Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67e5086f-19ee-309c-a914-5ede9d5b3d2c.roa
File: 67e5086f-19ee-309c-a914-5ede9d5b3d2c.roa (raw, json)
Hash identifier: oCVBTbx1OxsI2cYjWZ8ceUuepQ4SJi4UA2Gtr4mp8vg=
Subject key identifier: F8:3E:49:34:7F:22:FC:91:DA:91:4D:8A:09:12:EF:58:03:68:7A:9D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F008888A5B201F90F25F2040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67e5086f-19ee-309c-a914-5ede9d5b3d2c.roa
Signing time: Wed 19 Feb 2025 19:38:05 +0000
ROA not before: Wed 19 Feb 2025 19:38:05 +0000
ROA not after: Tue 20 May 2025 18:38:05 +0000
asID: 44477
IP address blocks: 50.114.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:08:88:8a:5b:20:1f:90:f2:5f:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:38:05 2025 GMT
Not After : May 20 18:38:05 2025 GMT
Subject: CN=0b0fc448-7af6-49af-a564-d0a3aaeaefd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:b8:c0:0f:9c:42:79:d0:d9:bb:f8:8d:e6:
4f:7b:e7:53:33:43:72:02:77:b6:98:ab:89:5c:4f:
eb:99:20:4f:f0:d4:89:3b:51:0a:ff:a2:94:05:8f:
08:a4:55:2b:df:e1:b2:6f:b6:a8:58:b4:ff:5f:b3:
f4:e3:ef:12:64:6b:cf:ea:88:d6:e3:b1:8f:d8:bd:
30:d3:7e:cd:3b:3e:d4:e3:ea:df:94:5e:37:4a:95:
f3:1d:45:e8:06:65:f4:8d:85:6b:c7:f8:b4:ce:a6:
a1:6f:48:a2:0c:e4:a1:ce:8e:36:62:c0:bc:64:21:
08:e6:33:b3:90:bf:f2:ef:a3:0b:9a:55:ee:d2:ed:
a7:9f:1e:e3:0f:9a:4d:05:7a:16:ad:70:5c:bb:fb:
c2:7f:f2:dc:52:35:b7:06:46:1d:9d:5b:3d:1d:84:
2e:55:51:5f:f6:76:82:86:4a:ef:d5:ce:7e:87:45:
a0:54:92:52:d5:ca:1e:ed:87:8b:88:1b:6b:c6:ca:
ed:2d:96:45:87:50:03:56:ba:c7:b2:12:48:86:80:
4a:05:42:5b:fa:7a:d5:58:ca:28:7d:d8:f6:df:fb:
08:2a:e9:27:02:25:97:ad:a9:27:8c:64:39:6c:95:
15:0a:e7:36:fa:ec:54:ea:91:31:00:bd:56:da:54:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:49:34:7F:22:FC:91:DA:91:4D:8A:09:12:EF:58:03:68:7A:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67e5086f-19ee-309c-a914-5ede9d5b3d2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:40:0e:83:0f:d0:7a:98:13:2e:92:47:bf:6b:dc:09:49:af:
3b:4b:fb:6e:ae:e6:3f:ce:e1:69:7a:36:0c:59:97:23:d8:4b:
27:22:73:9b:42:5b:8d:e5:1d:5c:d6:bd:b6:b9:60:f4:3c:8d:
90:02:17:3f:8b:3d:cf:a2:15:e2:5d:8d:40:4f:ad:c4:b8:95:
fd:d2:cb:59:23:37:45:05:e4:43:53:5c:36:a0:a6:0f:0d:47:
04:1b:04:a7:ac:a1:e8:35:94:59:47:21:fc:91:79:3a:82:04:
92:1d:f3:0b:4f:78:55:5e:58:f8:8d:7f:31:bd:75:47:24:1a:
c3:d7:2e:c3:3a:01:7b:6e:bd:1a:68:5a:2c:88:83:4e:03:b6:
7d:46:04:6b:1e:e1:c8:3d:31:6b:88:31:b6:89:20:b4:40:c5:
2e:f1:89:11:87:94:2d:f6:78:8f:30:80:a5:3a:bf:bf:44:62:
d0:ef:c7:53:0a:56:df:93:5c:d6:c5:d8:d0:7a:93:0b:54:78:
70:2f:93:e9:89:75:c0:a0:fd:b1:b0:50:a3:3e:b9:04:cd:5f:
7c:ad:60:db:99:96:f0:b8:e5:d0:ed:14:5e:d9:d2:79:8e:f3:
5a:cb:a9:b1:80:31:cc:95:56:56:52:8e:6d:f5:94:ef:53:55:
56:65:e0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:31 2025 by rpki-client