Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa
File: 894a95d5-8d7e-324f-86dc-996779abcf7f.roa (raw, json)
Hash identifier: B9MjRrIIhB+ImPbYv4d62S7woFZwZnwKToSFvIV5BBc=
Subject key identifier: DC:88:23:7F:D3:40:EB:3A:0B:02:10:22:DF:E0:B9:B7:6E:5C:75:C8
Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial: 010D0C9F432858494B640B7B8F89EF6ABAEB7240
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 209242
IP address blocks: 66.81.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0b:7b:8f:89:ef:6a:ba:eb:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=845dea8f-b786-48ae-bb54-c8a732c5fa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:6b:d8:47:d6:82:eb:5e:d1:28:63:d0:3e:
59:6b:b8:bd:6b:22:99:de:64:c0:fd:12:95:21:5d:
95:0b:d5:f3:f0:aa:54:c6:36:2d:7a:b8:80:77:99:
a8:a7:79:47:5b:fc:8d:9f:92:86:44:5d:3c:ad:95:
e5:dd:d7:7b:e3:92:2e:ee:ac:e9:a6:66:c0:33:b9:
4c:42:da:d1:3f:d8:08:b0:b5:ad:83:78:67:87:91:
9b:dc:57:02:0c:02:d2:07:64:1c:38:8d:2c:7a:b7:
ef:2a:d1:88:aa:d8:7f:a1:a4:31:cd:51:e5:44:ac:
0a:8b:93:07:9f:cb:ce:cd:56:6f:1c:76:14:8d:8a:
23:66:19:c6:cc:df:7f:79:ce:6c:b6:1f:c6:17:ab:
74:42:07:45:72:6d:0c:eb:50:00:2d:0b:fd:27:d3:
0b:13:69:09:88:aa:28:71:a0:d0:4d:6a:da:6b:b1:
99:cd:f5:b7:5d:a4:54:26:aa:6b:ae:70:8b:39:73:
ec:6e:c7:15:bb:ee:a0:24:e3:1e:d9:bb:e9:c5:a3:
fd:e4:10:d4:8c:59:57:a9:e0:74:c2:2d:d4:f8:0c:
f4:4f:81:11:02:aa:3a:e4:61:bd:14:c3:7a:fb:b0:
1a:af:53:0f:1c:22:db:78:49:ad:66:fd:ef:ce:1f:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:23:7F:D3:40:EB:3A:0B:02:10:22:DF:E0:B9:B7:6E:5C:75:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
X509v3 Authority Key Identifier:
keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
sbgp-ipAddrBlock: critical
IPv4:
66.81.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:22:6d:ad:25:aa:66:e6:e7:41:d3:cc:13:2e:f7:09:fb:de:
80:07:6e:eb:79:70:4e:c4:b0:4c:e1:0a:40:3e:b9:54:24:21:
e1:c4:4a:34:60:a9:a2:96:ca:56:c1:d5:7f:2e:74:69:57:e1:
70:f1:e1:8d:1a:bf:35:e7:8b:4d:06:5c:10:ac:f8:b8:19:fe:
1c:97:80:f4:ee:47:cb:70:82:b5:f9:83:81:96:95:a5:f4:d7:
9b:1d:7b:91:b5:09:6a:e0:a4:14:f5:5f:27:e5:56:45:d7:54:
99:88:7e:7b:bf:8e:1d:6c:ab:c7:d7:41:c3:a9:82:0d:28:45:
a8:c0:4a:bf:88:04:42:db:e4:7e:9f:82:ff:5c:e2:0e:07:7d:
23:df:55:85:fc:c0:ab:31:31:e2:c4:83:4f:45:c4:8d:ae:b7:
fa:f4:2c:50:33:47:ad:8a:28:03:b3:11:a6:33:f3:7e:f2:df:
ba:2b:18:a0:c1:c5:59:9f:1c:19:bb:31:30:01:23:ed:71:db:
c0:ce:d6:be:20:35:61:3e:9c:ff:6f:57:fb:70:be:02:6a:2a:
0f:00:cb:16:eb:06:e9:e5:b9:72:8c:0b:39:af:1b:f1:5d:a1:
30:57:94:e7:01:c2:6f:d0:5a:ac:a4:1b:82:a5:75:db:d1:b7:
81:2c:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:18:07 2025 by rpki-client