Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66c7e53a-035c-39e0-ad38-6f9f239a4d9b.roa
File: 66c7e53a-035c-39e0-ad38-6f9f239a4d9b.roa (raw, json)
Hash identifier: msEsyxzGHGDl3ZL7l+/Yo7sQzg9ifPelLwn34HRQJBA=
Subject key identifier: CF:0A:9F:0D:DE:AE:4F:41:7B:C2:11:59:7D:B3:DF:61:C5:12:2D:49
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F86421B3C8F17AD2A2F7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66c7e53a-035c-39e0-ad38-6f9f239a4d9b.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 66.30.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:64:21:b3:c8:f1:7a:d2:a2:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=56a47b9f-65da-4f19-95a5-cf4fce91e400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:5f:fe:20:7e:7c:04:3d:fd:ec:bb:24:aa:
c3:5b:06:41:39:e5:af:b9:3b:55:e2:6c:75:80:c6:
cb:dc:05:10:94:0f:81:9b:5a:89:fe:2a:e9:4a:3d:
71:f1:14:3e:dd:ec:da:5c:98:9a:98:e0:41:78:b6:
6c:c4:56:15:f9:dd:41:e5:f5:b4:5c:1b:84:90:eb:
96:64:79:33:f1:91:0e:64:bd:b2:48:ab:78:4d:85:
13:8c:34:c5:ba:b1:f5:7b:03:05:87:f6:69:0c:25:
b3:05:c7:b0:fb:31:e7:c2:9f:e3:38:cf:a4:c3:c7:
8d:79:fe:c2:7a:a2:f0:25:a8:eb:4d:b9:a7:b7:f6:
5e:0f:dd:6c:07:fc:ce:25:f9:a0:b2:35:9e:4b:3a:
d9:71:f0:e1:4d:59:33:fe:f2:88:77:6d:1c:15:47:
8d:49:51:33:d8:40:3c:f7:09:d5:9c:22:83:c4:7c:
59:5b:22:67:36:ca:77:84:30:70:eb:25:6f:b8:47:
29:3a:d3:13:0b:2d:ee:cd:07:6e:8d:5c:cb:24:1c:
12:ee:33:de:6c:ed:14:82:76:50:5e:d2:06:7b:80:
02:53:9a:8d:d0:69:2d:a4:e7:7e:f8:09:b2:46:f5:
10:49:2b:60:b1:bf:07:64:0b:2a:96:35:f0:80:84:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0A:9F:0D:DE:AE:4F:41:7B:C2:11:59:7D:B3:DF:61:C5:12:2D:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66c7e53a-035c-39e0-ad38-6f9f239a4d9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.30.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:b0:4b:ba:f3:bd:20:11:ac:e9:dd:ce:83:ff:f6:0c:03:b9:
d5:2c:f0:3c:5d:f6:68:41:5c:4b:56:fa:59:7f:65:86:57:33:
99:a9:e8:15:c6:ab:e2:e0:cb:d8:61:33:08:b8:a9:82:90:dd:
e1:1e:39:09:e2:a6:a1:b3:2d:1a:72:da:a9:4d:15:6b:e0:07:
44:4e:4e:f2:b0:e5:32:0f:b9:46:06:09:75:1d:36:06:15:c1:
8d:08:ed:c4:4e:bb:37:56:bb:d6:fc:52:29:d6:ff:f0:51:99:
26:77:0a:08:e4:3f:70:37:e0:e2:c0:79:c8:f5:b7:94:74:3a:
29:e4:30:bb:b6:9b:5d:94:82:9f:8a:b3:7e:a3:87:37:4e:e5:
02:8a:ea:de:1c:c7:e5:86:c4:c5:ed:d2:2d:8a:65:13:51:83:
57:cc:28:69:e6:a5:0a:9a:80:16:8d:fc:53:92:4a:84:cd:54:
e7:c4:90:65:fe:b8:d0:2d:c8:bc:f2:f7:e9:7e:de:d1:1b:14:
07:bf:99:b8:8b:ca:8b:bb:27:b7:5c:cd:49:d3:fa:8f:58:5a:
93:45:ef:a1:43:f5:8a:df:02:3e:e5:bd:67:f7:85:65:53:00:
77:ed:b9:57:3d:f8:a7:59:8a:9b:39:83:60:7d:f1:81:04:30:
d8:d6:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:32 2025 by rpki-client