Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/d72440dd-7bd4-371c-9b7d-31b479ea8878.roa
File: d72440dd-7bd4-371c-9b7d-31b479ea8878.roa (raw, json)
Hash identifier: bRmuDAOCqDi0kqhr1DtZugdOPZ720beZOPhaH7GgYRw=
Subject key identifier: 59:02:7A:DF:9F:70:9A:C2:F2:89:22:1D:E9:2D:7B:68:6C:A1:01:7F
Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial: 010D0C9F432858492E64E2DFA42DC5A075FE7900
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/d72440dd-7bd4-371c-9b7d-31b479ea8878.roa
Signing time: Fri 14 Mar 2025 03:44:17 +0000
ROA not before: Fri 14 Mar 2025 03:44:17 +0000
ROA not after: Thu 12 Jun 2025 03:44:17 +0000
asID: 22351
IP address blocks: 66.205.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:64:e2:df:a4:2d:c5:a0:75:fe:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Validity
Not Before: Mar 14 03:44:17 2025 GMT
Not After : Jun 12 03:44:17 2025 GMT
Subject: CN=f23c2d45-622c-4ab5-aaa3-1acc05c1cf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:90:6f:40:da:f7:ed:31:49:cc:d3:73:df:
25:42:44:74:df:0b:4b:a4:49:f4:09:e4:a5:85:49:
60:72:13:15:d3:72:a0:05:77:c4:a7:a5:9d:54:79:
84:90:22:8d:6b:1b:aa:68:75:df:bf:1f:90:25:60:
85:dc:b4:d3:0e:39:88:c3:a7:df:82:40:62:39:c1:
48:90:7e:30:52:c8:82:5e:b6:a3:69:54:b7:bb:18:
b1:aa:af:c6:f8:88:1a:a9:1f:8b:88:2b:03:2e:d2:
1e:b4:41:c4:c1:32:45:6f:48:ad:05:33:8c:ac:a3:
7f:4d:ba:7f:2a:c6:ee:95:c5:09:35:36:db:ec:75:
86:24:d1:39:f8:1e:02:3a:5e:f9:f7:cf:65:46:04:
12:b8:0f:52:25:62:c3:7f:19:9c:79:83:79:ee:9b:
e1:12:e2:2c:28:1b:1f:df:a5:69:6f:b2:81:a5:26:
2f:ad:a4:4c:c3:d4:64:a1:79:d1:aa:99:82:78:cd:
1a:bd:2f:5e:10:56:33:b6:bf:3d:9f:1a:80:47:0f:
d9:28:b7:35:81:dd:a9:d3:c8:26:30:df:62:6d:bd:
96:17:01:43:13:5d:9e:42:fe:fe:fd:5f:59:16:c3:
47:8d:ab:6c:e5:3e:ac:a6:43:a4:7e:f7:aa:8b:09:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:02:7A:DF:9F:70:9A:C2:F2:89:22:1D:E9:2D:7B:68:6C:A1:01:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/d72440dd-7bd4-371c-9b7d-31b479ea8878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
X509v3 Authority Key Identifier:
keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
sbgp-ipAddrBlock: critical
IPv4:
66.205.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:e6:b3:05:88:9b:fd:8b:d4:e1:b5:d1:e3:72:52:34:74:ac:
08:eb:04:06:ae:47:a3:42:2b:63:88:b7:22:6a:ec:f7:29:52:
6d:54:69:96:04:a1:c0:18:81:a5:f5:8f:be:1a:6a:5d:b4:a9:
ea:f2:fe:9e:ba:0a:46:56:c4:21:46:b4:f6:d0:f3:ad:bd:ca:
fa:e0:24:36:cc:5a:de:12:34:b4:b3:a0:ee:67:91:b9:4c:0e:
2e:88:69:8e:74:23:39:46:07:5c:d3:18:48:25:62:b7:35:0b:
21:9f:00:62:fd:8e:12:79:15:2f:6b:ad:7f:98:65:8b:56:5f:
65:63:64:88:e4:6f:66:93:da:51:33:3a:bd:68:ad:b7:e3:6f:
49:0d:52:04:c5:49:90:ba:7e:7f:20:04:fa:d9:2b:69:a8:dd:
52:f1:0d:81:80:9b:c0:61:9c:04:2f:1e:20:7c:d0:65:e4:34:
3e:1a:5b:b5:3d:7f:7f:6c:6e:14:5e:db:e4:96:6a:ae:68:1b:
43:d7:49:91:79:d2:66:dc:ab:0b:73:ca:9e:e5:5a:4c:c9:2b:
4b:6d:09:a9:8d:8e:1f:2a:f3:7a:6c:0d:f9:2e:55:58:17:3d:
6c:10:57:f5:25:75:ea:ac:bd:e1:2b:8e:c9:6c:4e:ce:8b:20:
a0:8b:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:53 2025 by rpki-client