Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa
File: aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa (raw, json)
Hash identifier: x85smTQ9yGKfy1eae0lXDuV04aP49oQ7F0B8mjhjRGA=
Subject key identifier: 7F:73:1E:07:CF:55:84:94:C5:3F:7C:73:A0:3C:40:23:89:93:EC:AA
Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial: 010D0C9F4328584832F02A11636AB02AF1FD9080
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 20150
IP address blocks: 66.187.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2a:11:63:6a:b0:2a:f1:fd:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b9024b10-54ff-4483-b304-224541a24890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:ac:5c:3d:da:cc:e5:d6:6a:60:f5:6d:fa:
b2:9a:8c:e5:3c:24:df:25:a4:60:a6:fa:d0:89:48:
2b:dd:51:32:74:9c:b0:8a:d4:34:fb:d6:20:b9:9f:
09:a7:a0:61:77:34:5f:16:89:c3:a2:79:a4:85:04:
f1:c0:6e:2a:26:57:81:b2:cf:2b:9d:d9:8a:a1:01:
7e:22:8c:36:78:d2:28:a1:96:ef:98:1b:fa:c8:99:
a6:a4:b2:03:1a:5c:4c:3f:88:ba:b8:6a:8f:5f:4b:
03:1a:d1:87:ef:62:05:65:1f:eb:bd:be:e4:1e:42:
68:4c:70:1b:e8:0c:c1:96:32:42:0e:58:c3:a8:66:
8f:e1:d7:ce:d3:bd:a0:ce:bd:f7:5a:4c:6b:6b:12:
97:19:53:33:17:65:d3:3e:ed:0d:b7:d9:ec:8a:91:
bb:e8:07:06:64:4c:79:58:c1:95:28:82:ab:d9:08:
09:25:2b:13:14:4e:01:7d:8c:d2:52:85:33:67:35:
c8:77:91:88:ad:9e:5e:5a:2f:62:38:d4:90:f2:e3:
46:bb:23:99:ec:e9:61:ad:e7:63:83:e6:ea:5d:ef:
e8:f5:c7:d9:c0:3c:b0:21:c1:a3:6f:36:db:28:29:
06:20:ae:77:14:43:e0:b3:f3:60:1c:3b:ca:df:0d:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:1E:07:CF:55:84:94:C5:3F:7C:73:A0:3C:40:23:89:93:EC:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
X509v3 Authority Key Identifier:
keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
sbgp-ipAddrBlock: critical
IPv4:
66.187.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:38:68:da:a8:8d:01:1f:ca:eb:7d:a8:24:fb:82:5d:28:b2:
3a:8c:47:3d:64:8a:00:b7:68:92:48:97:08:9c:cd:c4:3c:38:
65:3b:b5:9a:13:94:0b:6d:2f:21:4b:01:5c:9f:fe:16:33:7f:
36:7e:e3:a0:36:06:98:a0:91:72:8e:3e:44:1b:9d:73:a2:56:
75:88:e0:52:80:ad:44:4c:d2:e0:79:83:7b:b6:6d:33:8f:80:
e6:3b:44:3c:fb:a7:7a:29:0f:3e:1e:b4:9a:7d:54:8f:d3:ed:
ed:f9:ef:c6:f4:c4:ca:e8:2e:d2:0a:61:5c:3d:29:e8:b5:d6:
9e:8f:24:1f:a3:bf:79:88:9d:c9:6b:39:7a:2a:67:b7:c6:8a:
50:71:ab:84:57:7d:27:45:a8:4d:9f:0e:ee:eb:ff:74:5f:46:
7b:ef:d7:0d:2f:6e:8b:d5:8e:db:46:e7:a8:9f:7d:ad:05:ee:
d1:60:fd:1a:a2:6f:31:68:07:d2:fd:31:4d:d9:23:56:73:43:
34:da:77:66:d7:e7:dc:57:a0:c6:e8:81:01:52:9d:77:6c:40:
d2:dd:9d:da:e0:a8:a9:83:31:78:25:e4:4c:df:9a:3f:fd:9d:
ac:47:96:18:59:a3:48:86:07:4a:a3:08:5b:a9:df:6b:43:27:
1a:6c:20:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:28:01 2025 by rpki-client