Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa
File: 8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa (raw, json)
Hash identifier: NhVA1K1n+j1sW+7Jpy7yLzTyKwFV0z5QQGYcwT1WwS4=
Subject key identifier: B1:B8:53:CE:8C:2D:2C:A7:40:F5:F7:DF:73:2E:75:35:70:B4:E4:40
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848222FEBE6A93AD3F0A8AD1300
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 13576
IP address blocks: 66.128.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:eb:e6:a9:3a:d3:f0:a8:ad:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=68dae114-81d2-40b0-aac9-01c21bfbc2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ed:ae:1f:89:40:1f:09:4d:80:4e:9c:c0:b1:
83:33:45:2a:d6:91:88:3f:e0:53:15:a2:49:13:54:
8f:6a:57:df:e3:ac:03:f6:66:b3:f9:90:b7:ae:47:
d7:d7:47:28:d8:1c:69:07:1b:47:c8:df:d3:8c:e4:
fb:a3:97:9c:38:40:f4:4c:38:b5:3b:59:ec:1a:be:
4d:47:b8:6e:66:90:43:ee:60:b6:4f:f3:a9:9f:65:
45:98:56:12:10:03:4b:61:c0:91:83:52:ec:c1:56:
9f:6b:29:be:87:79:2d:38:18:56:ef:02:a3:82:59:
0e:97:02:45:70:16:84:db:34:fc:c4:21:c1:0d:d1:
e0:67:07:19:e1:32:9a:55:32:8a:13:be:71:88:35:
a9:27:9d:9b:a5:8f:50:09:54:13:0b:ff:81:c9:47:
45:ab:d3:be:df:25:4d:56:89:8e:7e:47:d3:0f:f5:
47:4f:b2:38:07:5b:8d:9b:ad:83:fc:2c:70:14:1c:
97:3d:45:3e:1c:ce:0c:c2:57:ab:96:af:ab:01:1e:
13:d1:09:40:7d:46:8e:c6:97:7c:00:96:a6:34:19:
6d:45:47:35:7c:3d:ad:4c:b4:9d:b7:74:8f:02:70:
09:25:af:e6:54:d4:f9:80:24:28:16:a6:a7:f2:78:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B8:53:CE:8C:2D:2C:A7:40:F5:F7:DF:73:2E:75:35:70:B4:E4:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2f:16:2f:47:a7:5e:cf:ed:cd:8b:0b:df:04:15:13:aa:b2:
6e:0a:dc:37:bb:00:18:44:56:e9:4a:9b:3e:54:86:43:f5:a5:
dc:44:32:e2:bb:04:42:22:3f:76:6b:fb:04:eb:25:18:c3:5f:
49:a4:39:67:14:a3:8d:ba:40:04:2c:30:80:6b:ec:b3:cc:00:
0c:14:e3:3f:f0:e8:ea:0a:f0:5b:d4:f7:a3:40:3c:40:06:13:
4d:6c:d1:5d:c1:7a:93:2e:43:aa:ea:5d:fc:4d:41:31:b2:4b:
83:c5:c4:4f:4c:26:77:7c:96:9b:cc:39:2b:5e:f8:53:4f:ab:
43:b3:70:be:19:f3:03:3c:09:d5:a8:47:13:cd:9b:5c:d0:4f:
db:b1:e5:ac:f7:b1:9b:08:56:d0:d4:36:eb:65:d7:74:85:fb:
ef:b8:a2:b1:44:10:00:a7:b8:8a:9e:d7:4a:8c:36:7a:72:a4:
8a:47:96:1a:c0:86:56:4f:1c:49:33:2d:d0:ee:1c:7c:65:06:
06:2e:ad:c0:b7:f6:1e:56:8e:40:18:49:aa:22:1d:83:ae:67:
a9:b1:70:c8:d1:f8:39:44:e8:72:87:38:29:11:7c:52:39:b8:
9f:89:93:d2:ff:04:0e:18:86:8c:41:38:d3:ed:94:63:72:ca:
a2:7a:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:25 2025 by rpki-client