Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/45a36f7f-1a52-34cf-91b2-82f7226dd6dd.roa
File: 45a36f7f-1a52-34cf-91b2-82f7226dd6dd.roa (raw, json)
Hash identifier: ipaRgJqNGg5DwzsLSUYP1Vo/KKLqO2o8nRmdemPYTAQ=
Subject key identifier: 1B:E2:44:BE:02:0E:D2:6B:4B:B1:97:7A:1D:6D:D1:87:90:C4:F3:17
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858481893A4C4B2EECEB1689AAD80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/45a36f7f-1a52-34cf-91b2-82f7226dd6dd.roa
Signing time: Wed 04 Dec 2024 15:23:46 +0000
ROA not before: Wed 04 Dec 2024 15:23:46 +0000
ROA not after: Tue 04 Mar 2025 15:23:46 +0000
asID: 6312
IP address blocks: 66.231.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:93:a4:c4:b2:ee:ce:b1:68:9a:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 4 15:23:46 2024 GMT
Not After : Mar 4 15:23:46 2025 GMT
Subject: CN=f0fa059f-41b6-40b0-a327-1db168fbb101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c6:1b:d4:7b:82:10:a7:e4:7c:80:9f:06:c0:
60:11:11:00:57:61:f7:1c:56:31:b1:0e:a6:84:3c:
88:74:06:90:cc:2c:c9:3b:47:e5:8a:8d:a9:37:e4:
3e:51:d2:f7:0e:d9:0a:d0:bc:cf:00:45:57:01:74:
8b:12:85:44:25:30:d8:d7:d1:38:51:fa:6c:c5:f2:
f3:01:da:98:d6:30:f5:67:4a:ae:cf:fa:4d:0f:d8:
0e:4e:48:b3:11:30:f7:d4:dd:75:2e:32:21:e3:de:
b7:ba:de:75:73:ad:92:1a:96:0b:71:ff:0a:99:60:
00:b0:8a:53:3d:79:b1:af:48:d8:5b:0f:5c:84:88:
80:40:d5:6c:12:2a:a2:4a:00:62:12:1e:a9:27:cf:
5d:8f:13:62:3b:e2:1b:2f:75:37:36:66:d7:fc:b7:
38:0e:0d:f4:74:49:cd:0c:83:2f:d3:7d:c1:c5:00:
61:04:e8:6c:f2:5d:3a:6f:8c:6f:ae:37:01:f9:55:
da:84:a5:41:72:cb:8c:1e:1a:41:25:81:38:26:70:
d2:d4:35:cb:01:c1:9e:da:ae:87:d7:01:29:c9:a2:
45:e1:4a:bd:79:bf:0f:4d:a3:c1:83:91:28:f3:9a:
c1:81:0c:65:d1:6c:dd:9a:2c:e4:05:15:d4:f2:1e:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E2:44:BE:02:0E:D2:6B:4B:B1:97:7A:1D:6D:D1:87:90:C4:F3:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/45a36f7f-1a52-34cf-91b2-82f7226dd6dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:96:87:e0:52:3f:b1:73:17:92:f1:1a:24:52:4a:f2:8d:6b:
0f:7c:ae:7d:7c:84:f9:cd:9d:af:bf:8d:25:a6:b8:c7:5c:85:
0d:59:ff:98:c3:e6:65:62:45:f5:16:0d:16:fa:4e:79:5f:fc:
a5:3d:2c:5a:bc:91:91:a2:ae:26:a0:d1:ff:5c:07:b2:2d:79:
4f:98:e9:a8:31:29:c8:6e:c4:65:3c:69:32:dc:4c:dd:c2:a0:
cc:c6:b2:a4:e7:99:ff:bd:70:f3:4c:49:e3:eb:87:8b:c4:77:
3e:9d:c5:72:3d:bc:e9:f6:15:16:2e:00:1f:71:fc:b4:92:a0:
31:b9:45:19:b8:a3:71:fd:8c:29:36:55:20:72:e6:b6:6d:7e:
24:d7:af:90:70:f5:ef:52:16:1d:68:b8:f7:60:a2:37:96:d2:
ab:ca:45:b5:cb:30:5b:e3:43:a7:1e:7a:00:6f:9a:db:48:c2:
8d:04:e8:ad:4a:db:f4:c8:00:d2:6a:4d:28:14:3e:ca:20:23:
95:8f:52:25:3c:a2:0d:42:05:54:d2:68:8a:4f:b8:c5:ed:4e:
8c:ae:0e:3e:2e:4b:91:d8:24:0b:1c:af:e4:07:03:82:8c:3d:
7f:16:fa:e2:3b:ef:87:cb:69:b0:21:02:1e:ca:4d:5d:c3:36:
c7:2f:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:03:23 2025 by rpki-client