Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa
File: 2590657a-d799-3169-b7a8-d40b15429e02.roa (raw, json)
Hash identifier: YQsC9p0Xlb/hGEjXANdu6w/MFwqCJTJOKUA/qyjEvu4=
Subject key identifier: 84:F5:A1:6C:E5:60:04:81:62:06:E2:73:0A:86:E5:E8:3B:A0:33:55
Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial: 010D0C9F43285848100A8A1DA24E74CAC8A96500
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 40627
IP address blocks: 66.81.240.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:8a:1d:a2:4e:74:ca:c8:a9:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=7ab51da2-809b-4be7-b2d1-090e2a132ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b7:fe:94:79:a5:e0:5f:e9:b8:95:26:6f:ef:
21:5a:b7:e5:2e:02:3d:8b:72:62:98:86:2d:de:01:
9f:2f:12:9d:a7:b6:ed:70:b9:ad:95:c8:99:a7:69:
e2:f7:9a:ca:ed:cb:be:fa:fd:96:98:76:47:ba:4b:
5d:79:a8:2a:b6:4b:d0:44:3a:f7:4f:e4:15:eb:79:
94:5e:b1:12:e5:b8:2c:a0:1e:73:93:7a:24:b2:de:
80:bb:0f:9e:3d:47:0c:d7:5b:00:b8:d7:89:dd:2e:
74:a0:14:58:7c:05:4d:fa:a2:91:a7:0c:19:12:12:
23:44:01:77:90:bb:3b:c9:76:dc:1b:6f:70:22:6b:
b8:f3:2a:e9:bf:80:06:f4:df:9b:01:6c:ca:c9:52:
7e:8c:7c:27:04:08:5f:0a:36:13:b0:07:67:90:67:
86:8c:c3:14:ed:96:8d:c9:7b:e4:57:cd:92:48:88:
50:0f:ff:c6:13:81:15:8b:ed:40:92:14:43:85:be:
9c:86:ec:e9:e9:b8:d9:ec:bc:0a:a7:7c:1a:ec:66:
64:85:0f:64:7a:c2:c0:b5:3b:02:8d:93:f9:95:be:
f4:35:2f:95:48:61:c5:07:d2:69:19:6b:31:30:a9:
b3:fa:01:64:30:1e:85:24:af:37:49:48:43:65:9f:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:A1:6C:E5:60:04:81:62:06:E2:73:0A:86:E5:E8:3B:A0:33:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
X509v3 Authority Key Identifier:
keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
sbgp-ipAddrBlock: critical
IPv4:
66.81.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ad:0a:1e:ab:b9:97:38:86:72:29:2e:2d:52:88:40:6c:7a:
eb:e7:50:e2:56:68:b0:a1:53:e1:76:0c:e6:41:fe:fe:73:d3:
1f:c2:2d:e8:c2:c7:46:c0:1d:bb:ab:b5:05:3e:b9:ca:e6:76:
f4:e6:91:db:6c:c2:95:b7:04:a0:a0:75:1b:45:d9:50:e4:7a:
2d:cb:e0:95:8b:86:4e:9a:9d:7b:0e:b8:cf:1d:62:6b:7b:9c:
d7:4d:88:99:e2:6f:e7:7d:87:dc:5e:ba:06:cc:07:9a:3f:0b:
17:85:4e:36:c8:df:31:5d:94:e8:b6:9c:e5:a7:ad:26:41:56:
19:69:a1:f0:64:af:e5:7f:14:e7:9a:d4:df:60:25:a7:da:dc:
e7:34:1f:4a:6f:75:5a:a0:f3:bc:b5:bb:81:09:46:9c:82:7d:
c2:e0:3f:00:d6:45:94:09:44:0e:7a:19:21:0d:75:88:36:80:
7e:56:fa:ec:7e:4f:83:3b:72:fd:7d:bd:8d:6e:c2:ef:cf:91:
84:26:0a:a7:b4:71:04:13:67:ea:cb:c2:7d:6c:45:a4:da:a8:
ee:98:d7:67:b1:63:f3:93:ff:38:4e:2a:71:40:19:3e:0e:02:
71:83:1f:5b:21:63:81:e6:f1:0c:4e:50:2a:dd:e2:3e:d6:eb:
bb:84:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:41:21 2025 by rpki-client