Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa
File: 9b36560a-9f38-3318-a869-aa0d360ca5c4.roa (raw, json)
Hash identifier: cTNT/wrhRRx/eH0Bl6Xa4ft6JmYcPqPh4DZleHEn62U=
Subject key identifier: 7E:8C:62:7A:00:B6:1F:C0:E1:94:CF:56:22:B8:9C:E9:EF:68:73:EF
Certificate issuer: /CN=42b6e093-f636-4e25-936b-6fc6232f50c5
Certificate serial: 010D0C9F43285849446932F2A8E3353637D52660
Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 955
IP address blocks: 66.118.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:32:f2:a8:e3:35:36:37:d5:26:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=a91202de-d541-4788-b30a-ef2d4e6447e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:c9:c8:dc:fc:5e:f9:ef:be:87:3d:bc:6b:
2f:b9:9c:10:09:f3:68:86:8f:d3:8e:ac:51:ee:18:
b9:60:22:a0:2b:f7:35:23:c8:c6:4c:5e:2f:7c:6d:
1a:67:25:03:f8:f9:10:16:2c:ed:42:96:5e:eb:0c:
f0:89:a7:67:01:83:6e:3a:14:68:e7:e6:31:e0:c1:
48:7a:5a:f0:7d:52:7c:87:5c:d5:89:65:76:59:c9:
b2:9b:c8:79:d6:5c:21:53:e2:e6:62:4b:42:46:4c:
26:eb:6b:ea:4c:75:ac:2f:1f:72:0d:28:ad:b2:5b:
93:dd:b4:90:2e:af:9e:5c:17:4b:d4:9c:fa:8c:5e:
09:f7:40:37:74:b5:a0:af:bf:53:83:7a:47:be:25:
ea:87:46:55:63:da:83:ce:72:9f:c7:d8:d9:67:d1:
68:d7:65:e0:80:b1:79:a7:c5:7c:64:da:ae:f2:24:
8a:b6:8c:2b:8c:a0:79:4f:d6:c2:98:2a:8c:39:0b:
40:d1:f4:1b:2d:1a:8a:c1:7e:90:bc:d1:07:d7:be:
68:94:e5:99:0d:48:b5:d1:16:52:80:81:db:56:1c:
40:57:93:65:66:a4:f6:39:dd:3d:bc:1a:47:ea:a1:
07:79:f7:fe:5e:e8:89:3a:35:42:f1:19:b9:50:ea:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:62:7A:00:B6:1F:C0:E1:94:CF:56:22:B8:9C:E9:EF:68:73:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl
X509v3 Authority Key Identifier:
keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:22:bb:9f:64:ca:a7:1d:0c:85:0a:93:59:05:72:ef:35:da:
ad:34:7e:3c:a3:a5:5a:ea:fd:d9:98:cf:5a:a1:0e:67:df:6a:
aa:13:aa:45:db:b0:55:8a:cc:26:20:ad:b4:cb:ef:b4:14:a6:
cd:26:aa:c5:3a:65:8a:6b:6c:27:e3:1d:ec:ce:0d:84:90:ab:
1b:d9:22:e8:6e:a1:8e:29:be:53:fd:54:e6:5d:8d:d2:3a:78:
5b:f6:5f:9b:d7:9e:97:59:f2:d8:5e:5d:0a:eb:5a:26:c1:ec:
87:cd:0e:25:c4:0f:f6:30:e0:80:6e:82:96:04:27:81:ce:67:
40:b5:91:f4:88:22:f6:ec:0b:7c:f2:53:72:d5:ef:d6:af:9c:
2e:a2:9c:ad:c4:fc:aa:c1:a7:d1:88:d0:84:b0:b4:18:04:93:
69:a4:86:e5:8e:00:9e:2a:4e:65:b8:ad:60:c7:1a:e9:8e:ac:
82:87:e0:1d:09:ea:04:59:ce:0b:b7:4c:16:ec:ad:79:f6:c5:
4b:ab:cd:1a:bb:12:2d:72:8b:d1:e6:89:b4:08:44:83:64:c7:
17:c6:30:50:8f:1f:37:c9:dc:a9:2a:5d:f1:ab:55:bc:04:e4:
2c:8e:92:ce:07:06:cf:8e:c3:b7:6b:15:6c:5d:a7:0b:98:13:
cf:7b:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:40:38 2025 by rpki-client