Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/8bb5479d-e4b6-31aa-b245-ef5287aceb1e.roa
File: 8bb5479d-e4b6-31aa-b245-ef5287aceb1e.roa (raw, json)
Hash identifier: xx0OUSxCuWDcqFCa65DyzkgnXw7WEtwyzRPXrcAbVS4=
Subject key identifier: D5:60:66:7A:12:ED:16:D4:A8:6A:83:8F:8E:8A:B9:31:55:7D:0B:84
Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial: 010D0C9F43285849563559AC618D9F1CB2252EC0
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/8bb5479d-e4b6-31aa-b245-ef5287aceb1e.roa
Signing time: Fri 28 Mar 2025 10:00:50 +0000
ROA not before: Fri 28 Mar 2025 10:00:50 +0000
ROA not after: Thu 26 Jun 2025 10:00:50 +0000
asID: 199527
IP address blocks: 66.227.26.0/23 maxlen: 24
66.227.28.0/23 maxlen: 24
66.227.31.0/24 maxlen: 24
66.227.40.0/22 maxlen: 24
66.227.47.0/24 maxlen: 24
66.227.56.0/23 maxlen: 24
66.227.58.0/24 maxlen: 24
66.227.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:56:35:59:ac:61:8d:9f:1c:b2:25:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Validity
Not Before: Mar 28 10:00:50 2025 GMT
Not After : Jun 26 10:00:50 2025 GMT
Subject: CN=8a3f2383-e527-4992-80fe-cfe03cb9034a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:15:17:49:1a:b6:41:ae:1e:86:05:3d:2d:70:
b3:a8:96:95:03:20:ca:a3:3c:83:1e:42:73:64:0f:
09:25:9f:34:87:93:8f:53:54:c2:71:ca:cc:f0:29:
de:d2:74:f3:d1:fa:d4:8a:12:ff:b7:22:de:c5:48:
09:8e:3d:b6:6d:47:e9:0c:f7:e5:26:63:08:68:15:
12:5e:6f:02:fc:56:8e:af:6f:c6:04:b9:4f:c1:31:
ec:1d:eb:c6:93:85:4b:ec:6e:ef:e4:da:7b:21:a4:
70:a0:f3:3f:4b:ae:2c:a8:4e:21:6d:d6:25:34:54:
b1:87:57:c2:16:94:9c:2e:7e:c4:53:e3:9e:05:6c:
79:d1:15:b7:cf:d8:77:4b:56:34:80:68:4f:ce:de:
2a:fe:fd:99:ee:90:d4:7b:d1:e1:81:3b:87:26:65:
fb:bb:f0:62:c4:82:36:d7:a7:0b:4f:de:97:67:bb:
e0:18:21:18:c2:16:d1:bc:1b:c2:d0:d0:e9:cd:56:
38:82:6b:74:8c:e5:79:02:47:c0:58:1b:a9:3d:5e:
0d:0b:d5:39:9f:00:86:31:0d:a0:29:51:7d:70:b6:
fb:e3:f7:b9:2d:30:d1:ac:55:2d:72:c8:31:30:bc:
6f:66:40:5a:32:3c:a2:de:1d:72:d5:5a:23:3f:6e:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:66:7A:12:ED:16:D4:A8:6A:83:8F:8E:8A:B9:31:55:7D:0B:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/8bb5479d-e4b6-31aa-b245-ef5287aceb1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl
X509v3 Authority Key Identifier:
keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
sbgp-ipAddrBlock: critical
IPv4:
66.227.26.0-66.227.29.255
66.227.31.0/24
66.227.40.0/22
66.227.47.0/24
66.227.56.0-66.227.58.255
66.227.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e2:e6:8a:67:d6:73:c7:e6:1b:63:54:b1:53:2a:3a:58:bb:f9:
69:b6:43:0c:99:5b:2f:86:01:69:5a:99:86:89:10:75:cd:9b:
64:4b:86:31:74:57:0d:24:35:13:b1:7f:6d:96:3c:36:20:47:
6d:14:6c:b7:17:f6:f8:08:08:7d:dc:98:d0:de:20:19:68:a4:
7c:50:b1:78:a6:93:f3:4e:1e:dc:3c:bd:63:e4:fa:58:7a:03:
7a:e0:57:64:d0:1f:ad:0d:1d:35:bf:87:05:cd:4a:0f:66:cc:
65:6e:8b:25:0f:3f:e4:84:bb:b2:be:2f:26:12:80:a9:04:0e:
04:87:f7:34:f4:18:0c:ca:11:ee:a5:c3:cc:07:f7:8c:85:ca:
e3:cd:91:08:34:79:40:03:4b:3d:e3:65:4c:f4:33:70:cd:74:
2b:85:79:24:5f:f2:e3:16:97:50:b5:d6:19:fa:e9:76:8f:e5:
a1:3f:8a:69:d1:14:cc:e7:54:52:ea:23:b2:c0:9f:e3:bd:f0:
df:cd:05:a8:71:c4:ff:55:84:df:d1:93:21:c0:9c:0c:80:78:
7a:57:e2:f5:46:f5:9c:f5:df:c5:47:2b:e8:f7:a2:1e:26:fc:
37:c8:70:35:95:0f:f3:16:67:cd:5a:26:1b:99:e8:2c:39:bb:
2b:6b:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:22:55 2025 by rpki-client