Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa
File: ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa (raw, json)
Hash identifier: uB+INBjpEvYfCjr/NdyZRdSnJIcSiY3IUkPxpySZ1QY=
Subject key identifier: 20:BE:7F:63:DE:2C:3A:CE:DC:D8:A0:3A:3E:9E:EB:CE:CB:73:1E:60
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848222FEBBAB386D20589F2FD44
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 2734
IP address blocks: 66.35.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:eb:ba:b3:86:d2:05:89:f2:fd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=e0a38f02-1abc-4faf-9c74-a34bb3139588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:cc:8f:0d:2a:66:0b:8b:60:1c:ec:2d:a2:
f2:e2:34:8c:73:30:a1:96:02:5c:ad:04:51:86:12:
2c:46:b3:a3:ad:b4:35:fa:88:91:aa:92:08:0a:f1:
96:c6:cd:c3:8e:48:30:02:15:5d:ac:cf:52:4e:ce:
5a:70:89:3c:ed:3f:16:e4:4c:b4:c4:dc:2c:3a:b6:
5d:0b:ed:40:6b:1e:58:bd:59:90:77:6f:54:cd:ca:
9d:78:46:fd:80:2a:c1:e3:95:f4:a9:ad:69:88:74:
df:c2:86:b1:14:47:aa:e9:65:5e:97:22:bc:24:14:
87:d4:ad:2a:de:e8:37:29:24:f8:f4:d6:23:96:e3:
e6:01:4b:13:a9:a4:2e:72:83:c6:ce:64:28:a1:12:
f6:c1:98:68:a5:0a:51:53:b0:cc:8a:fd:4f:35:05:
0d:c8:2a:2c:0b:d6:10:b2:aa:f0:3f:1c:c5:ec:f9:
db:26:3b:53:cd:90:b8:f3:cb:b6:02:fb:f1:3f:c5:
f4:93:fb:d2:a0:93:d2:1b:30:3c:ae:5f:55:4e:39:
78:2b:46:76:4d:08:da:8b:b4:e5:e8:11:7b:3a:52:
28:d0:eb:48:7a:26:f5:34:03:cb:38:fe:de:61:e3:
eb:62:a7:34:22:29:ef:23:7b:80:18:60:f8:ee:c8:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BE:7F:63:DE:2C:3A:CE:DC:D8:A0:3A:3E:9E:EB:CE:CB:73:1E:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:56:c9:8c:9a:7b:73:4e:5c:9e:16:81:d0:db:c4:da:4f:04:
73:c9:d5:a2:ca:c4:48:a9:7a:16:52:cd:60:74:49:0b:17:6a:
65:8e:8a:df:35:8c:e4:b6:cc:88:57:8c:cc:09:d5:6e:02:13:
00:43:12:75:61:fb:3e:76:4a:a3:18:ee:cc:98:8d:4f:69:03:
49:3b:8e:85:2c:d1:84:20:2f:52:a0:29:e8:38:f1:02:ce:71:
4e:81:f8:76:38:82:f6:f8:09:dc:bc:6f:ef:46:22:55:a1:68:
50:38:67:1d:c0:cb:14:a3:a7:84:51:85:b7:9a:ad:66:41:8e:
dc:27:9c:74:1a:4c:26:45:e0:97:a4:dd:d1:59:fa:29:6c:bc:
78:36:51:22:87:c1:81:22:7b:b6:ab:eb:8d:7f:1d:30:37:f7:
82:7a:54:27:03:a0:92:cc:20:f5:db:01:df:80:90:08:d7:ae:
df:23:4f:13:ca:0b:fd:5b:73:10:2f:fe:3d:b4:aa:24:fe:ba:
28:92:40:c3:44:26:9a:d2:00:35:b4:84:04:c3:1c:44:e3:57:
fb:41:93:ad:90:e4:0b:bb:81:fc:2a:59:6e:ef:ca:bc:7f:07:
97:8b:3e:dd:f1:73:55:7d:c8:90:f9:15:75:cc:3a:d9:fc:0e:
2d:d9:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:24:40 2025 by rpki-client