Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a7a89611-ea36-3998-bf53-d5b0d071c937.roa
File: a7a89611-ea36-3998-bf53-d5b0d071c937.roa (raw, json)
Hash identifier: MY1JaBsr9AjHIbvS/5OLogf/lYHFzAZJ4wHZK/SS9wk=
Subject key identifier: 64:5F:A7:42:C2:A0:55:CD:B2:85:66:CD:90:98:08:48:1A:04:E5:F2
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858486AC59C9D4266AB3FC6815600
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a7a89611-ea36-3998-bf53-d5b0d071c937.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 13576
IP address blocks: 66.115.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9c:9d:42:66:ab:3f:c6:81:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=870f3875-ad32-4ca9-8dfa-d3c0523a56b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:f2:ec:1a:09:8f:c7:4f:1e:9b:d3:17:03:
15:32:8b:ac:eb:2b:d6:84:91:5f:b3:99:9d:20:a5:
e8:2b:a7:07:e3:a4:ce:48:e1:7a:6d:f0:06:47:1b:
25:04:4c:4e:07:9b:19:13:c0:37:ed:d1:fc:29:7a:
b5:9f:8a:dc:e2:59:c1:d4:ca:ca:0c:35:85:cc:6f:
82:fd:f1:b4:8f:3f:79:dd:09:d3:d8:a1:3b:68:05:
f6:e4:23:62:2d:ea:cb:f4:5a:7a:5f:d0:36:20:b9:
a3:dd:f7:1d:05:ca:77:01:3b:c7:3e:1a:50:27:b1:
6a:95:5c:66:09:bc:ba:e9:83:01:b4:cc:f2:9f:7d:
e7:57:22:26:d7:54:79:4f:c8:b5:aa:fb:25:d7:33:
9a:60:e9:ac:48:1e:c4:e6:d6:86:4f:54:af:27:6c:
6c:4b:b2:83:69:27:64:54:ab:9e:d3:12:da:28:8e:
f9:f0:ce:8c:7c:a6:21:94:71:98:0d:e7:0f:fa:74:
d1:1b:ac:54:fb:d6:d8:d7:99:8f:3c:8f:1a:c1:d9:
da:78:e0:86:3f:75:a6:1e:f0:db:d5:8a:c8:ef:3d:
32:34:d1:12:13:78:b8:89:1d:da:5a:d2:73:6c:b6:
ed:fc:94:2f:aa:8a:63:39:a6:84:a5:da:94:09:79:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:A7:42:C2:A0:55:CD:B2:85:66:CD:90:98:08:48:1A:04:E5:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a7a89611-ea36-3998-bf53-d5b0d071c937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:36:5a:cc:4e:4f:90:b5:d9:a7:1f:59:73:98:7d:3b:6c:13:
3d:22:84:46:d4:c6:5a:a9:09:52:56:12:ec:92:57:a3:8c:36:
f7:4c:f8:42:bc:90:42:04:90:45:63:2d:d5:a3:a7:45:0b:c6:
95:09:ae:63:0f:18:3f:52:97:e4:70:92:11:35:fe:9a:4a:70:
63:1e:05:95:3d:ab:22:27:57:5a:c8:c4:4f:b5:e3:e4:7b:50:
b6:e6:2c:d1:36:63:ff:b8:01:df:2f:f0:a8:6c:a7:e7:fb:cd:
1e:21:b0:4b:a8:ba:34:64:6d:a5:43:18:e7:24:f7:24:aa:a7:
38:30:cd:5a:2c:35:fd:c6:07:b7:a5:66:ae:2f:2e:a4:48:81:
c0:eb:59:00:46:7e:8b:88:02:10:1c:71:a6:36:13:3a:16:c8:
de:c4:ca:4a:e2:79:f2:8e:6b:a0:8c:dd:03:32:91:79:eb:a3:
5b:95:90:a4:b4:bf:b6:6b:ed:69:c1:a0:34:f5:10:c0:c2:95:
dc:56:85:72:f4:e6:6b:82:94:56:6c:29:d8:bd:71:81:e4:c6:
b1:00:71:4e:57:95:79:ba:0a:38:bf:f9:0a:2c:4a:e9:02:60:
1d:c5:c4:90:22:07:24:f3:17:0f:ce:49:1e:22:ac:d6:fa:b9:
73:76:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:58:26 2025 by rpki-client