Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8e74bc09-e4cb-34f4-995b-15865641087b.roa
File: 8e74bc09-e4cb-34f4-995b-15865641087b.roa (raw, json)
Hash identifier: K9w0hGZCtRZ7hwKb3FKuSyu2NgxZNUdvVyIR37svI7k=
Subject key identifier: 9A:4D:BA:F9:60:5F:6B:D4:6D:FA:18:E9:50:FD:2E:A2:88:21:AA:D8
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584842A27ED7B413BB7DBDF94080
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8e74bc09-e4cb-34f4-995b-15865641087b.roa
Signing time: Thu 19 Dec 2024 16:57:39 +0000
ROA not before: Thu 19 Dec 2024 16:57:39 +0000
ROA not after: Wed 19 Mar 2025 15:57:39 +0000
asID: 17203
IP address blocks: 66.231.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:a2:7e:d7:b4:13:bb:7d:bd:f9:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 19 16:57:39 2024 GMT
Not After : Mar 19 15:57:39 2025 GMT
Subject: CN=b51b3a8f-0634-40c4-a195-c7fa0ce384fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:d4:9e:ed:48:40:14:92:6c:bc:2a:62:4d:
f2:ea:9c:74:07:82:2d:18:17:5d:9c:f8:46:fb:df:
80:7e:99:d7:e0:87:ff:d7:2a:af:39:83:29:e7:7f:
fa:ff:9b:8c:c0:9a:7e:35:c4:66:9f:96:83:a8:f5:
b2:c8:9a:bf:da:c2:0f:68:a7:7b:1a:ca:1d:b1:de:
95:ff:6d:b7:fa:e8:fc:bc:7b:ce:37:8f:60:5a:e0:
b3:9e:f7:c4:0d:c8:fe:14:1e:a0:5b:23:bf:bd:50:
7c:a7:13:a0:03:e6:ca:b5:5c:5a:f3:54:a0:56:98:
e2:e4:49:65:32:f1:ea:52:97:10:9b:05:9f:09:92:
6f:bd:f8:c4:4d:7f:74:3f:4e:5a:6e:89:f3:18:11:
db:6e:e0:f7:87:e2:69:93:7b:63:73:ea:65:ac:4d:
a4:9f:a5:f6:de:3b:24:37:34:0b:d0:50:bf:3c:ea:
1a:20:da:8c:73:b0:34:59:83:93:5f:21:12:4f:2f:
00:69:2c:c2:7d:60:f5:39:a5:b5:91:89:59:71:e3:
f2:96:2f:e7:65:92:02:37:50:cc:0a:81:af:87:bd:
1f:a0:b9:ec:f4:7e:aa:d5:7b:b7:be:1c:c5:d4:39:
39:e9:54:45:79:7c:39:ba:c0:00:9a:21:24:7d:a2:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4D:BA:F9:60:5F:6B:D4:6D:FA:18:E9:50:FD:2E:A2:88:21:AA:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8e74bc09-e4cb-34f4-995b-15865641087b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:9a:8c:cb:83:2c:1f:e7:45:bb:07:52:81:bc:dc:08:f7:56:
28:ce:23:a9:a2:82:ca:95:53:62:4b:92:34:6b:a8:0a:dc:ce:
07:06:fa:32:c0:33:73:f8:f9:54:51:e6:9d:ed:30:dc:66:c7:
5a:9d:41:bf:76:f7:b5:b0:e9:05:53:7b:1e:c9:0a:cf:30:e0:
8e:67:fe:17:a7:10:2d:ef:3f:f8:1c:d5:f5:48:bb:bd:cf:be:
eb:f4:14:89:6c:77:58:fd:ed:5f:93:07:30:08:ba:ef:a6:75:
d8:90:94:86:33:ad:82:e9:ab:e6:02:2c:75:39:7e:8e:17:bc:
43:b5:8e:f3:c3:ca:5d:91:a2:b0:e4:b4:b8:b2:d4:de:ed:9d:
08:53:29:bb:21:8b:5b:18:a8:a4:45:2d:52:63:60:43:c5:25:
d6:ac:0a:36:0e:cd:90:36:46:dc:1e:dc:fe:a0:5d:24:76:77:
c2:aa:e3:be:1e:6e:fd:30:02:0a:19:a5:3a:42:38:45:3e:5c:
48:f3:c6:fa:a0:e7:11:4a:80:23:a1:07:f8:79:f2:a2:ee:27:
63:18:d2:1c:f7:df:65:2a:f9:d0:4a:92:a1:de:1e:b4:2d:72:
c0:0f:3a:ab:9b:6f:52:b1:93:a1:26:a0:d7:19:0c:fa:00:5f:
ed:a0:a3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:02 2025 by rpki-client