Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a0e2ce9e-d699-3632-bc4e-720ca62f6314.roa
File: a0e2ce9e-d699-3632-bc4e-720ca62f6314.roa (raw, json)
Hash identifier: OrIwOgDiQejLrjFr+EdB/altcFEUL5ndkVdTfzcyhtc=
Subject key identifier: 08:66:70:C5:8C:4F:B7:2A:76:95:F9:7A:B8:62:2E:BC:CF:66:38:A4
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F43285849287E5F23E925E2C6983F4580
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a0e2ce9e-d699-3632-bc4e-720ca62f6314.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 21949
IP address blocks: 66.234.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:5f:23:e9:25:e2:c6:98:3f:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=f90cfa49-8f3b-499c-b37d-d309890547cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:8a:46:1c:7b:9c:d2:ea:c1:ed:ef:32:9e:
46:16:51:b6:f5:ce:b2:f7:fd:c6:ef:31:7f:34:73:
32:0f:44:36:cf:2f:a0:3c:3a:df:07:3b:23:f4:c7:
a0:e8:1d:7e:57:c4:05:e4:c8:5a:c3:fa:f1:3f:3f:
ab:bd:37:0c:0e:69:7f:97:3a:b8:f5:ac:4a:1d:03:
0f:f7:c8:91:c1:f8:66:12:e4:eb:60:06:ce:5d:24:
aa:48:6a:ea:e2:f4:d3:38:b6:24:ef:df:a9:02:29:
47:8c:29:9e:8f:a5:e2:de:cb:61:a4:25:80:5c:42:
67:85:ad:d1:ff:e3:ee:80:a1:c1:c4:50:3e:fc:31:
ce:65:ad:42:a1:1a:16:4f:ec:e5:7c:21:d8:33:72:
72:36:bc:4d:10:02:03:ca:c6:aa:75:91:e0:28:ce:
80:55:e5:c2:9c:3b:9b:f9:5d:58:52:e6:9f:b3:78:
95:8f:67:3b:ad:0e:d1:48:de:dc:08:a3:12:25:8c:
f9:40:99:79:54:f8:d0:15:56:ca:65:4a:ef:31:0c:
3d:6f:08:8b:94:08:a9:54:d9:e3:a3:c6:47:41:2e:
cb:dd:7b:58:f4:16:96:01:f3:fe:10:9d:2f:52:fa:
12:ed:16:ad:ba:b1:74:15:6d:c4:70:d6:81:8a:b5:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:70:C5:8C:4F:B7:2A:76:95:F9:7A:B8:62:2E:BC:CF:66:38:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a0e2ce9e-d699-3632-bc4e-720ca62f6314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.234.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:da:6d:9e:b7:00:56:ef:12:93:6c:f1:a5:8b:fb:7f:96:60:
e1:50:c8:93:22:cf:39:3b:33:6e:0a:d4:65:de:52:cd:32:c9:
41:0d:d4:7a:c3:32:57:86:88:97:49:78:45:d2:dc:68:6b:a2:
ad:82:9f:d8:0c:ae:c2:ea:8a:7e:8f:5b:02:c2:ae:c3:01:24:
20:e1:ee:a8:9e:25:85:c8:40:d9:d4:3c:c5:c9:87:e7:be:2d:
fa:85:9a:74:e2:d2:dc:69:3d:36:77:0f:ff:6a:be:ad:95:e3:
a6:43:31:52:30:43:0f:81:f8:7b:bb:5e:06:f5:94:86:55:db:
11:69:f0:ac:a5:93:c8:32:7c:5a:22:26:91:e5:c3:60:eb:b8:
84:13:0f:6a:a1:bf:c3:13:df:1f:e7:d8:01:37:1f:6b:dc:b8:
08:a0:4f:a9:dc:72:29:95:37:03:d1:20:98:89:86:89:f4:dd:
c1:60:e1:b9:43:02:84:88:cf:b6:b2:c1:62:17:f2:1d:ef:f2:
81:f5:82:e4:2f:d5:ae:44:a4:74:6c:04:3c:ce:55:74:ec:36:
f1:bc:30:a3:4c:51:55:72:2f:28:a9:d6:5f:f6:ca:c6:34:1e:
8c:71:75:bb:8c:e7:e1:e9:f2:17:3b:a7:ee:c5:97:47:10:02:
c9:6d:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:40 2025 by rpki-client