Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa
File: d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa (raw, json)
Hash identifier: QKRQfGEq+y96iLN+x3i3eEjCrNZtS47GbJsXak5GlJg=
Subject key identifier: 31:DC:CB:E0:22:F7:E6:B2:17:BB:01:D3:F9:C2:6B:F0:19:68:26:79
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFEE192BBE27FE5380A400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 397659
IP address blocks: 216.66.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ee:19:2b:be:27:fe:53:80:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=1ff6efd1-b3d2-4d70-9607-5d7a0e83b39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:d7:76:29:03:0f:04:5d:28:94:fb:9e:88:
44:eb:24:9a:a0:8b:b8:bd:d9:90:44:7a:7f:93:33:
a4:f0:ae:e4:79:13:0b:d0:24:22:76:86:9b:77:46:
38:4c:b0:40:78:70:46:6d:99:0e:8c:9d:e4:03:0e:
59:d3:a1:96:5a:75:e0:b2:5e:9c:be:43:b2:00:4b:
2d:e9:0f:66:5e:79:f8:20:2b:3a:6a:56:cd:19:58:
62:6a:8c:95:f4:a0:6f:40:a8:fd:94:66:3d:56:45:
43:61:d4:b0:54:42:18:eb:6a:b2:37:82:fa:33:5e:
38:3a:30:5a:5b:a5:d4:26:41:54:a1:89:65:aa:89:
25:0a:74:c8:25:59:61:a3:1d:73:3e:18:53:4e:32:
3a:e7:ee:28:a0:c2:66:fc:90:49:65:21:73:45:87:
3e:dd:3d:7a:fb:d9:aa:ca:bd:51:e6:0e:b5:54:3f:
1b:67:49:58:b3:50:e3:d0:ff:c7:0a:eb:43:f8:45:
37:3a:a2:e5:f2:61:70:7e:a2:6d:31:cf:31:42:7c:
2b:de:48:f3:3b:b7:41:a5:91:07:2d:6d:39:c9:6a:
54:99:08:1a:d6:9d:4f:63:5f:7a:52:6a:3a:2c:88:
69:95:69:19:9c:e8:91:00:b5:50:d0:c8:7c:4e:ec:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:CB:E0:22:F7:E6:B2:17:BB:01:D3:F9:C2:6B:F0:19:68:26:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:09:f4:f9:7a:d4:44:a1:2c:7b:5a:05:d7:c9:ff:c8:98:55:
d0:fb:a8:a1:08:55:5b:d4:28:0a:a9:ab:59:70:f8:21:28:01:
b8:68:03:09:72:ca:26:a5:ee:c4:a5:4d:3c:55:7e:42:67:9c:
f1:61:3c:27:10:c5:18:00:7a:f6:67:f1:25:8c:f9:af:6d:0b:
5a:bd:04:b6:b2:dd:57:4b:ce:d5:ad:f2:22:91:1b:75:28:0e:
99:ee:39:87:e7:0a:33:7d:bb:c2:ac:c1:ff:51:39:4b:0f:07:
aa:b2:db:2c:d8:44:a4:a1:d0:89:35:5b:b4:ff:1a:8f:38:1a:
e7:5a:97:a8:ee:73:42:50:7b:50:cb:76:90:a2:ed:83:19:79:
65:dc:24:10:29:70:18:b7:8d:46:b1:fe:8c:eb:08:0f:94:4f:
3c:24:40:91:fc:6d:8a:28:8b:1a:ab:21:e5:6a:33:5f:b6:80:
78:b0:bf:84:08:7a:72:8b:c0:2c:98:a2:a3:92:28:d2:92:5e:
99:1a:0b:68:32:4b:19:95:21:1e:a9:b2:82:1b:a0:89:56:bc:
ea:67:df:de:a8:72:8b:b2:8b:e4:34:6b:0f:85:2b:c4:a0:db:
16:65:30:a1:b4:51:b4:f7:f7:86:74:12:12:ed:ba:56:a7:98:
57:37:4e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:04:53 2025 by rpki-client