Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa
File: 959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa (raw, json)
Hash identifier: C58JxFZQDL1WsL6eml/73kxgNy49tJCMlNyH1TVBaPo=
Subject key identifier: DD:4F:31:20:D0:6A:49:23:23:37:A9:C0:99:82:D7:68:69:4A:02:F3
Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial: 010D0C9F432858493574E4229EBF1AC34C08B140
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa
Signing time: Sun 16 Mar 2025 16:27:11 +0000
ROA not before: Sun 16 Mar 2025 16:27:11 +0000
ROA not after: Sat 14 Jun 2025 16:27:11 +0000
asID: 22351
IP address blocks: 66.36.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:74:e4:22:9e:bf:1a:c3:4c:08:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Validity
Not Before: Mar 16 16:27:11 2025 GMT
Not After : Jun 14 16:27:11 2025 GMT
Subject: CN=fc90b8c2-d2d9-4ecd-8cf0-c7e8465d602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:66:6f:37:ca:3a:85:e4:a2:75:5e:15:ca:
85:b0:0f:ea:5e:d1:81:3a:db:87:5c:01:dc:6b:58:
4a:3b:36:56:9d:a3:10:c0:e4:17:db:9f:8b:0d:ce:
ad:4d:41:ad:43:ca:16:1d:c2:ec:39:65:0d:7b:b8:
ab:20:18:2a:f1:82:35:5e:9a:c6:66:3c:2f:45:08:
88:9d:96:7c:42:c5:41:ab:de:41:c4:d2:b6:c1:05:
92:be:e5:cd:4a:05:4f:d4:1b:79:ab:bf:b2:29:33:
65:a6:49:c7:02:a9:77:7f:ad:eb:98:3b:20:60:c8:
c1:01:16:95:49:bf:30:36:02:f4:00:e4:dd:d1:74:
77:09:cb:68:76:d1:30:3e:eb:58:55:79:8b:a8:c9:
8b:6b:8a:fb:a6:57:2e:8d:e0:b5:78:c0:ed:65:82:
14:78:16:6d:4a:a4:18:8f:dc:ef:83:fb:b9:a6:12:
ae:2c:7c:40:5d:65:56:36:33:38:7c:f8:64:c4:23:
cd:76:a8:95:72:54:04:9c:ff:52:ae:8d:76:9c:71:
01:9e:8e:11:10:82:e9:8c:b2:3d:a6:71:7f:59:98:
61:d6:13:14:09:6e:ef:78:2b:90:08:a0:eb:3a:e8:
11:46:d8:0a:d7:ed:8f:15:df:11:5b:d2:8b:0e:ab:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:31:20:D0:6A:49:23:23:37:A9:C0:99:82:D7:68:69:4A:02:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
X509v3 Authority Key Identifier:
keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
sbgp-ipAddrBlock: critical
IPv4:
66.36.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:3b:a1:f2:7a:aa:7c:fd:8f:f5:6d:ad:2e:a7:a2:e4:0e:4c:
7d:ec:9d:ed:75:a3:72:ce:45:5a:cf:f7:92:f1:58:33:9b:54:
d9:00:b4:4a:1f:a1:c6:5e:42:48:33:5c:17:ba:7d:5f:86:4b:
ec:86:e5:1b:33:bc:c1:d4:31:8c:0d:6a:ae:1b:9c:13:dc:1e:
2b:e1:a3:63:e6:fa:0e:54:58:14:6f:bb:3b:c8:22:0e:f5:64:
26:fb:ec:c7:94:91:fc:41:92:ed:50:3f:9a:6b:0c:60:78:7e:
e5:20:5b:47:05:82:20:f2:94:76:f5:36:d5:a9:e1:d1:f8:5a:
26:1d:e8:83:58:09:eb:cc:08:5e:9f:e9:47:1a:ee:a5:35:9c:
b5:2f:00:01:3d:b1:2f:62:56:ac:ce:a9:a7:19:bf:57:ed:71:
6f:81:04:94:e6:01:74:72:85:57:80:4c:c4:7b:4c:c2:53:c9:
e7:3c:96:21:8b:30:14:a5:cf:3d:49:0c:85:7f:f5:36:47:40:
62:bf:83:40:a5:53:fe:c2:2e:6d:9b:87:fd:e2:06:01:af:bd:
d3:ff:1b:82:8b:95:00:c3:eb:6f:a2:2b:20:c7:e1:25:bb:73:
2c:de:bd:56:d8:34:d6:82:b0:f0:36:09:2d:1d:f8:d8:e8:50:
ac:e5:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:21 2025 by rpki-client