Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa
File: 3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa (raw, json)
Hash identifier: eLQlJhJoduJ996neh9JV4gw7IwKoNA8gON7df12MqWo=
Subject key identifier: A3:D3:E7:0D:4A:63:AD:98:9F:93:13:CA:37:2B:3E:B6:E1:81:F6:19
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858488E23FACA1C4EE61249E18000
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa
Signing time: Wed 15 Jan 2025 18:04:10 +0000
ROA not before: Wed 15 Jan 2025 18:04:10 +0000
ROA not after: Tue 15 Apr 2025 17:04:10 +0000
asID: 18785
IP address blocks: 66.231.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8e:23:fa:ca:1c:4e:e6:12:49:e1:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 15 18:04:10 2025 GMT
Not After : Apr 15 17:04:10 2025 GMT
Subject: CN=77354ec3-0c04-44d8-9e00-0f4c1b3ebe9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:7d:93:26:f1:30:e4:25:fc:06:17:34:4a:
2e:88:b7:82:ec:d8:47:de:09:a4:cb:e6:76:bc:ae:
3b:44:e4:62:4c:4d:0f:3f:18:b0:2f:09:8d:e3:a4:
b3:2e:65:4e:89:26:07:fa:1a:bc:95:35:0c:17:6e:
aa:7e:2a:55:35:03:6f:94:af:05:3d:af:10:6c:3b:
df:c2:4e:81:71:6f:04:19:af:33:96:55:18:c9:84:
49:db:e5:27:eb:2d:f5:70:87:2c:33:4b:df:ae:86:
0d:53:6d:a2:18:ed:78:36:f1:db:09:f8:38:29:98:
4d:61:78:8d:cd:4b:8d:7c:76:8f:56:4c:16:87:2a:
77:f9:de:0b:18:43:38:e9:8e:e1:33:6e:f1:d9:af:
6b:83:4e:57:f0:e1:a9:c6:19:a3:76:f4:1c:4e:95:
00:1d:60:e4:32:93:98:1d:4a:d2:02:2c:75:22:51:
aa:92:23:c2:3c:ba:76:68:16:f8:67:74:ef:22:15:
02:2c:0d:c5:70:c5:5d:8e:af:55:d7:94:07:0e:6c:
d0:a0:fb:a3:94:8f:7a:4e:bc:5d:8f:cc:dd:d1:bf:
40:94:98:52:e2:18:79:69:81:32:f8:81:21:9b:73:
87:c2:22:e5:04:fb:2c:63:59:27:2c:eb:d7:46:1c:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D3:E7:0D:4A:63:AD:98:9F:93:13:CA:37:2B:3E:B6:E1:81:F6:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:88:25:bb:49:5b:f1:85:0d:c1:2a:81:b9:40:ad:3f:0d:5c:
07:d5:ca:b1:c0:bd:5b:70:86:c0:eb:ff:21:a8:58:64:d0:1b:
f5:ac:42:17:f3:67:59:c0:13:ca:b5:0d:de:62:74:72:f8:9e:
48:4c:5c:f9:c9:4b:f0:4b:b8:11:b4:e0:ba:9a:22:dc:6d:47:
ad:5b:28:ce:3b:0b:c0:0a:5b:0c:b3:26:86:e0:ea:f1:2c:e5:
15:80:47:c5:0b:a6:31:a5:71:65:15:2d:e3:1f:0d:83:9b:e1:
5f:33:01:fd:4a:b1:92:14:71:f6:15:b8:46:0d:27:ae:a9:9c:
f9:a3:99:fd:10:f3:9e:96:f5:04:2c:89:4a:4b:60:8e:27:4b:
de:59:95:96:4e:3d:e5:56:eb:a7:dc:32:be:24:b9:6b:02:10:
36:c8:5c:41:4b:07:56:18:a7:10:6f:e7:88:14:fa:ee:99:fd:
c3:6b:91:31:21:5c:88:15:5c:75:e1:c0:e5:8a:15:ea:d4:da:
54:d9:c4:cf:3f:08:9f:e8:35:2a:7c:a7:bb:98:85:e6:69:59:
4a:b6:34:74:01:d6:f3:bb:05:80:66:ed:bd:e4:9a:74:48:25:
66:5d:13:23:2d:b5:45:d2:f6:9d:72:e3:1a:22:f2:02:5e:8b:
17:43:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:12 2025 by rpki-client