Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa
File: ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa (raw, json)
Hash identifier: An1W8GMjQUONZ+e3/rCSQPY2WPfcwLbq2dnRYPU/zhU=
Subject key identifier: 5C:91:4B:B5:47:D4:9A:1A:4C:74:06:64:20:D0:D9:67:EA:BA:F4:E7
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848189382114C102C25CA2CE780
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa
Signing time: Wed 04 Dec 2024 15:23:30 +0000
ROA not before: Wed 04 Dec 2024 15:23:30 +0000
ROA not after: Tue 04 Mar 2025 15:23:30 +0000
asID: 6312
IP address blocks: 66.115.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:93:82:11:4c:10:2c:25:ca:2c:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 4 15:23:30 2024 GMT
Not After : Mar 4 15:23:30 2025 GMT
Subject: CN=3cdaa2cf-fd2d-49dc-85fd-5074bd5f5d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:dd:c3:7c:56:9b:8e:9b:89:56:26:20:44:
85:f4:9b:76:ea:bc:c8:a0:81:ef:28:38:13:8e:4e:
3e:75:01:41:12:d5:f9:01:42:4f:39:84:34:42:d6:
96:ab:d0:bd:95:a9:97:18:af:ce:3a:aa:06:59:f3:
b1:08:bc:84:14:85:1d:2d:2d:88:20:44:8b:b4:86:
52:fe:b7:cd:57:51:89:8f:3c:8b:b8:17:e2:83:f6:
f3:09:8f:c6:4a:8c:84:b4:ed:fc:60:62:e5:77:74:
e9:19:68:86:06:74:d4:79:f3:17:81:1f:11:e7:98:
af:ea:11:bd:a5:cf:56:3f:ce:1d:97:82:5d:2f:15:
45:b7:e9:2b:28:32:50:1d:f8:29:93:e2:fb:46:b3:
59:e0:a3:7b:29:00:6e:9b:b7:ae:17:a6:08:8f:33:
43:90:a1:73:0a:3e:31:dc:a4:78:fe:88:5a:45:57:
ea:f6:47:ce:9a:07:67:9e:ea:d7:28:d2:6e:c9:de:
2a:44:6c:b1:4d:ea:a6:00:98:88:e2:55:67:9a:96:
ae:bc:ae:04:b5:2f:1d:e6:d8:05:d5:d6:16:3f:70:
96:1c:7d:62:b2:2c:e0:fc:3d:5e:01:70:29:a6:0c:
2e:c3:4e:c6:ea:2c:b9:92:9b:4f:16:e3:c1:db:51:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:91:4B:B5:47:D4:9A:1A:4C:74:06:64:20:D0:D9:67:EA:BA:F4:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:98:8f:7d:18:dc:a9:0f:de:8d:96:21:54:cf:90:c6:14:59:
8f:64:38:a9:b9:03:51:ed:3a:6a:ab:02:95:10:1b:1e:0c:4f:
94:b4:9e:16:9d:ec:e1:80:8c:7f:04:54:ca:7c:83:54:cb:7a:
2d:4b:75:3b:a1:8b:4e:6a:39:a6:00:56:b6:98:46:d4:71:3d:
8b:d7:dd:6f:e5:8b:8b:81:fc:fa:62:97:01:d0:80:01:ca:66:
2c:ce:30:85:75:6d:e4:e7:94:59:d5:74:33:46:85:12:45:72:
92:d4:2b:9d:82:65:36:d4:6e:6b:64:43:e3:16:ef:66:e2:ae:
5a:83:5a:27:28:91:08:5f:0c:a0:95:f4:6e:cb:27:31:c0:71:
18:be:3e:a3:8d:00:0e:58:ed:70:af:58:ac:c9:24:bd:68:6b:
05:db:de:c4:31:d0:66:c6:72:66:7b:f4:b1:e6:e5:76:ca:26:
f6:5f:62:2a:c7:8d:c3:43:0b:98:33:68:07:4a:06:00:26:cd:
ad:b1:33:4d:94:69:06:bb:72:14:20:ae:1c:bc:98:8b:6b:f4:
48:06:c9:1b:0f:2c:8e:e9:94:63:46:3d:4f:62:79:3b:b7:b7:
28:67:89:fc:d4:57:54:63:e9:49:ab:e5:30:0c:00:04:ac:0f:
15:9c:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:12:05 2025 by rpki-client