Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa
File: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (raw, json)
Hash identifier: bLcO0Sk2MiKjrfQb6kyGv6zOWwaWb75s4zTEybFNS9c=
Subject key identifier: C2:33:82:33:BE:96:C5:C7:68:D2:17:B9:9A:43:C2:87:69:71:49:22
Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2
Certificate serial: 010D0C9F432858485B6AF8197C715B8A989F16F0
Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 64236
IP address blocks: 66.181.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f8:19:7c:71:5b:8a:98:9f:16:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=f998a61d-9026-4ce7-9fee-66ab2a982cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:0b:21:d4:8f:09:79:d1:62:a5:4f:09:9f:
db:41:70:0b:10:cf:90:58:e1:70:84:f8:2f:de:20:
26:d3:08:be:60:01:86:f4:35:2a:de:f8:5b:80:0e:
39:7c:00:c3:ac:57:e4:4c:b4:df:86:22:dc:c3:22:
6a:a4:c5:26:c1:4e:fb:ee:dc:48:c1:fe:63:2c:ba:
35:eb:d5:a6:b1:29:f2:43:b4:17:26:1a:6f:04:6c:
0f:75:d3:c8:bd:ec:a3:6e:d6:5d:cb:86:3e:ed:98:
7e:81:90:4b:66:af:f4:6b:eb:10:b5:32:8c:4b:bc:
ef:d5:43:4d:4f:0b:9f:89:20:ca:52:d7:4e:95:dc:
a7:74:c2:e1:47:c1:1d:00:5e:6c:b1:37:d9:bb:af:
78:cf:7f:c6:27:05:b3:b1:eb:7f:1c:4a:fe:b6:1f:
cf:5f:4a:64:90:d9:8e:99:a7:d4:0d:ee:80:11:2c:
ee:92:9c:8a:c1:b6:10:ac:08:0b:b5:63:7f:14:47:
f0:0d:48:e4:7a:ae:26:86:7f:f9:6e:b1:b3:b9:72:
dc:fc:aa:15:6e:d5:30:32:dd:21:d4:89:08:32:03:
65:b2:16:d5:7d:01:1a:b9:54:ce:a5:ba:58:6d:82:
8a:d7:e4:4f:6a:9e:ee:cc:84:9e:7a:8a:67:e1:d5:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:82:33:BE:96:C5:C7:68:D2:17:B9:9A:43:C2:87:69:71:49:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl
X509v3 Authority Key Identifier:
keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.181.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:7b:2a:33:e9:4e:82:ac:d1:7e:04:47:f9:3e:7a:9e:a7:f6:
d8:65:e1:d6:ae:e2:33:f4:7f:39:ac:d3:ab:a5:ee:c5:1f:ac:
68:46:1c:ee:dd:c3:dc:7d:42:f3:e2:d4:d1:c4:ec:17:18:fa:
0d:72:1f:db:e8:4d:83:f8:b7:48:56:92:0c:71:23:9a:7a:ee:
10:ba:f0:56:0c:89:8c:14:01:2e:08:2c:c7:10:c7:5a:19:98:
c8:ac:25:63:6c:b9:61:4b:f2:df:ce:9f:52:91:76:5a:3b:4b:
91:40:2c:4a:f0:54:b9:e4:26:88:d6:02:20:5c:50:ea:95:cc:
1f:0b:c4:84:88:d0:35:0b:5d:5c:f2:95:91:f9:22:24:cd:82:
93:45:01:54:d0:58:d8:c6:41:a5:cc:31:fa:d6:26:18:75:21:
38:dc:bc:af:d5:84:81:d9:60:85:ef:25:08:96:e3:0a:16:cc:
56:b3:11:d0:f8:4f:f1:27:e2:9c:65:e5:12:7c:31:6b:14:3f:
29:83:d7:4e:5c:cc:a5:3d:e2:6b:a4:06:fe:87:d1:72:61:43:
d6:c0:01:00:cc:ff:9e:4b:5e:96:ed:8b:0f:15:b0:fc:ef:23:
7e:e5:00:c0:a8:4f:3b:cd:95:48:47:d5:fd:02:0c:16:83:b1:
ad:c8:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:41 2025 by rpki-client