Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
File: e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa (raw, json)
Hash identifier: ZuHjP2yrrJYGhZCYlqKbLIxyzUzn82GqVliYRDglyTI=
Subject key identifier: AD:00:C4:F2:07:9F:56:FF:20:D4:D8:51:A4:14:18:D3:4A:F0:F1:15
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848116FBD5D19F6DFEFB5F50F78
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 2734
IP address blocks: 66.128.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:bd:5d:19:f6:df:ef:b5:f5:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=3289f7d1-a053-4457-a9d2-237d3a6dca3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:81:c9:6e:99:9d:58:c2:c9:f1:c5:f3:e0:
6d:dc:df:c9:bb:5a:4e:40:aa:26:4c:5b:ce:8d:69:
b8:0e:a0:07:18:6e:76:33:c4:90:9d:a6:64:ae:cc:
60:00:4a:12:63:01:80:8f:3a:c2:3d:5a:fa:4d:d8:
d2:f4:b8:24:c3:27:a0:11:4c:1a:30:f9:b7:65:d5:
fe:1e:f8:5d:e7:77:47:36:34:b9:eb:62:1e:52:16:
b8:9d:df:8a:76:2a:c0:e7:43:5c:0d:2f:2d:55:51:
60:9f:78:a8:c1:e5:ba:df:1b:67:dd:e0:1e:5f:8c:
88:77:48:0b:83:c7:03:86:45:7f:11:e6:82:72:df:
b1:bf:44:c6:1a:6f:bc:c2:4a:5d:26:57:72:ad:7f:
db:8a:be:ba:1d:f4:3a:f3:3f:9e:9c:3c:83:69:bb:
ab:2a:9e:a7:5d:7c:34:7c:ca:97:2b:ed:85:b4:f3:
1b:d7:8b:df:43:f8:07:7e:b8:b3:28:a0:9f:7e:1e:
61:32:98:e2:a2:b5:4d:84:3f:5b:e6:62:fa:dd:04:
4e:9c:0e:19:59:cb:75:9f:35:e7:56:4d:46:1f:46:
fb:9f:8f:a9:55:4a:b8:6f:35:00:c5:d9:f0:ea:ea:
fe:b6:1a:25:56:ea:0e:f4:31:cb:1d:cb:f7:de:65:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:C4:F2:07:9F:56:FF:20:D4:D8:51:A4:14:18:D3:4A:F0:F1:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:ec:0f:2c:2a:6a:e3:fa:af:4f:63:21:2a:10:21:6f:c8:15:
f9:93:96:47:a1:43:a7:b0:c6:57:b0:17:3f:17:f9:b6:08:79:
df:44:a8:e4:d7:27:cc:b9:23:7d:9a:d7:50:3e:fd:5d:a4:4a:
f3:92:9f:ab:02:66:6b:09:f2:55:e2:ea:c2:1d:79:6c:15:4a:
a2:b6:59:b5:aa:13:c9:80:cb:ba:80:e8:ae:04:8d:68:21:7c:
d0:f3:91:e7:bf:ea:4c:b4:48:a8:e1:f2:89:7e:1e:09:24:f9:
64:f4:77:81:c3:bf:07:90:33:be:0f:33:5f:a5:26:76:d7:8a:
4c:84:e0:fd:2b:61:7d:cc:fe:38:99:f0:cb:9f:38:7c:98:83:
d8:bb:56:ad:50:09:64:0f:e7:2d:62:c0:d0:e8:9c:78:4a:9c:
1e:8c:d2:3b:ca:95:13:aa:a6:7f:86:25:96:d8:06:2f:e8:e9:
bb:af:2c:1c:0f:ed:2c:0d:e9:50:ee:a4:41:a8:d8:ec:d6:75:
d5:f2:e8:bc:b0:91:e5:52:c5:d3:7e:7b:ad:32:de:0b:4e:c7:
71:b7:19:48:e7:f9:08:7a:14:03:9c:55:7d:58:dd:b5:15:ec:
2d:5e:c3:82:a7:cb:49:68:72:62:00:df:c5:17:1c:46:bc:48:
5d:9f:ab:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:24:18 2025 by rpki-client