Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/57df41e1-ad7b-33d7-a1ab-e83d3de5d06d.roa
File: 57df41e1-ad7b-33d7-a1ab-e83d3de5d06d.roa (raw, json)
Hash identifier: iJ4yT6uVWvGmIBx/SziWrAHtIcbD3Oa59C1pNdkMyhc=
Subject key identifier: 92:DC:8A:F0:B7:16:7E:9B:36:0D:E9:B6:B5:B0:FC:40:D7:D5:EB:9F
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848FD56CF42DCF6A30B7AFC3C00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/57df41e1-ad7b-33d7-a1ab-e83d3de5d06d.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 2734
IP address blocks: 66.35.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:cf:42:dc:f6:a3:0b:7a:fc:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=f4193e9a-0899-4831-b751-d17492926f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:35:d6:ce:c3:3f:1a:76:bc:fc:a9:4a:73:
a0:9a:82:5c:3d:07:85:77:ac:8d:ac:44:a2:7d:a1:
90:58:13:3b:f2:3f:40:dd:72:ab:39:de:63:c5:a9:
a6:d6:21:aa:39:5a:0e:3d:7f:aa:6a:63:b8:87:7b:
85:9e:2a:9d:e4:d3:9c:62:d7:47:1a:61:96:fc:5e:
52:4d:e6:a2:e8:5c:da:31:be:46:25:db:83:f0:69:
13:9f:e7:55:ad:ec:24:58:a7:e5:b5:e6:6c:52:83:
da:52:ad:c3:5b:1c:df:fd:5f:2d:34:5a:87:f7:5e:
2e:ae:59:ad:d3:6d:e3:c1:95:fb:1a:bf:d4:b4:62:
14:9c:f3:5e:d1:cb:07:c0:b4:bb:fb:b5:fb:b3:2a:
12:f4:94:71:51:08:60:1f:00:ff:a5:e7:10:77:3c:
4f:ec:94:aa:0a:8a:32:7e:a9:db:dc:d2:54:d1:c7:
70:ea:a2:c7:8e:b4:28:f1:bc:27:fa:81:ee:85:03:
79:19:f3:78:6b:e2:22:73:49:4d:e5:92:1e:65:9c:
2d:13:bf:05:5d:83:1c:11:31:ad:5c:4c:d1:0e:81:
17:b5:77:d4:7f:87:9f:2b:e4:bf:72:0e:ec:77:be:
3f:53:62:87:e0:20:94:c5:21:14:87:05:87:2b:9e:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DC:8A:F0:B7:16:7E:9B:36:0D:E9:B6:B5:B0:FC:40:D7:D5:EB:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/57df41e1-ad7b-33d7-a1ab-e83d3de5d06d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:eb:9b:f3:a8:cf:df:96:b7:8e:2b:d2:42:65:b6:1b:1d:c3:
5d:b8:04:78:a8:62:d9:89:36:16:a4:c8:32:a4:da:61:fd:74:
c3:ed:c7:39:0f:1e:1b:65:8a:fa:82:f0:27:49:12:56:e1:34:
6d:40:1c:0c:06:e6:97:75:ab:9f:02:c2:6b:74:ae:ea:d3:39:
40:9c:6d:75:b1:f4:75:6f:f3:a1:1c:52:c3:11:e8:8b:23:4b:
6a:08:16:7c:9e:fc:1b:33:38:8d:58:47:7b:88:76:da:86:66:
d1:87:d9:ba:9f:5c:fe:31:c4:3b:83:08:05:7f:09:10:ee:8e:
62:26:98:35:5a:35:80:c7:58:bc:93:48:ad:5f:72:5d:92:06:
ad:02:53:18:5b:a8:b1:ad:93:6b:b2:a5:d9:ce:67:bd:c7:b8:
2b:0e:74:b4:63:99:17:c4:7f:1b:6d:fe:48:6d:45:57:3f:63:
1b:dd:d5:d7:38:bb:62:dd:dd:09:67:47:ff:d1:bc:e1:1b:b1:
88:28:11:d2:74:6c:39:a6:1b:51:27:e6:d5:5b:9b:9f:5a:ca:
49:34:98:67:90:ad:be:20:71:e0:80:e9:82:9f:12:da:29:44:
4a:ca:8b:13:e9:66:f6:42:92:1f:9f:5f:75:9c:9a:4b:ce:2b:
b0:50:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:04:00 2025 by rpki-client