Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa
File: 5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa (raw, json)
Hash identifier: 8u1KEWUwZU4jRy7dCVYmojBqtVTX1YPQngZ6YuLT120=
Subject key identifier: 41:99:04:23:8D:67:1E:72:6D:E4:43:D4:A2:0B:56:D1:55:5C:89:8A
Certificate issuer: /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial: 010D0C9F432858491ED6D7732F42886552DF0180
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 3356
IP address blocks: 66.180.128.0/22 maxlen: 24
66.180.138.0/23 maxlen: 24
66.180.141.0/24 maxlen: 24
66.180.144.0/24 maxlen: 24
66.180.147.0/24 maxlen: 24
66.180.148.0/23 maxlen: 24
66.180.151.0/24 maxlen: 24
66.180.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:d7:73:2f:42:88:65:52:df:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=cdbd7504-b9b5-4e47-901e-24a770c50d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:58:45:d5:f7:95:f8:eb:53:60:56:80:60:
e4:6c:9a:be:cf:55:e7:57:6a:ab:75:c8:69:0b:36:
0d:59:c0:b6:14:a1:8d:4f:f3:f6:4d:47:4b:5d:13:
14:6e:ad:50:b9:68:d1:a4:5d:57:8f:a2:34:43:e3:
0b:b6:66:76:39:be:55:40:5b:fa:69:ba:fd:56:05:
cf:97:40:ae:6c:4e:f6:2f:b7:b1:4b:92:11:8b:39:
9e:12:5d:5d:9d:9e:0c:59:47:96:98:58:04:85:97:
6f:8a:a9:73:ae:27:e4:e7:01:1f:5e:50:d7:9c:f9:
36:de:f2:44:94:64:d7:36:31:c9:d5:7a:7f:f3:32:
da:a0:9c:7e:e6:8f:8e:3b:b2:e9:0b:08:c2:5a:8e:
c1:f5:e3:c0:8a:13:9a:47:0e:e0:8a:e3:85:ec:f3:
2e:d2:e3:6c:00:c1:8f:78:57:6f:4c:12:86:3a:2b:
cb:46:dc:dd:43:eb:ab:ab:81:27:e4:a6:e4:f3:8c:
cd:55:fb:a6:1a:84:03:f4:f7:3f:dc:c3:2c:0c:fb:
2f:78:3a:9e:f1:da:2b:46:33:45:d1:66:84:a2:1c:
38:17:39:fd:bd:88:75:5d:4a:89:c3:8f:77:29:c5:
7e:c9:ae:95:ce:0e:3d:a9:e0:28:37:98:4a:9b:f6:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:04:23:8D:67:1E:72:6D:E4:43:D4:A2:0B:56:D1:55:5C:89:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
X509v3 Authority Key Identifier:
keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.180.128.0/22
66.180.138.0/23
66.180.141.0/24
66.180.144.0/24
66.180.147.0-66.180.149.255
66.180.151.0-66.180.153.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
de:46:52:b2:a6:5f:39:9d:d2:0a:b7:e9:d7:74:7a:be:d4:71:
10:a1:e8:92:a1:6e:52:92:da:f7:dc:e4:0f:79:b3:e0:ba:42:
14:3b:70:55:1a:e7:4f:84:49:2c:c6:eb:57:31:20:84:2e:d7:
72:e8:7d:f6:04:0d:34:57:d8:5f:1e:8b:84:81:35:c5:bf:c8:
16:00:f1:6b:8c:ef:19:18:8a:63:8c:a6:a7:48:4c:0f:08:7d:
50:0a:59:c7:59:56:08:08:45:75:69:c8:d1:b8:93:d7:38:01:
cf:e6:fc:7b:91:ca:8d:3c:14:a2:2d:0d:a0:7b:54:db:c4:20:
8c:f8:18:59:3f:7c:76:93:ba:87:6a:4a:e9:b1:6a:3f:cc:7b:
fb:06:e5:9f:05:86:25:c5:02:12:80:23:32:13:c4:8a:b0:6a:
d2:cc:52:54:da:7e:61:06:13:62:c5:5a:a5:32:10:45:51:43:
ed:f3:5b:d1:99:e1:90:9c:4d:e1:2c:53:36:99:1b:03:97:04:
1b:1c:eb:c4:1b:84:45:a3:a1:ee:a8:d9:1f:3f:a3:36:3d:4e:
3e:47:04:f1:7a:30:6a:a0:11:bf:81:dd:06:94:51:19:9e:70:
b8:5d:7d:bd:d2:31:ba:75:cb:3e:4a:cf:eb:47:28:4f:70:e5:
73:37:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:57 2025 by rpki-client