Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cbd7eb99-d534-33bc-b1f1-61d07e2c973b.roa
File: cbd7eb99-d534-33bc-b1f1-61d07e2c973b.roa (raw, json)
Hash identifier: WZJwgrbxKqdaQQM27cZNAL33Zqsmxp50pCUCgbqi8rc=
Subject key identifier: 66:33:D0:0B:F3:1D:A2:CC:3A:2B:DC:22:F1:DA:AC:38:B7:42:A0:94
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848FD56CF2AFA6DB27BF4768080
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cbd7eb99-d534-33bc-b1f1-61d07e2c973b.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 2734
IP address blocks: 66.35.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:cf:2a:fa:6d:b2:7b:f4:76:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=ac0afb7d-9517-4fb7-a3c8-97b57799eba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:62:60:0b:60:3c:5b:1b:d1:08:02:93:18:
7c:61:05:df:d7:2e:8d:8e:89:35:6c:03:d2:ba:dc:
5b:73:27:64:f5:22:06:f2:0b:80:71:e8:bd:0e:93:
d4:22:fd:1e:94:16:e0:f6:08:f4:66:f0:a5:5b:c7:
fa:34:d2:2b:4f:84:69:bf:21:6a:a8:ce:bf:0b:fd:
12:60:1d:a3:dc:af:79:1d:b0:da:a7:4c:6a:42:ed:
67:eb:f2:c2:30:da:7f:e0:0c:30:bc:a5:6b:d9:27:
e3:2c:ca:18:31:32:2e:68:68:ff:46:9a:65:64:cc:
ca:3a:2d:01:24:bb:1d:b2:1a:1d:be:1b:d5:f3:0f:
d0:29:c8:6f:46:ef:8d:b2:12:75:01:03:0a:b3:d3:
57:d8:6c:1a:75:ba:2c:77:52:80:16:49:ac:38:cd:
97:2b:75:f1:2c:24:10:c7:4c:e9:f8:9c:b4:aa:09:
9c:c7:d1:83:6d:0a:02:77:cd:d9:d5:60:ae:61:07:
de:95:c0:90:7e:7e:2b:49:0a:18:0e:da:84:dd:79:
43:6c:2d:a5:49:fe:f4:8d:fe:f7:c8:7f:60:36:5b:
ce:ba:38:42:5f:85:c8:ee:6c:e6:c9:e5:96:10:34:
52:84:f4:6c:b8:0c:0c:95:66:9d:a7:ab:1e:55:84:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:D0:0B:F3:1D:A2:CC:3A:2B:DC:22:F1:DA:AC:38:B7:42:A0:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cbd7eb99-d534-33bc-b1f1-61d07e2c973b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:fc:1e:10:39:5f:57:0c:d7:1c:cf:db:a7:bc:e6:2e:99:6b:
ca:b6:25:14:b8:1f:8a:26:70:a0:18:3c:df:af:d7:ba:fc:21:
38:f1:19:59:7a:03:8d:a3:c5:81:8d:7b:6c:0f:8e:62:29:3b:
5c:15:91:55:a4:fe:27:ad:08:1b:46:54:88:38:41:79:a5:88:
43:a6:92:8f:61:e9:3f:1f:fa:09:b9:d5:eb:79:7d:4c:b1:6a:
33:07:43:20:21:2c:e2:fa:5a:8b:13:8b:62:c6:51:b2:57:81:
0c:56:79:d2:79:1d:4d:e8:ad:61:8c:a7:24:9a:b6:ca:eb:4d:
30:2a:f8:8f:1c:63:32:aa:cc:eb:ea:28:04:40:8c:52:eb:ac:
ab:47:80:ab:7f:37:e9:11:fe:29:10:44:c8:86:6f:7a:ab:54:
f8:95:e1:55:31:b2:22:b7:79:f0:5c:0c:27:f8:fb:31:62:2d:
dd:79:a3:fb:64:45:48:cf:fe:8e:f0:7a:e6:63:2f:68:f3:10:
8a:d6:9a:1d:04:76:b2:35:fe:c6:5d:34:e1:01:ff:99:34:b3:
4e:59:1e:8f:ff:b2:b5:38:79:91:0f:41:07:33:0e:c3:1d:e0:
d3:de:ad:77:18:b8:2b:8d:0d:27:98:13:a2:35:e8:2c:9a:20:
7c:30:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:45 2025 by rpki-client