Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44a3ecd8-0dcd-3ade-b1fd-b0f9676908dc.roa
File: 44a3ecd8-0dcd-3ade-b1fd-b0f9676908dc.roa (raw, json)
Hash identifier: CsksrQfOvNpWhuL0ypjj7bbjpJGPz54j9QQjTtz9oLA=
Subject key identifier: AE:D0:AF:29:F6:73:CB:8A:57:32:CD:41:AD:5B:2C:78:99:EE:47:85
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04537250B18DAE318F880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44a3ecd8-0dcd-3ade-b1fd-b0f9676908dc.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 66.58.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:45:37:25:0b:18:da:e3:18:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=1deeb852-c203-4300-983e-27c9a28c0ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:6d:4b:de:92:c5:e1:07:67:82:b1:86:f8:
ca:29:d8:f3:53:f4:43:4f:35:a2:97:38:41:9e:e4:
ad:2e:d3:af:a7:2a:d1:5d:97:46:ef:f2:93:cf:8f:
a9:52:7f:5a:a7:1b:c1:6b:30:f7:c6:7a:05:f5:ba:
29:e2:ba:b4:0a:73:e8:9f:df:bd:9c:e4:5a:23:24:
7e:2b:8a:e8:1f:5d:f0:a2:d0:1d:1c:cc:6d:d8:c8:
a5:67:7e:0d:c1:bd:0b:4e:84:6c:03:17:22:cf:42:
81:b9:0e:00:95:d5:0a:a5:b2:f2:82:0a:86:79:f4:
3a:79:f8:c2:04:0b:7e:21:36:6c:90:eb:a9:79:3b:
11:8e:f3:43:4e:25:e4:ac:17:bc:ff:5b:33:77:eb:
c4:fa:ce:48:3b:b3:70:8b:f9:ff:18:dd:56:9d:a9:
f4:c3:23:ff:62:1a:25:80:46:ad:59:5a:af:e0:10:
15:2d:8f:0c:21:e4:9d:79:92:38:a3:d0:17:6a:be:
ab:cc:7f:e4:a4:45:ae:8d:62:5b:76:4f:c0:01:2a:
dd:79:f0:b1:26:a9:ec:b0:d2:26:ae:d3:4d:f5:37:
2b:a7:c7:38:54:0a:3e:50:bc:4d:12:f3:d2:70:6f:
9e:8c:c9:09:7b:53:2e:15:48:d5:7e:76:ee:64:df:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D0:AF:29:F6:73:CB:8A:57:32:CD:41:AD:5B:2C:78:99:EE:47:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44a3ecd8-0dcd-3ade-b1fd-b0f9676908dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
66.58.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:cb:24:00:72:8f:0e:c6:a9:81:70:d9:51:99:85:6e:ed:e7:
9c:a7:00:a5:35:cf:95:b3:06:e2:3c:82:7d:ad:83:0e:cf:8d:
da:f6:2b:3c:82:70:15:49:cd:52:3e:a5:62:ef:5c:df:7b:a4:
79:ab:03:b1:c8:83:51:34:88:7f:03:07:32:cb:2e:10:f6:82:
c6:4a:e3:48:19:03:96:d1:9b:0c:91:39:da:a4:ea:09:d6:1d:
92:be:ec:b7:74:18:ae:4a:b3:4b:f8:61:e3:59:9b:12:e4:66:
ec:3e:0f:69:da:e7:e5:86:9d:14:20:b1:eb:cb:12:30:3a:3e:
0c:12:e7:95:ee:a6:f6:61:b5:35:e8:30:01:03:d3:41:d4:0c:
55:cc:9e:0b:81:f5:ce:4e:a5:89:b8:79:30:79:f5:4e:59:5e:
fb:12:d8:de:df:c4:97:3b:81:5b:af:a8:38:e6:61:65:61:44:
d6:7c:ef:cc:d4:63:bc:b6:c6:ad:8f:e2:02:ed:a5:ea:11:94:
23:fd:0b:67:21:08:a3:41:24:52:33:52:82:20:bb:d3:c6:81:
93:e3:46:1d:0f:ef:60:ec:84:d5:c4:0d:04:b3:86:a4:bf:5d:
7b:7f:29:30:b9:12:38:94:40:79:3f:db:4a:2f:c8:d2:da:63:
3b:26:4a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:15:12 2025 by rpki-client