Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/62db0999-415a-3faf-901c-9623d2cfe9e0.roa
File: 62db0999-415a-3faf-901c-9623d2cfe9e0.roa (raw, json)
Hash identifier: QYvrYO4frw9t9J3UrHSqdj73ZOxEKSeMi/igHq5x4Is=
Subject key identifier: D2:B2:38:A0:1C:63:3C:E9:D4:33:21:EB:CB:5C:13:EC:A4:26:87:55
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C2B63A5D05D1B6D06633FCE0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/62db0999-415a-3faf-901c-9623d2cfe9e0.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 400061
IP address blocks: 66.118.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:3a:5d:05:d1:b6:d0:66:33:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=f2c6aa1e-29a8-4fce-960f-3aa9a1c2b276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:79:c3:21:8c:ea:e8:a7:71:cc:cb:87:32:d1:
e4:bc:d5:8f:6a:7b:d9:00:2c:71:37:28:29:79:82:
d8:3a:5f:07:6c:54:74:4c:01:e3:8c:95:37:c4:94:
06:23:17:21:69:86:38:28:10:7d:33:6f:08:9b:97:
1f:72:c7:0b:4d:69:b9:13:d7:8a:f7:37:e8:a7:f3:
70:37:e6:8e:e9:2b:6f:3a:db:db:be:df:46:5d:df:
3a:c7:ab:b0:a5:d2:21:27:c2:4b:b7:ff:8a:7f:f6:
14:24:86:e8:97:8e:09:e1:e0:ae:3f:88:a2:70:57:
00:60:65:c1:0e:24:d5:09:10:db:ac:78:c6:96:40:
b4:d6:f3:b7:3c:e2:46:76:f5:38:8d:29:f5:c2:50:
cd:4e:17:e6:a3:c2:c2:12:53:96:69:ee:c9:18:c9:
96:58:25:2c:bd:8f:46:92:14:f5:dd:ab:5a:a7:9e:
ec:50:f7:a8:8f:03:3d:bb:d5:ba:d6:a8:81:7f:ce:
32:92:8e:9a:cc:52:62:54:7b:29:e7:be:97:21:d8:
a0:65:71:1f:d5:7f:d9:e0:51:76:fb:4b:20:1a:86:
88:78:2f:19:e5:5d:e8:3d:57:36:fa:0d:89:24:94:
6d:cf:e5:ea:81:dd:cd:31:f8:d9:29:cb:fd:15:ff:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:38:A0:1C:63:3C:E9:D4:33:21:EB:CB:5C:13:EC:A4:26:87:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/62db0999-415a-3faf-901c-9623d2cfe9e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:1e:c9:6b:7b:43:c5:a3:b6:de:f4:12:c4:c9:c8:3c:bc:a1:
48:47:d3:c4:d3:51:71:1f:1a:9e:20:c9:fb:05:95:1d:3e:e3:
68:6b:db:ce:06:49:f2:e1:e2:b6:a4:9d:5b:0b:f1:33:33:69:
bb:52:05:31:ce:29:84:65:f2:8a:1e:dc:80:9d:de:23:73:4e:
97:5b:ce:be:2f:79:5a:49:15:78:34:b8:87:5c:3b:d6:8c:8a:
24:82:da:0e:ee:9b:e0:db:fc:b4:ca:c8:5c:5e:4e:56:d2:17:
49:7b:89:fc:23:c6:a2:0f:b2:d8:6b:80:a3:ea:c8:4e:d9:6d:
7b:af:cb:58:4e:90:58:2b:44:0e:67:ed:03:ff:11:3c:12:b6:
88:29:a2:a5:1d:28:17:43:e8:b8:b7:58:64:92:4e:46:c0:f5:
df:36:41:e4:a0:37:7d:2a:46:fc:b8:8b:ac:43:aa:86:3a:fe:
42:56:13:3c:53:c5:3f:30:d4:de:20:8a:ed:91:f5:47:07:a4:
1a:e1:02:cb:f4:71:0b:d0:d3:c9:e2:90:0b:06:f3:eb:41:a2:
a3:6a:4c:14:58:57:a7:c4:ef:9b:0e:9a:25:0c:14:c6:2a:bf:
7e:46:e2:27:a6:02:5a:73:db:78:fc:0d:b5:9f:61:3e:79:41:
85:42:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:51 2025 by rpki-client