Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28315b63-298b-35ee-b1bf-1494728947e3.roa
File: 28315b63-298b-35ee-b1bf-1494728947e3.roa (raw, json)
Hash identifier: nXbOechVmpI9vIQJYHLW6fj41nCXK0uCCZCN2rf1hAs=
Subject key identifier: 93:13:A2:E6:C5:55:21:F9:0D:1A:03:E4:4C:15:D8:BB:85:BB:E7:3E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFEF7DE2C9989EC02B0B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28315b63-298b-35ee-b1bf-1494728947e3.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 54288
IP address blocks: 66.220.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ef:7d:e2:c9:98:9e:c0:2b:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=37c5be23-8ef6-4cbb-8fae-49f5ea2f7965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:da:c9:72:5e:12:d7:d4:ce:ba:3d:74:9b:
f1:33:4b:a2:89:2c:e2:41:51:60:ae:80:ff:a3:b6:
40:03:a8:4f:35:fe:8e:68:22:ef:31:bc:fc:2d:04:
0f:a3:88:44:79:19:f0:a7:2e:6e:f0:93:89:50:91:
d3:d7:43:38:aa:cd:c8:d1:fa:af:4c:f2:87:c0:2c:
fd:88:e3:05:da:35:bc:3d:99:0f:00:da:90:c2:54:
3c:50:8c:c2:d6:02:38:01:7e:ef:27:1c:ab:ca:0b:
e2:2b:65:10:c0:be:5b:d5:17:01:f0:77:00:d5:e8:
96:45:90:72:10:f5:a7:8e:97:16:a0:df:81:75:7b:
51:8e:c7:a3:8d:d0:55:f6:a5:85:d7:7e:fc:a4:48:
3b:95:15:d6:5a:58:e1:ab:cd:02:6f:0a:4f:f7:70:
ce:e1:e9:54:a1:76:d3:d3:6c:c1:77:1b:10:ec:8d:
03:fd:c9:1b:c3:3a:69:6c:0e:8b:ce:86:60:06:ae:
ef:ed:1b:f6:17:24:a5:29:04:b9:e8:ee:90:4b:07:
e3:1b:24:8f:0c:a9:36:6c:d8:a9:de:11:56:af:91:
3d:9e:91:97:b6:a1:a5:25:84:ab:b5:cb:9e:6d:0e:
23:e9:1a:55:d7:d2:02:79:e3:e7:80:ba:c6:b3:78:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:13:A2:E6:C5:55:21:F9:0D:1A:03:E4:4C:15:D8:BB:85:BB:E7:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28315b63-298b-35ee-b1bf-1494728947e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.220.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:14:9e:00:50:14:e8:26:bd:87:20:72:a5:57:3b:42:14:b4:
c1:a7:a2:3e:02:29:0c:f3:6f:eb:76:96:c6:cb:37:cf:e4:62:
68:7b:9a:76:65:79:62:21:c9:e1:9f:12:fe:6c:59:46:61:f4:
a3:0f:2b:80:e5:c7:30:13:c1:eb:bf:12:87:d2:d1:35:d9:aa:
81:9a:4a:ef:06:7c:ca:47:0e:d7:a3:05:05:8c:98:31:98:55:
25:42:33:bb:eb:14:29:5a:70:2d:83:fc:64:fa:0b:7c:f2:93:
7f:db:5c:15:98:3e:14:de:7e:a2:94:32:f2:ed:2c:a4:ad:cd:
5e:ed:57:1f:5f:39:00:fe:af:8e:84:9f:c9:aa:d6:62:59:bb:
e3:03:c5:67:70:48:67:04:a6:70:c1:ef:29:02:0a:c9:07:9f:
aa:64:63:3f:b3:f8:e0:34:3d:53:f7:4a:18:4b:b4:03:e3:59:
ec:8d:1b:41:8a:c0:60:6a:c1:78:3a:86:18:1b:66:21:48:9f:
de:be:39:b9:a9:ab:96:c8:19:56:36:a2:c8:b7:c2:7c:c8:d2:
d5:76:cd:a7:ed:19:ec:ee:e5:9f:68:46:dd:67:02:00:13:99:
20:f7:ef:8e:f6:af:09:02:07:cf:4c:46:7a:a8:13:64:db:5a:
02:fe:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:19 2025 by rpki-client