Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/689219cf-5622-3b96-9a4e-995a2c08d2e6.roa
File: 689219cf-5622-3b96-9a4e-995a2c08d2e6.roa (raw, json)
Hash identifier: nXb5tIfnwg1teKb32YFz1lPSZhGILJdA59thRQRAiyo=
Subject key identifier: 9C:49:04:FF:ED:7A:90:23:03:8A:35:07:D9:64:00:6A:E9:AA:9E:7F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C1E38EF3AE9176F2149F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/689219cf-5622-3b96-9a4e-995a2c08d2e6.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 66.102.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:e3:8e:f3:ae:91:76:f2:14:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8d26754d-52ca-40f3-aa2f-ed6693d71703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:41:01:f8:58:58:fe:88:ef:27:7a:07:9c:
ad:10:81:cf:8a:de:84:00:68:4e:83:10:43:fd:5b:
3b:55:77:35:0a:b8:63:67:36:f5:6e:4e:6e:19:ad:
6b:d2:52:63:b6:8e:ef:85:a9:6c:64:80:98:12:96:
30:8c:a5:79:f4:36:f5:49:7f:ef:d1:a7:48:e2:c8:
af:4e:bc:7f:f0:3c:75:8b:3c:0e:8a:4c:d9:65:f0:
b6:19:e3:08:45:b8:c2:8b:da:0d:41:cc:03:8d:e5:
cd:74:39:f0:80:fb:b9:86:ca:98:ac:7f:3d:dd:9c:
a3:a4:65:64:ff:be:ed:93:11:1b:84:eb:dc:bb:86:
4b:63:a9:3f:40:c9:0e:eb:06:66:7d:5c:f5:1e:e1:
88:75:f3:5a:7e:82:95:6d:f9:6b:e7:67:0f:bb:81:
58:cf:be:45:0e:14:5f:b4:4c:03:2f:b2:19:32:b6:
7d:7e:d5:74:fb:a1:86:f7:67:5a:96:5a:db:5b:82:
84:c0:78:d4:fd:47:c3:11:7b:65:be:02:a8:aa:e0:
2e:12:1a:97:b0:aa:12:79:fe:b9:13:68:68:34:e7:
8f:60:ca:41:e3:17:18:39:c5:b0:d7:41:9e:80:98:
3c:57:69:e8:dc:89:10:75:1a:dd:fe:3c:f6:ec:19:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:04:FF:ED:7A:90:23:03:8A:35:07:D9:64:00:6A:E9:AA:9E:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/689219cf-5622-3b96-9a4e-995a2c08d2e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:09:2a:9c:f0:48:25:ea:10:df:31:7e:33:16:1a:cc:ef:50:
67:f9:8b:f1:44:08:2c:b5:e0:71:b6:3c:92:03:44:60:21:6a:
5c:15:69:72:4a:b0:7a:43:5d:52:6e:2e:b5:11:bb:60:a3:10:
77:da:07:8a:3a:74:91:37:b8:66:a2:ce:8c:67:7c:45:f4:5e:
7b:17:66:2f:c9:99:ac:0e:96:5b:be:b9:55:d7:7f:5f:1f:35:
e8:ad:00:74:5c:3c:72:3e:6f:24:c2:89:42:22:6c:42:bf:f5:
00:c4:31:8c:be:08:20:ed:db:5e:03:4c:b3:37:31:69:d3:42:
9f:3f:82:2c:90:f5:dc:de:eb:44:2c:b7:48:67:96:9f:28:d0:
f8:f9:b4:bf:80:82:32:7a:6d:8d:e3:5d:fb:eb:18:63:ec:a4:
c4:21:83:39:c0:b5:4d:18:5c:d4:c6:7b:7f:0d:35:fd:c4:fc:
e7:72:74:b2:b4:f1:18:b0:e5:b2:6f:f0:a0:85:68:ca:3e:07:
42:07:20:ab:8f:a9:52:db:bb:77:4f:e1:f1:60:b4:85:a7:8a:
59:0c:b8:89:f0:ff:bf:99:fa:e3:d9:bc:c2:d6:6b:fd:d8:76:
15:68:b0:69:d5:9f:db:b0:68:c3:41:c7:fd:af:41:9a:34:39:
e8:40:63:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:07:08 2025 by rpki-client