Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5a338a8-e353-428b-bc10-c765ea2bcd83/9d721641-3ddd-310c-ab4d-67cb68f3674f.roa
File: 9d721641-3ddd-310c-ab4d-67cb68f3674f.roa (raw, json)
Hash identifier: 1+oMjWuRiDbCwezoempB0M1Gi+65HoGBJTS1jhrNg8o=
Subject key identifier: 1F:B2:93:52:79:AE:3F:15:9F:22:6D:FF:50:46:16:7C:0C:88:12:B5
Certificate issuer: /CN=a5a338a8-e353-428b-bc10-c765ea2bcd83
Certificate serial: 010D0C9F43285849244E79E32139865556323900
Authority key identifier: BE:FE:02:54:BD:BE:6F:56:33:8D:32:7E:C0:E8:72:9A:86:16:F2:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5a338a8-e353-428b-bc10-c765ea2bcd83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5a338a8-e353-428b-bc10-c765ea2bcd83/9d721641-3ddd-310c-ab4d-67cb68f3674f.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 66.187.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:79:e3:21:39:86:55:56:32:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a338a8-e353-428b-bc10-c765ea2bcd83
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=0fc5cfd1-c8b2-46a0-8265-f835d88b84b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:37:50:d1:34:da:90:8d:4d:22:0c:de:01:6b:
f9:ba:15:05:35:4e:fd:58:03:87:7a:39:73:a9:52:
e9:f5:08:0f:6a:cb:2d:10:c5:8f:50:9a:01:76:bf:
68:fb:71:77:c3:57:04:69:6d:03:89:8a:6b:ca:33:
7b:be:3f:6d:c2:01:c0:26:45:57:76:a1:be:51:65:
1b:25:d9:ca:fd:74:7a:d6:cc:10:f5:b3:26:87:f8:
91:50:2d:e3:10:4f:19:03:03:9d:6f:4f:75:93:ec:
61:a2:67:d6:4b:89:aa:13:66:f0:88:65:29:ba:73:
5f:5c:ed:a1:23:94:f3:ad:53:75:09:7a:91:61:99:
d5:91:6c:82:de:a9:73:12:17:c4:23:bd:36:3f:d5:
b4:8f:6c:90:48:ea:e9:74:11:fc:98:2e:96:96:f4:
94:44:05:f8:73:13:b0:f5:28:94:01:c6:8c:4e:48:
8c:17:9f:ff:3c:b3:03:1f:9d:27:4e:a3:ab:4f:1c:
c4:7b:7d:b7:c0:5f:7a:a0:22:bc:49:51:49:d0:1c:
20:c8:d9:0b:93:7c:18:19:bb:e6:db:da:d5:ab:69:
20:fe:ee:25:45:91:4f:a7:a8:01:0f:64:ac:67:c6:
e1:c7:45:84:94:ef:d2:2a:a1:de:d7:97:c8:6e:ad:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B2:93:52:79:AE:3F:15:9F:22:6D:FF:50:46:16:7C:0C:88:12:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5a338a8-e353-428b-bc10-c765ea2bcd83/9d721641-3ddd-310c-ab4d-67cb68f3674f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5a338a8-e353-428b-bc10-c765ea2bcd83/a5a338a8-e353-428b-bc10-c765ea2bcd83.crl
X509v3 Authority Key Identifier:
keyid:BE:FE:02:54:BD:BE:6F:56:33:8D:32:7E:C0:E8:72:9A:86:16:F2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5a338a8-e353-428b-bc10-c765ea2bcd83.cer
sbgp-ipAddrBlock: critical
IPv4:
66.187.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:75:fd:f0:69:df:99:7f:13:87:20:c5:76:fc:7c:6d:67:57:
2d:20:27:b8:e4:0e:61:de:86:5d:85:e1:76:8e:12:53:0e:0b:
40:10:20:22:b4:1a:70:55:eb:a6:f4:7f:cf:c7:ca:0b:d2:42:
c6:3e:e5:43:2e:39:85:8c:89:b0:bc:12:2b:a1:d9:22:36:41:
11:4b:7f:10:1d:74:f4:da:fb:23:5c:b1:e1:54:5f:0c:ba:c9:
d0:00:51:97:bc:c1:26:4f:4c:c3:22:b2:8f:8b:9e:4d:5d:13:
76:55:38:dc:4b:2a:a7:fd:29:ba:08:2b:43:b6:1c:59:70:70:
90:73:a2:41:bd:1a:57:50:f8:5c:a0:9d:f9:78:b5:07:8c:65:
08:a0:b4:f3:82:f8:28:06:75:77:73:e6:e6:42:9e:e3:7e:81:
91:bd:77:41:9a:17:04:44:4f:6b:7a:07:25:d1:98:80:55:94:
ac:3b:3c:39:33:16:3a:11:19:5d:25:e7:ee:0a:e5:a9:53:e4:
2b:ca:85:ed:86:88:e9:84:1f:ef:d3:72:33:67:48:2b:5f:ee:
1a:43:98:82:87:01:43:b9:40:5c:da:55:a7:67:42:c3:14:72:
f8:b2:62:5e:39:3b:3f:33:bc:58:08:cc:26:15:22:12:c0:22:
3a:67:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:13 2025 by rpki-client