Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e4dd47d-f85d-3a05-a50d-302566ef5337.roa
File: 8e4dd47d-f85d-3a05-a50d-302566ef5337.roa (raw, json)
Hash identifier: 1FdvajiKDq7EA7jrrcdgXHEOFdH5DpQdeXiBExK37ho=
Subject key identifier: F9:78:4F:35:70:FF:62:48:84:24:78:30:88:27:E2:F8:E6:F9:F0:23
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858488BA8D95CCD41ACA2232A9180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e4dd47d-f85d-3a05-a50d-302566ef5337.roa
Signing time: Tue 14 Jan 2025 20:44:27 +0000
ROA not before: Tue 14 Jan 2025 20:44:27 +0000
ROA not after: Mon 14 Apr 2025 19:44:27 +0000
asID: 0
IP address blocks: 66.237.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:a8:d9:5c:cd:41:ac:a2:23:2a:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 14 20:44:27 2025 GMT
Not After : Apr 14 19:44:27 2025 GMT
Subject: CN=7f2396d9-ef48-4b37-b618-9d52a5050d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:85:b5:76:8e:1e:a4:c6:7f:7b:9d:1d:3f:
58:63:de:53:a3:1b:d2:8d:ab:72:18:d0:00:f5:67:
4e:8f:83:db:48:25:8a:2b:1d:46:e3:d7:ac:cf:3b:
13:bb:8a:c6:3b:45:09:3f:e6:2a:60:c0:aa:75:6f:
08:a7:da:ca:91:99:5c:eb:02:3e:91:e4:8a:ba:e2:
c0:ba:09:67:c7:84:64:4b:40:58:db:3a:e3:af:ca:
39:08:5e:c9:af:64:83:12:47:8c:6c:03:66:2f:4d:
c8:4e:a0:e3:df:c3:57:aa:5a:b8:06:4b:9d:c0:20:
16:54:b3:8c:c7:1c:19:f4:d1:47:97:6b:c3:23:8e:
86:2a:3d:7c:aa:6a:89:3e:2b:6e:e4:14:83:30:61:
45:8b:1f:d6:29:dc:7f:e0:c3:b3:2f:c5:60:bf:81:
5b:c3:16:34:f0:6b:c8:44:72:da:61:da:9c:83:33:
7f:ac:e7:3e:6e:b5:10:fc:2e:91:11:f7:69:06:38:
79:29:c5:93:bc:db:1d:00:7e:e9:05:53:1e:76:f9:
ba:42:5b:30:d5:b8:85:ef:c5:93:cd:9c:8b:16:11:
ff:3a:2a:83:cb:fe:03:33:19:cd:1f:62:82:c6:7c:
e3:6c:8f:69:f6:ae:f6:ec:f1:87:f7:9c:87:57:2f:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:4F:35:70:FF:62:48:84:24:78:30:88:27:E2:F8:E6:F9:F0:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e4dd47d-f85d-3a05-a50d-302566ef5337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
66.237.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:9f:3a:49:14:51:79:42:f8:05:68:fc:9c:0b:d0:01:e6:60:
00:b9:87:70:01:f6:05:a9:a6:36:d6:30:fb:01:1b:30:7d:3f:
ec:f1:24:2d:4f:75:0f:a4:90:bc:14:58:ca:9f:d4:8d:28:e9:
e9:54:84:91:8a:73:93:17:07:44:f3:cc:9f:38:11:e8:75:03:
14:b8:a2:7a:39:12:7d:dd:1d:1d:e0:2c:2f:a5:4b:2f:e3:d0:
a9:18:8f:95:a9:2a:e8:03:4f:d2:68:22:06:5b:5c:b4:d7:af:
d7:d3:aa:9a:c4:23:ee:ab:0f:a2:80:b5:74:b1:83:7f:e0:e5:
b4:6c:4e:0f:8e:00:46:b7:82:09:0b:02:20:72:08:0a:ac:43:
23:e8:61:b3:e1:f9:4d:66:26:f9:2c:38:2a:d5:78:1b:74:c0:
fe:ce:6c:8a:56:ca:8c:99:4b:15:a9:89:35:b0:61:f3:c9:b1:
2e:65:c5:d5:8a:92:65:ea:58:0c:69:f3:1a:47:8b:2f:47:9b:
49:aa:9f:ab:dd:ff:70:a0:f9:67:02:f4:f3:e3:4b:ce:61:f4:
ca:8f:d8:d0:56:b0:82:10:ed:1f:08:18:f5:fa:e4:83:81:d8:
c3:95:0e:a0:21:2d:ad:a3:5e:ca:50:11:29:99:4f:d7:8b:4a:
e3:c4:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:57 2025 by rpki-client