Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3db7ca43-ca78-353d-89ba-635fa8e96323.roa
File: 3db7ca43-ca78-353d-89ba-635fa8e96323.roa (raw, json)
Hash identifier: U4ZRUHpHPAuqRasOyv+i0/2H5vxhuN4ufP6mPYIqK4w=
Subject key identifier: 99:DA:04:06:2F:D0:33:B0:3F:AB:7B:9C:0B:C3:DE:13:B1:5F:F0:2B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00886CCCB242D02671B2780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3db7ca43-ca78-353d-89ba-635fa8e96323.roa
Signing time: Wed 19 Feb 2025 19:38:04 +0000
ROA not before: Wed 19 Feb 2025 19:38:04 +0000
ROA not after: Tue 20 May 2025 18:38:04 +0000
asID: 44477
IP address blocks: 50.114.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:08:86:cc:cb:24:2d:02:67:1b:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:38:04 2025 GMT
Not After : May 20 18:38:04 2025 GMT
Subject: CN=8f2ea597-60da-4144-9d2b-881ebcd3b5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:57:4f:75:d7:16:10:cb:d8:6b:08:d3:d0:
f4:ba:36:11:e8:df:09:f2:89:35:87:93:d7:96:5c:
82:44:57:82:93:2a:1b:fd:be:26:68:cf:1c:ae:1a:
e5:cf:cb:db:47:30:0a:8a:34:ac:65:47:11:dc:cb:
40:14:ec:53:23:2b:ee:4c:1a:24:18:d0:48:84:37:
89:2e:02:9f:47:8e:d8:a7:dd:17:ce:6c:23:10:17:
cd:c0:99:99:6d:c8:9e:76:5c:c0:c4:58:75:89:f9:
0a:8c:17:17:20:46:91:bc:fd:47:ba:89:3c:c9:96:
e2:9d:5a:66:00:4f:67:f9:ac:ec:b4:f4:e9:85:7a:
8b:08:03:d2:24:3d:c8:e9:46:f1:ea:e8:35:10:70:
c2:53:b9:ad:1f:0b:23:88:36:f4:47:d4:44:51:34:
48:3a:a7:3b:c0:33:cc:2f:ab:d2:b7:50:7e:87:51:
36:13:19:81:1d:a9:28:f6:0d:de:52:92:fb:9e:9d:
6c:84:f3:00:ad:c5:a4:03:dc:7e:f9:55:56:78:34:
f9:1f:6b:29:7a:b8:fe:4e:42:1b:3b:01:4a:ec:e7:
45:2e:04:08:f5:88:5a:a6:1b:69:b3:98:be:01:bb:
2c:ea:6d:d6:3c:d6:82:cd:ce:98:ed:bd:0c:74:d4:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:04:06:2F:D0:33:B0:3F:AB:7B:9C:0B:C3:DE:13:B1:5F:F0:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3db7ca43-ca78-353d-89ba-635fa8e96323.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:3b:f0:07:43:89:9e:cc:d6:2b:37:db:4b:de:8e:3e:bc:e8:
24:5b:4c:7f:73:2c:e9:61:d8:c9:08:00:51:fb:5e:d2:9c:c5:
eb:29:b0:17:55:8f:80:b7:58:83:3c:49:43:c6:93:81:ee:79:
36:00:b2:c1:51:3f:32:5c:45:2d:aa:8f:66:d0:6f:94:6a:df:
70:3d:d4:64:7b:1a:de:02:17:6c:86:46:55:d0:3c:69:58:33:
f6:7a:32:e0:b1:74:94:94:bd:78:82:5b:38:41:ff:cb:1e:af:
b2:44:60:04:7b:ca:54:e1:4b:60:76:62:3f:6e:bd:55:51:41:
78:54:93:12:86:ca:11:2c:d4:21:5f:df:0d:aa:22:ad:84:13:
15:bd:c2:83:e2:a5:c0:47:6f:ec:ba:63:5e:9b:bc:c5:ea:33:
59:90:81:83:a2:79:12:82:b9:bf:be:f7:05:80:b9:b2:38:d1:
33:5c:99:11:b6:7f:bf:fb:01:28:c5:b1:d5:e0:e1:92:5b:d2:
86:9d:22:e7:65:b9:87:fd:67:42:1f:1b:b6:83:f0:e1:81:ee:
f1:6d:b5:24:d3:6c:47:60:1a:cf:f1:c9:be:45:b9:9e:5e:6d:
87:04:9d:b5:ea:82:ed:7a:40:ce:22:7e:19:ac:43:9a:9f:e8:
d0:13:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:59:30 2025 by rpki-client