Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
File: a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa (raw, json)
Hash identifier: ccmWk75C5Y74ti6HJK+f2eDQBI0K5UNIHBsu/TR/m9Y=
Subject key identifier: CA:E7:59:47:49:C9:4D:74:AC:FA:C2:18:C8:15:5C:B0:0C:E7:5C:D4
Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial: 010D0C9F4328584832F029765F5A90357DC2E980
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 30170
IP address blocks: 66.113.96.0/20 maxlen: 24
70.35.112.0/20 maxlen: 24
209.147.112.0/20 maxlen: 24
2607:f6f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:29:76:5f:5a:90:35:7d:c2:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=21ee472a-1a03-4cc8-96bf-f00860786aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:43:f2:ad:70:e3:63:75:e7:f6:d0:fa:3a:
cf:c8:39:3d:a9:66:db:06:65:a1:37:4c:a8:b4:12:
d9:0e:b0:81:12:e9:65:b6:ff:4c:ae:82:0b:ef:4b:
c0:69:77:38:73:9c:4c:d3:7c:7e:a8:a2:fd:50:25:
81:51:dd:7a:84:4b:45:95:8b:b7:96:35:dd:3b:4b:
e8:ab:f8:c5:7f:2c:8e:c1:16:ba:be:37:11:72:d2:
dc:6e:3a:02:73:34:21:16:85:a6:b4:66:9e:a0:48:
48:d7:5e:c2:16:5d:e5:52:27:c2:e6:cb:6d:01:6b:
d5:9b:b7:77:69:ae:31:84:54:aa:97:d5:f4:44:97:
70:98:0e:5b:68:0e:78:f7:0c:33:ea:71:fe:29:1a:
68:ac:28:2b:c0:91:8c:8e:f9:6f:00:a7:46:d2:69:
9b:a8:26:16:68:74:c4:ea:5e:a4:19:eb:c3:61:da:
2e:59:46:d5:a8:97:35:33:73:51:ef:1f:b7:2e:3f:
5b:6d:fa:a8:85:fb:00:8f:9a:7b:bd:1e:e0:98:04:
60:53:6f:d9:3e:84:3e:8f:bf:36:be:fe:de:d9:bd:
6d:a7:d9:a2:da:d4:9a:d3:8d:62:14:88:c7:a5:5b:
cf:78:1e:de:fa:2d:80:6b:f3:0e:0f:00:7b:71:8f:
5c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E7:59:47:49:C9:4D:74:AC:FA:C2:18:C8:15:5C:B0:0C:E7:5C:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
X509v3 Authority Key Identifier:
keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
sbgp-ipAddrBlock: critical
IPv4:
66.113.96.0/20
70.35.112.0/20
209.147.112.0/20
IPv6:
2607:f6f8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:a0:74:41:9c:98:23:0c:bd:b3:dd:41:d8:9e:d8:3f:89:fa:
83:57:d4:3c:f0:2d:6c:50:ee:5c:72:58:68:24:e7:91:59:ff:
0f:6a:07:74:4c:6d:24:92:09:67:1b:7e:fe:6c:ee:36:21:b6:
15:17:5a:19:2c:e5:dc:1d:78:de:41:97:52:da:af:a3:b8:10:
92:e8:cf:0a:c4:5c:55:05:fd:90:03:b4:f1:5a:64:e6:8c:b5:
55:d4:c2:ce:13:07:01:8c:80:37:63:51:7f:4f:df:d0:7c:9e:
8b:21:87:67:75:95:34:62:86:e4:b5:4c:6d:af:6f:e6:8c:b0:
ab:9c:4f:6d:ee:23:99:09:a6:b0:ee:71:6d:de:97:5e:6a:fc:
a6:26:3e:93:ec:cb:fa:bf:e7:2c:39:9b:18:46:7c:31:8d:6b:
55:c1:0e:e4:65:c3:88:85:f9:c0:8d:11:cf:8f:89:46:02:6e:
10:e5:75:f1:ed:47:c0:0d:fc:2d:2b:26:40:e5:e3:5b:59:1d:
14:53:0e:a3:5a:48:72:6a:06:7f:df:cd:79:c0:5f:7f:f8:58:
50:a7:a6:e0:c8:9f:a1:79:bb:22:67:76:68:d5:84:c0:71:a4:
9c:6e:89:ad:05:ea:d2:92:52:44:05:77:7a:27:ea:33:43:13:
96:35:2e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:36 2025 by rpki-client