Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f08e6bf-4c37-3181-95f1-4ada67cb5ca4.roa
File: 3f08e6bf-4c37-3181-95f1-4ada67cb5ca4.roa (raw, json)
Hash identifier: v9fccmhZe3+Rhw4FXP+ESOZs70HSgFjReK7Z+wIQgRw=
Subject key identifier: 8F:65:62:59:0A:4A:18:B0:3E:C3:63:20:98:D1:9C:E4:46:02:D7:13
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DF72F0D09E1B22A080B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f08e6bf-4c37-3181-95f1-4ada67cb5ca4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 66.240.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:f7:2f:0d:09:e1:b2:2a:08:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=ed87857a-2be2-44b3-b58b-c714c7cd30df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e1:4c:96:e2:f8:75:12:9b:48:a0:ae:8f:bf:
ea:58:0c:eb:db:d4:4d:98:22:80:43:8d:1d:c6:91:
cc:de:57:47:6c:4b:9f:f5:1c:e5:20:6d:48:52:74:
e9:58:f5:a3:21:09:63:f0:1a:1b:48:b8:70:fb:31:
71:b0:4d:0b:94:6f:27:11:f2:f7:1b:1d:bd:36:c1:
83:f9:a4:72:57:17:31:f3:08:de:f4:87:88:2e:bb:
be:62:bc:4f:35:21:c2:d3:53:2a:c1:d3:9c:07:1b:
fc:c7:cf:4f:70:13:1e:82:73:03:22:50:54:94:5f:
6f:86:46:42:ec:e9:43:37:da:f4:86:04:96:ef:20:
3c:fa:76:ff:7c:5f:eb:08:e5:c6:db:71:54:99:73:
7c:1b:d1:aa:1b:66:b8:56:1b:22:f9:0a:f7:7f:72:
ec:e6:d2:7e:5c:60:1b:4d:21:15:5c:dc:34:26:6c:
d1:cc:d7:1c:b2:45:37:3d:58:5a:ab:b0:da:58:00:
d7:cd:65:ee:ed:72:1d:ce:e2:08:b6:d8:a5:ec:27:
a2:1f:ba:95:34:e7:ff:ab:3f:c6:e2:6e:bc:81:29:
3b:cf:bb:06:91:7a:9d:93:95:c4:26:06:bd:c8:71:
17:c7:74:db:82:f0:67:78:4c:3e:4e:4e:ca:2e:25:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:62:59:0A:4A:18:B0:3E:C3:63:20:98:D1:9C:E4:46:02:D7:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f08e6bf-4c37-3181-95f1-4ada67cb5ca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.240.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:44:5b:b7:66:a9:c6:3b:a2:d7:7e:85:b5:4a:0b:72:63:59:
fe:12:ee:72:3a:be:39:02:39:69:3a:7a:6b:a7:6b:00:78:8a:
e4:c0:e2:73:c3:65:f0:e5:51:83:9e:6c:60:a0:68:03:02:be:
13:7e:6b:bd:eb:dd:e8:e8:49:c5:ee:18:4c:f1:af:31:67:2c:
08:87:5c:f7:7d:97:3f:98:0c:bd:dc:5a:2f:72:68:4b:29:ae:
78:ba:9e:18:34:47:89:14:34:d7:7b:42:c8:30:c9:2d:6f:95:
2c:3a:66:ed:e1:ef:df:b9:3e:82:df:ff:61:3b:95:91:b6:e6:
ff:86:ac:c9:59:02:c0:14:0a:63:92:28:b6:5f:c8:93:fd:b7:
4f:30:07:6c:38:3f:09:10:73:5a:66:2d:95:cf:ec:a5:37:f2:
29:1a:a4:70:43:ec:4b:37:78:14:f2:e8:47:ed:f2:e5:19:b3:
b5:78:2f:ae:68:09:e9:12:0b:6d:1d:1d:b4:b9:e9:3a:fc:71:
5a:24:1e:35:39:a5:c7:b0:00:d8:bc:c4:69:21:b8:f2:14:39:
9d:3f:4a:34:35:93:08:27:11:cc:1c:4a:55:63:b0:0f:cf:7e:
29:53:74:ae:73:dc:80:fb:a4:52:6b:72:37:3d:0d:f8:e5:c8:
b4:0b:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:39 2025 by rpki-client