Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
File: cca54213-030a-3b3d-90f9-2b547482f0e0.roa (raw, json)
Hash identifier: MKgv/AqgJJFBY6tYIfWsi/Xqg0UFgRyIoXuWY35vuSM=
Subject key identifier: B9:37:DB:53:FA:47:9D:C7:82:59:84:8E:1B:0F:80:4E:16:26:60:D4
Certificate issuer: /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial: 010D0C9F432858486EF5B8F4D5BF3B512C069500
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 66.43.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:b8:f4:d5:bf:3b:51:2c:06:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=ae033f43-d5cf-4cd7-8770-1d7236cad079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:58:3f:0c:6f:31:cb:ed:3e:3d:fb:37:fb:
2f:8f:ff:fb:0f:0d:29:37:50:78:78:a3:30:13:45:
9f:98:99:69:c3:58:d3:d5:c8:14:b9:dc:15:2e:a8:
d2:4d:01:25:a9:f5:16:41:d1:fb:2c:21:fa:b7:7b:
32:1f:5a:73:e8:3b:ba:63:4d:c7:23:48:73:23:6f:
9d:ff:24:b0:09:62:d4:2a:b3:97:ca:f0:4d:3a:ed:
16:00:aa:e7:04:62:5f:4f:cf:7b:0c:a3:66:82:bd:
83:dc:7c:3c:bc:f4:94:28:79:11:b3:7e:3a:2f:81:
29:82:a3:ce:b5:ad:09:4f:a9:83:9e:12:40:d6:51:
aa:1e:dd:b9:4b:93:96:f3:b5:05:c3:e2:6a:b5:63:
1c:d6:b4:17:24:1b:d4:9b:fa:ae:04:dc:78:c4:88:
ec:02:cd:dc:ae:3c:d6:ca:80:83:ab:1f:e5:1d:6e:
fa:04:14:26:da:6d:c2:2c:e1:6e:44:84:ec:d8:fe:
cf:9d:07:30:1c:e8:11:6f:a4:e5:79:e3:10:b6:3d:
a0:fd:b0:84:b9:64:22:75:89:8c:08:6e:ba:e6:d4:
18:b2:58:99:37:60:01:d7:78:9e:a5:b8:4a:a8:90:
ea:d3:1f:d2:f8:72:c9:0a:67:86:16:07:82:00:6b:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:DB:53:FA:47:9D:C7:82:59:84:8E:1B:0F:80:4E:16:26:60:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
X509v3 Authority Key Identifier:
keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
sbgp-ipAddrBlock: critical
IPv4:
66.43.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:83:e6:18:d8:2f:73:62:0a:29:1a:3b:99:f0:a3:fd:5d:f2:
21:df:d2:32:0a:c5:e9:77:d8:e5:fd:72:34:6e:8c:76:82:73:
de:66:93:0b:a6:0c:93:8b:e3:26:a2:0a:d6:7d:6b:c5:86:ee:
06:07:5c:34:3a:6a:f5:43:93:df:f2:cf:f8:76:bc:ff:ea:9a:
e9:48:45:0c:3c:68:40:79:34:0b:8f:15:72:79:90:22:6b:99:
30:4a:e5:82:cd:b7:7f:51:de:a1:78:14:c9:26:2b:9c:96:ff:
4b:f3:69:a8:37:9f:bc:db:dd:b6:72:2b:0a:61:71:9c:b9:c2:
2c:90:22:17:d8:1f:dd:e2:c4:aa:14:53:9a:fc:b8:77:6a:ef:
f4:8a:90:0a:a2:8f:25:20:82:6d:fb:3a:d6:d9:62:96:61:52:
0b:75:40:fa:e9:0e:d2:f2:29:6a:c7:c3:f7:f4:a8:ac:5b:bf:
2e:63:10:00:75:5d:db:dd:09:f3:94:f3:39:a9:c8:3f:72:c9:
e7:70:39:c2:a2:26:b0:1e:a9:fe:15:f6:2a:ab:59:d5:4e:f9:
c7:d1:4b:de:9c:15:e5:dd:f7:21:17:65:9e:6b:3c:3d:cd:a7:
19:9c:d5:a3:d5:8f:a9:85:d0:d4:aa:bd:28:43:7d:df:cc:7c:
78:85:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:09 2025 by rpki-client