Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/c4fa30a4-9d3c-3b71-a343-d0072271b017.roa
File: c4fa30a4-9d3c-3b71-a343-d0072271b017.roa (raw, json)
Hash identifier: 37YJU+C9s1pqaTYbMFXNBC08d0jBxA0+cyEataKDnfw=
Subject key identifier: E8:6B:A1:AF:F7:46:F3:BC:A6:AD:D2:B6:58:1C:91:E0:20:12:FA:0E
Certificate issuer: /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial: 010D0C9F432858486EF5BCF3392BC4AFD48CFEE0
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/c4fa30a4-9d3c-3b71-a343-d0072271b017.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 14233
IP address blocks: 66.43.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:bc:f3:39:2b:c4:af:d4:8c:fe:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=69ef67fc-7345-4e7e-b256-3cccdf81a71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:6e:c5:7c:fb:55:e6:0e:0a:37:39:7e:54:
d3:c9:a9:49:5c:f8:63:dc:2b:8d:04:e7:64:d2:22:
88:d2:72:b1:f0:1a:83:66:bf:00:d6:2f:be:06:f0:
80:85:72:b0:eb:ba:42:a2:b1:50:b6:7e:3e:c6:2d:
66:43:7b:48:4c:82:e0:90:08:59:9e:d4:84:f8:0a:
05:0f:08:2c:52:93:e6:c8:b4:db:48:5f:2b:33:dd:
5b:b0:ac:a5:6c:9e:9e:96:ea:7d:0f:70:19:b9:ac:
e5:ad:25:60:93:bb:91:9f:eb:09:a3:d1:6c:91:22:
07:f5:69:00:83:01:08:49:38:ef:9e:4d:7f:67:42:
7d:6d:b2:87:13:14:70:ad:7a:25:a0:22:ad:53:9c:
13:48:57:3a:ff:84:fd:2c:b1:d2:2a:ad:03:d2:b9:
83:67:7f:e7:8c:ca:fe:f2:c8:65:1b:97:0b:7e:1f:
97:a5:21:96:22:97:6d:37:4c:0d:68:8c:de:0a:e2:
95:67:42:5a:ae:26:3d:33:45:64:aa:4b:5f:d8:49:
e9:90:05:81:ed:8e:03:1c:9c:89:8c:1f:05:63:3d:
84:50:70:0a:f2:a0:8d:6c:fa:5c:14:75:e5:4e:13:
ff:20:12:aa:a7:c9:b7:ec:e9:d9:f9:6a:51:de:df:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:A1:AF:F7:46:F3:BC:A6:AD:D2:B6:58:1C:91:E0:20:12:FA:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/c4fa30a4-9d3c-3b71-a343-d0072271b017.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
X509v3 Authority Key Identifier:
keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
sbgp-ipAddrBlock: critical
IPv4:
66.43.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:b1:6c:a2:d8:e4:d4:28:05:98:bc:57:e5:fa:85:d7:64:bc:
50:44:21:d8:0b:38:45:bf:f6:30:28:07:77:7f:2c:56:63:5e:
40:d5:fe:35:7b:df:25:ce:06:4c:08:5d:81:5a:72:ff:71:ae:
ef:4c:18:bb:f9:52:63:58:52:58:1c:a5:8d:e7:7c:55:93:a8:
f9:e0:bf:71:54:95:43:a1:b7:8a:5a:a0:58:bc:b6:e0:ea:24:
49:b2:21:b3:ea:5c:39:10:2c:c3:50:d9:a5:19:e5:1b:72:9f:
b6:dd:23:ed:fe:63:53:fb:cb:37:0f:b4:0b:35:74:0d:a8:91:
e1:33:a9:a3:94:a8:60:da:e4:b8:76:1e:90:bd:a5:94:df:94:
02:0d:a5:c0:b5:10:3c:89:4d:9a:b9:7a:90:e3:1f:9c:72:ba:
cb:fa:22:df:a8:dc:bc:ab:e1:9b:6d:c3:f5:33:61:4f:d9:1b:
f4:0f:00:74:83:5b:cf:85:45:8b:09:7c:61:ae:4d:d9:49:e4:
51:ac:ca:ec:a8:37:65:c5:38:c3:4c:7f:bd:c9:49:78:74:c0:
c0:c1:96:cd:41:c7:69:5b:d0:95:79:6b:02:c0:a4:77:f1:0b:
6c:06:59:f8:e7:3a:0d:57:34:13:cb:66:b7:53:c4:50:e3:78:
5a:20:dd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:16 2025 by rpki-client