Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/4b305951-6de2-3ca0-ae4b-c4115faa6e20.roa
File: 4b305951-6de2-3ca0-ae4b-c4115faa6e20.roa (raw, json)
Hash identifier: W3PLpOafIj4YhGOfI10tV7ECWqdW1Fccl/dXzAP6tDs=
Subject key identifier: 55:68:B7:15:FF:06:0C:BE:40:7F:0B:1D:CF:03:84:F8:59:96:27:B7
Certificate issuer: /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial: 010D0C9F43285848159FF115FE3A1B524EAC2B20
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/4b305951-6de2-3ca0-ae4b-c4115faa6e20.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 27228
IP address blocks: 66.248.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f1:15:fe:3a:1b:52:4e:ac:2b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=b76e2c6d-b725-4487-9d26-0f1e549193c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:2a:2a:c2:ae:84:2e:54:d4:56:88:9f:02:
ea:db:b5:25:78:9e:ba:15:5e:ce:e7:90:50:ce:dc:
21:61:3b:d7:59:8d:22:52:44:b2:f5:97:d9:5b:6a:
ab:8b:50:06:ea:69:01:73:75:b3:93:80:e1:7d:3e:
7b:70:62:fd:43:22:4d:8b:76:e0:0b:04:36:60:0d:
d2:bc:4c:fd:ab:33:d1:de:71:86:42:ee:27:d2:91:
60:8d:1f:e8:7b:ef:78:e1:ca:72:32:42:f9:1b:72:
1b:fb:72:d8:74:98:7a:9d:34:8e:1f:71:d9:6c:ee:
a1:91:4d:64:eb:65:c1:64:ac:10:c8:ae:f1:60:98:
e9:0e:4e:f1:1d:1d:a9:af:ed:c6:cb:ba:4b:0a:a0:
c8:55:53:9d:cc:6f:32:31:fd:eb:4f:8f:c2:a2:2b:
32:b0:ab:64:76:3f:2c:81:12:fa:0b:45:14:9b:a4:
9b:80:82:d4:20:da:04:57:03:3a:64:88:79:fe:f6:
44:31:5c:35:06:e8:10:31:7b:f6:74:46:ef:88:ab:
54:b5:ce:cf:15:fd:57:4d:38:ce:9b:c7:f3:39:db:
8b:35:2c:9f:df:db:a5:60:5f:ad:91:28:d9:31:07:
71:b9:29:e0:9b:d2:e6:49:be:a1:0e:97:91:9a:4f:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:68:B7:15:FF:06:0C:BE:40:7F:0B:1D:CF:03:84:F8:59:96:27:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/4b305951-6de2-3ca0-ae4b-c4115faa6e20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
X509v3 Authority Key Identifier:
keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.248.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ac:79:cc:4d:0b:9d:1f:67:75:68:ac:41:ad:8b:c0:1c:b0:
44:06:28:8b:c8:24:d7:a1:4e:e5:5c:ad:02:59:b7:cf:78:0f:
31:83:b6:ac:12:a6:d0:ad:7c:1d:5c:5e:1b:24:a8:5f:df:b7:
f6:c1:84:42:6a:51:8c:92:ed:97:e9:b9:a8:c5:33:a1:b1:1a:
84:15:e7:c5:cf:24:8c:e9:59:df:89:4a:52:96:fd:b2:bc:6b:
e3:e7:c6:e6:85:2d:b2:d4:1a:a9:4c:7a:d9:55:2d:6e:fb:2b:
2c:ad:91:7a:99:01:9e:f4:be:b2:bf:03:1a:58:9e:76:b3:41:
d3:9e:f5:ab:fb:e2:0c:c8:11:0e:ad:6c:fa:95:b0:8c:8f:99:
8e:3f:b4:55:79:39:c2:9f:f0:49:fd:a8:81:ea:d9:a0:4e:e3:
0c:6a:db:a9:26:98:f4:0b:20:88:f1:23:d3:f4:a6:44:d7:aa:
6c:20:d4:f5:58:f3:a6:9c:4b:3a:83:d5:13:b6:28:25:8e:49:
f6:31:ac:b3:de:3e:85:d6:a2:47:e1:7d:c6:b3:99:fc:6e:22:
44:83:63:78:bb:a9:d0:91:8e:2f:48:8f:d4:54:df:a4:1b:33:
eb:e8:31:6b:81:28:35:dc:e8:00:4d:ef:d4:8c:ff:79:ff:17:
d6:03:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:30:32 2025 by rpki-client