2:73:c2:4b:c0:af:78:
80:91:07:1c:1b:47:41:39:98:2a:55:98:5c:f3:8c:
6a:da:7b:99:74:eb:81:d1:50:1f:69:c9:4f:5e:a1:
69:04:db:f6:c6:b5:d7:ac:a3:57:36:4f:54:8f:90:
7e:49:a0:09:27:7a:42:c9:aa:cc:7f:04:fd:f6:df:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:5C:F3:70:3E:BF:93:96:8A:D0:0D:0B:2F:B9:3F:B2:AD:87:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/57df41e1-ad7b-33d7-a1ab-e83d3de5d06d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:28:bd:ca:41:6e:01:0f:30:81:27:83:1d:90:47:c7:cf:8d:
72:d3:9f:4a:b7:95:d3:d7:b3:f1:c1:dd:cc:de:95:05:7f:f5:
72:a9:00:20:4f:d9:78:9a:87:f3:ac:1c:25:43:e4:4c:50:f3:
db:91:72:f1:bb:c9:00:e6:9a:2f:ec:5f:c2:22:c8:04:ce:07:
06:26:3b:b7:d6:c3:0c:24:cd:3c:83:6c:f2:13:b3:3e:c9:26:
e8:af:09:7c:07:33:14:31:be:db:b9:13:7a:dc:bf:45:2e:a7:
e5:43:73:ce:7a:8c:45:3a:a0:39:9e:63:55:63:03:18:c2:a2:
26:12:60:5a:2a:be:49:ae:dd:3f:cc:29:dc:89:96:c1:03:b0:
78:2b:4f:e0:0d:f5:7c:c6:2b:5b:3e:d4:c4:5e:c3:e0:28:c1:
6a:4e:50:40:2c:b8:60:93:dd:b0:42:60:30:30:9d:46:46:84:
de:a7:c5:a7:81:f3:29:66:71:d7:b1:35:87:ab:9d:c4:04:7d:
db:0e:46:4c:01:9d:55:7a:17:25:26:f3:a5:06:f4:fc:30:b0:
ec:c9:56:41:7f:86:76:59:ce:27:5b:ff:b8:d9:51:ae:c6:63:
2c:d6:60:3b:0e:3b:a7:32:6d:b1:24:9c:81:a6:dc:43:7d:3f:
ad:84:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:15:36 2025 by rpki-client