Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/735fd1a1-acec-3398-9376-ac6c9bb36549.roa
File: 735fd1a1-acec-3398-9376-ac6c9bb36549.roa (raw, json)
Hash identifier: X2y7nmYMxqZkYosrOv6JRBR/5CizdY6abSU5E4+RPH0=
Subject key identifier: AA:A5:53:5D:C4:EF:72:32:9B:04:06:C9:34:80:12:03:6E:7B:C6:C3
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848467ABFF46973D98429C87480
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/735fd1a1-acec-3398-9376-ac6c9bb36549.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 66.231.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bf:f4:69:73:d9:84:29:c8:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=46066cd9-a520-41f9-a2b3-02019db0d096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:3b:1a:df:04:eb:8c:9b:77:06:44:4d:89:
3d:34:fe:c4:b7:5d:e0:04:9f:67:36:e1:38:0a:05:
85:76:ce:b1:34:26:63:c0:ed:1c:c5:f2:46:f2:9b:
64:14:46:a3:72:a7:0f:5b:d3:4f:7e:ca:c1:23:49:
98:f1:a4:53:7d:a6:bc:e3:8f:94:7a:9f:0b:1b:78:
4b:22:d6:79:35:9e:4d:01:88:3b:a5:71:d7:3b:af:
11:a1:e9:5e:56:30:63:77:88:21:7a:6b:53:99:f2:
a1:53:64:b0:d1:b0:55:51:9a:0f:6b:9f:6a:b5:64:
c6:02:ed:73:fe:be:78:20:b3:22:59:e9:d2:91:e1:
8d:46:69:63:02:89:b9:34:7e:6a:7e:89:0f:61:c1:
11:de:b2:5e:8a:f3:4f:24:cf:24:d3:72:9e:89:d2:
31:d9:76:5f:1c:c4:96:06:30:7e:8a:a8:76:8c:8c:
59:a4:d2:ae:62:dd:91:94:a3:77:45:01:ef:7e:cc:
99:d3:0a:4e:4a:c7:cb:e2:69:f6:6c:5c:9a:00:64:
2d:1b:e1:bb:8f:69:95:ab:59:e5:66:0c:30:57:f9:
9a:2b:3d:57:fc:9a:a2:1d:c7:ea:a2:9c:a5:86:dd:
d8:4e:1a:7c:cd:c0:58:18:ea:4f:c5:3b:42:de:e4:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:53:5D:C4:EF:72:32:9B:04:06:C9:34:80:12:03:6E:7B:C6:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/735fd1a1-acec-3398-9376-ac6c9bb36549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:09:3c:f8:be:ef:15:d0:d1:51:41:75:5a:17:22:62:24:c7:
7c:fa:31:24:09:b6:08:42:3a:70:6a:e4:f5:23:3e:e8:40:cd:
ed:b3:53:84:ec:67:e3:c6:71:88:35:84:be:3f:38:45:01:06:
2d:14:8d:64:d0:09:48:56:d8:90:ce:ef:9f:82:f8:5e:a8:dc:
ac:a8:d5:f9:eb:b3:c3:c9:19:71:49:e7:e8:3e:30:f1:07:18:
d1:12:5d:d4:b4:c5:04:72:72:55:be:c8:5b:2e:aa:66:6e:9e:
9a:53:b4:39:85:ef:4e:d2:44:77:51:5d:55:31:17:34:03:9f:
a1:d3:77:90:44:96:3a:77:30:c1:55:35:a2:10:a0:ca:22:b0:
47:48:2d:43:d9:84:38:55:44:f9:9f:c7:9d:5e:9e:36:55:5e:
a1:b1:5e:59:bf:de:bb:63:3d:cf:23:39:08:df:73:ba:d4:4c:
f9:f0:84:7f:e8:92:6f:ad:f3:e7:2c:e9:76:e6:b0:1b:46:f9:
f3:88:02:1b:56:30:f8:08:57:8a:09:4d:81:9f:97:dd:bf:e8:
d1:9f:cb:e8:29:62:3d:78:fc:05:6b:db:fa:2c:99:2f:48:f4:
13:35:d5:6e:1e:96:6b:ef:93:6d:ea:2e:3a:2c:b8:fe:f7:60:
61:09:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:17:44 2025 by rpki-client