Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8c0f719e-fdb6-31e0-877e-2ecdce9eec03.roa
File: 8c0f719e-fdb6-31e0-877e-2ecdce9eec03.roa (raw, json)
Hash identifier: 8vaDKmTPed06qy+Z02xPWYru119x7xDyWwaJPDhSY/o=
Subject key identifier: E2:3B:37:DF:5F:7F:93:AF:A7:68:9E:A0:04:9A:21:AA:AF:54:EF:D7
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584832F035485D28F96A6192F580
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8c0f719e-fdb6-31e0-877e-2ecdce9eec03.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 66.128.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:35:48:5d:28:f9:6a:61:92:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=bba1de2f-0417-4230-a608-3bff8de8dd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:98:71:a8:31:3c:57:92:ad:58:ac:4b:c4:1e:
f7:ed:78:31:dc:1a:a1:ea:a0:fc:b4:ee:b8:ca:ff:
ce:e2:e9:58:e6:33:ca:4d:82:a8:51:5e:29:65:9c:
82:a9:1a:21:d0:18:4e:7b:23:e9:3e:20:9b:d6:f4:
bc:19:32:fb:1c:12:c3:af:aa:8e:0e:a3:0e:6b:ce:
f3:28:0d:a2:e0:ee:f4:f1:5a:fc:c9:fc:5d:38:c3:
1a:90:e1:8e:17:88:05:b5:12:84:e6:4a:ed:d4:7e:
99:aa:bf:79:a8:39:51:98:4e:50:5e:6c:bb:07:0b:
80:1b:df:fd:b7:4f:70:1a:30:c2:40:c5:6f:49:7e:
4e:cc:28:c0:bb:88:87:74:c6:71:4d:fe:69:47:f2:
53:a5:c3:14:64:c9:b7:76:f0:6c:6e:d1:07:e2:2a:
74:70:40:5c:54:e7:51:e9:78:d7:4d:8f:ed:7b:f3:
d6:c4:c0:7c:ac:3b:13:85:83:3e:4b:17:08:bb:01:
ff:a7:39:06:63:70:45:5a:12:d7:7f:f1:96:ec:26:
dd:7f:35:af:5f:dc:fa:fc:0d:26:19:8e:94:1c:d8:
e3:a2:73:3b:f9:31:c4:55:59:28:3a:dc:16:44:18:
a7:b8:18:37:4e:1b:c7:79:1a:15:8b:39:26:46:3f:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3B:37:DF:5F:7F:93:AF:A7:68:9E:A0:04:9A:21:AA:AF:54:EF:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8c0f719e-fdb6-31e0-877e-2ecdce9eec03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:46:0f:a0:55:cc:3a:76:48:00:4e:2b:10:6d:1d:17:9d:a3:
43:7f:0c:45:06:39:57:05:e2:f8:c9:b6:7b:d5:14:41:9c:60:
ba:91:0d:b9:7f:77:50:0c:26:bc:43:c1:92:91:e7:56:77:53:
74:fa:b0:7f:a2:39:87:fe:4c:1e:21:8e:42:0e:ea:09:05:49:
f1:88:e8:64:7e:f2:02:8a:10:a0:43:83:96:d8:f5:82:9c:88:
35:52:6d:52:f6:24:b8:07:12:38:d9:c7:6e:7d:6c:14:d7:b1:
7c:05:fd:0d:95:98:0b:97:5e:1b:7b:31:eb:b1:76:eb:80:0a:
05:86:e2:05:63:80:70:97:27:11:ee:9b:82:f3:86:c1:5c:b4:
16:a8:b3:06:73:93:ac:c3:45:1a:67:ea:31:20:35:3f:f5:2d:
67:92:0f:8e:ef:49:c0:1b:f2:e1:36:12:5c:b9:c3:6f:85:b9:
8a:22:cd:8f:59:e4:37:42:aa:8c:66:39:16:ba:fe:8c:03:f7:
4e:43:96:c0:5e:20:b0:56:81:9a:a4:60:b8:70:46:81:5e:a5:
d6:52:92:da:87:d0:ca:ab:52:b7:09:4a:7c:38:0f:3c:1d:97:
e3:a1:d9:19:b4:a9:d2:23:88:11:f2:fe:39:de:a4:71:2c:3f:
bf:28:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:53:27 2025 by rpki-client