Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa
File: a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa (raw, json)
Hash identifier: o3xH8t/d5eTebmEWgH/92/Foyfmh6YKGR5v9DWua6Dw=
Subject key identifier: 25:F6:78:C3:26:A6:19:D3:D4:87:A6:2C:6B:66:BE:36:6D:4C:10:65
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150D0BE89CCFE66C1EE3640
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 213122
IP address blocks: 66.118.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d0:be:89:cc:fe:66:c1:ee:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=54bc320f-2720-4064-9f7f-ec2e94060f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:96:fa:62:52:9a:a9:8d:4d:51:8d:9f:11:
01:b8:3b:17:79:3f:ce:0e:50:f0:29:51:c6:e3:4e:
90:59:dc:d4:bb:d6:3b:9a:f4:ec:5c:83:11:5b:59:
01:12:cc:be:df:16:49:3c:19:ce:79:6a:53:38:00:
19:ad:d2:8b:2d:28:26:17:96:22:e0:44:83:b8:3a:
7b:29:c7:a8:bb:15:e0:9b:a7:27:78:7b:30:2e:a0:
1c:25:6b:cb:e4:3f:f8:aa:93:2f:e2:d3:19:7d:1a:
a9:e1:b0:7e:61:f6:3b:d0:10:d3:66:ef:3c:c1:a8:
23:6e:bd:c6:72:c7:55:ee:f7:31:73:29:51:a0:01:
d2:69:d7:23:bf:cf:66:55:80:86:d4:22:30:47:12:
45:ce:3a:36:97:e0:60:23:46:b5:16:b3:c7:d0:5b:
fd:8a:dc:fd:22:5a:94:22:01:b0:3f:19:1d:1f:f7:
66:63:c9:8b:3d:06:26:23:1c:0d:cb:b4:94:2e:a9:
3a:f1:22:54:74:1d:a5:3f:f3:9a:1d:7a:6a:59:f4:
48:18:55:5b:25:6b:e2:a3:12:89:ad:3e:a8:6c:32:
ff:3d:96:63:a2:2f:8e:49:e3:25:a8:04:51:65:ae:
6d:75:46:29:00:6b:43:f3:a7:53:13:dd:57:6b:05:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:78:C3:26:A6:19:D3:D4:87:A6:2C:6B:66:BE:36:6D:4C:10:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:bb:d5:82:d3:79:f4:a5:ec:b9:23:75:22:ee:9f:cb:1a:87:
19:08:f2:b8:5f:95:07:1a:7e:b1:11:f8:a2:b0:dc:63:66:40:
b9:c1:fb:ad:76:cd:5a:b0:07:c1:47:9f:60:bf:b8:77:81:e9:
74:53:18:51:44:46:ee:90:75:b6:4d:e3:aa:a1:c8:19:44:76:
29:cf:97:d9:8a:65:63:0f:48:64:62:ae:e0:d5:4c:7c:03:ae:
17:60:e5:3f:e0:63:7e:72:01:cc:b3:20:24:6c:33:63:01:94:
a5:73:c7:5c:ca:3e:e3:ae:21:b5:64:40:c7:b4:fb:31:4d:f4:
42:31:ca:01:ea:18:6a:d3:6a:6f:b9:4b:51:83:0e:62:f9:ee:
ab:f3:85:eb:46:04:b5:6a:5d:e3:5f:b5:5c:3c:a6:13:3e:85:
a9:f6:43:ed:46:7d:ef:9d:5b:a9:f5:ab:0a:84:c8:c4:9b:d3:
b9:30:17:9a:d0:60:ef:33:8d:07:ef:18:33:c5:f2:ca:c5:f2:
ca:6b:77:e4:31:47:5d:6b:7d:72:63:5f:59:de:df:9a:8c:a2:
5e:2c:21:fe:06:5f:95:e8:0f:e9:67:66:24:4e:33:e0:26:18:
7f:5a:51:97:40:95:50:60:da:ef:aa:e4:b2:b7:53:42:db:71:
36:dd:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:16 2025 by rpki-client