Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa
File: 28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa (raw, json)
Hash identifier: nlLjl+iN9FP3QX/VRlOEuV/xVVKHOFtcbT7s6npXIms=
Subject key identifier: 25:7D:64:CB:75:AC:4C:4C:07:E8:C2:C8:53:58:4A:C9:58:6C:D6:1A
Certificate issuer: /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial: 010D0C9F432858494E2EA9CF1C18F784B929F480
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 16509
IP address blocks: 66.43.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:a9:cf:1c:18:f7:84:b9:29:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=3229bc69-bb8a-4c66-888d-46290a0ea646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:8a:9e:94:2e:70:d0:25:ff:80:bd:0a:cd:
8e:ea:20:cf:93:2a:50:18:9f:70:3d:df:d7:28:d5:
48:80:9b:be:33:3f:b1:1d:98:4e:ef:58:4f:c9:4f:
af:66:97:c7:8a:f9:77:98:64:77:b3:e1:f7:aa:4f:
d0:10:96:8c:1b:ba:35:40:6d:33:90:a8:4a:66:3e:
43:2b:d8:c6:c3:85:c1:db:f9:fb:b3:1e:6e:be:c1:
e8:07:a8:09:38:31:06:ef:ab:47:fa:29:9a:1b:0f:
eb:42:f5:f8:f4:05:61:83:f8:d7:ce:d0:50:84:a7:
42:95:13:3c:e1:af:86:e4:af:2c:f3:8d:c9:e3:dc:
34:0f:17:96:26:ee:e1:c7:37:a2:30:2d:ad:df:e2:
4c:ed:ed:dc:ee:06:c9:d7:2f:ee:83:a8:82:8f:56:
82:23:35:63:1e:e9:fb:0d:84:ca:30:aa:be:55:10:
1a:b7:ea:4d:c1:39:fe:76:5b:9b:d1:22:f1:05:21:
44:d8:4c:eb:04:b1:48:70:71:d3:85:96:0a:1b:fc:
68:2e:ff:30:e2:61:8c:a6:e8:e2:83:8c:76:8a:5f:
35:12:ec:df:9f:56:6e:16:37:e9:4d:e6:6a:a0:d9:
f3:0b:2b:23:62:c4:8d:30:88:87:16:0e:6b:5b:b1:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:64:CB:75:AC:4C:4C:07:E8:C2:C8:53:58:4A:C9:58:6C:D6:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
X509v3 Authority Key Identifier:
keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
sbgp-ipAddrBlock: critical
IPv4:
66.43.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:bf:4b:94:b4:e4:b5:71:71:46:ee:d9:97:a4:1b:d1:57:77:
18:39:c8:91:8e:bc:a0:41:36:01:3f:f8:e0:25:e2:f3:b4:05:
68:fb:45:c8:25:f2:ed:46:42:94:c7:03:10:b5:a8:60:ba:28:
73:fa:d3:0e:16:f1:76:12:63:93:3e:c0:eb:31:48:d9:c9:8d:
72:c7:2e:ba:da:c0:84:a9:eb:0d:9c:33:19:80:5d:0b:6d:6c:
fd:bf:60:56:31:7e:cc:24:aa:bd:61:c0:ca:b3:67:0b:e4:3c:
93:89:60:b2:ae:93:49:0a:ee:15:da:b1:95:4b:a0:68:6f:cc:
90:02:72:ad:52:3e:e4:f8:ee:65:13:69:e5:43:bf:f8:7c:e8:
89:2e:d1:42:6f:18:54:31:f4:29:23:5d:3d:6f:08:d8:77:33:
70:ef:15:52:15:8c:56:86:93:5b:40:1e:28:ec:85:a8:ae:36:
cc:f9:5d:d0:b9:d0:af:6c:c3:18:de:80:8a:c2:da:8e:a1:25:
d4:ab:f5:0d:89:c0:09:33:d5:83:79:fc:35:a0:73:8b:95:dd:
c7:e3:71:08:b9:90:49:5a:c7:e6:4f:a6:e1:fc:26:42:8e:15:
05:f5:10:cb:64:42:4a:b1:f0:7d:b2:87:07:f5:d6:03:e5:16:
bd:38:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:38 2025 by rpki-client