Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8c1625c0-5e5d-3d71-9f92-694c016ccadb.roa
File: 8c1625c0-5e5d-3d71-9f92-694c016ccadb.roa (raw, json)
Hash identifier: hFMqKbj9b5vv7l4yIJbgcMpcvPZbzAyXshks8eQOffw=
Subject key identifier: C6:89:F9:6F:62:95:52:C0:1D:FC:B6:69:ED:9D:C6:5D:D6:23:54:6B
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858486AC59D3A77BC97C0EC769294
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8c1625c0-5e5d-3d71-9f92-694c016ccadb.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 13576
IP address blocks: 66.115.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9d:3a:77:bc:97:c0:ec:76:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=a285285d-817f-4584-b82e-3f3745ec0e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:70:67:98:81:8a:a6:52:65:74:d1:f4:b5:ed:
d1:45:2c:5c:62:5a:70:0a:99:68:ea:6b:8f:8d:89:
2c:50:40:b1:f7:ac:3d:fc:02:d3:e1:38:1d:bf:15:
9f:a0:99:4d:6a:40:3d:56:d9:dd:eb:8e:29:eb:fc:
88:a4:cd:af:21:5d:17:1b:97:f0:88:15:35:5a:04:
fc:4a:22:59:3f:a1:92:2c:94:a4:a5:17:80:e8:65:
51:22:39:de:0c:a1:e8:62:25:fe:29:d5:a1:ca:06:
cb:45:19:ff:c5:a4:a0:4e:e3:e7:e2:d9:8a:0e:94:
db:3f:4f:5f:c5:58:2d:32:ad:62:24:62:f3:9b:b4:
15:25:53:eb:d9:5c:77:cf:4f:88:5d:7d:01:e8:4b:
e0:36:26:4f:8e:f9:8b:50:4b:5c:9b:75:9c:6f:e1:
70:f3:1c:e2:38:2e:bc:0c:07:55:35:51:ba:ef:a7:
8b:bd:a0:34:f0:cc:e5:e7:be:fe:b6:2b:09:b2:0f:
3c:a0:9a:04:ad:8b:69:57:6d:dd:15:09:7e:94:3f:
9e:d0:ad:5d:40:5e:09:50:bd:d4:ac:f6:22:ff:8d:
00:57:bf:c9:04:15:25:52:72:f6:55:61:7c:24:96:
ec:ec:86:6f:f4:6b:b3:5d:ce:39:c1:f3:30:58:b8:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:89:F9:6F:62:95:52:C0:1D:FC:B6:69:ED:9D:C6:5D:D6:23:54:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8c1625c0-5e5d-3d71-9f92-694c016ccadb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:9b:a8:f2:48:fe:98:d1:e2:6e:7b:27:9a:c3:9b:cb:96:ad:
e7:54:11:88:b4:bf:a5:b4:99:1f:0d:6d:94:2c:ce:6d:ca:72:
62:ae:bc:ee:10:4b:e3:97:46:aa:7f:6d:e9:f9:30:ab:2e:90:
a8:10:0c:4d:c2:10:49:76:da:cd:2c:8a:a1:3c:9c:ed:db:53:
fc:c1:ac:d2:7a:a3:1d:bc:03:14:cb:9b:3a:25:cf:a7:8a:fa:
c9:25:a1:33:d1:8f:6f:3d:d5:bc:9a:87:19:d7:44:6b:61:39:
55:1a:2f:b7:92:1e:f6:2d:6e:37:07:e3:44:ea:e0:14:32:7e:
2b:88:1a:5d:f3:d7:47:65:28:6a:7b:de:79:20:dd:21:7e:79:
20:7e:d4:50:80:94:7a:63:c7:da:04:f1:29:2c:5e:ac:2f:48:
f3:5b:44:51:e9:0e:d4:a3:ee:5b:e2:b6:39:db:0e:0f:a2:17:
15:8f:5a:2d:39:f4:fe:b8:ba:68:5d:1c:be:b5:d9:f9:a0:ef:
70:03:9c:d2:7e:5a:88:70:f0:d5:5f:b3:e4:66:13:04:54:b0:
d4:c3:12:a3:58:6e:27:ab:e9:56:76:31:6d:31:08:14:e2:fb:
82:a2:89:2f:4c:3b:a6:36:f8:f1:10:45:bc:4d:df:45:82:7b:
0b:f5:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:26 2025 by rpki-client