Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f872e7d3-40cd-3dd0-a43a-39d09b1b4050.roa
File: f872e7d3-40cd-3dd0-a43a-39d09b1b4050.roa (raw, json)
Hash identifier: CJJMl9Yg7458ZWH2A+BQqoJsJtlh6JXapZX5IPC/qug=
Subject key identifier: 00:81:33:28:89:B3:46:B2:81:38:77:DC:EE:16:DD:87:EA:E1:F7:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEA2D331A7BCA07B0A8C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f872e7d3-40cd-3dd0-a43a-39d09b1b4050.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 67.166.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:a2:d3:31:a7:bc:a0:7b:0a:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b44130bd-47de-4864-a857-1770b71d8eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:fb:77:fa:f9:fc:63:a9:74:35:d3:b0:62:
e4:73:64:3a:b5:94:8e:07:4c:c6:a0:3d:56:5b:7a:
b4:2e:16:cd:67:62:9f:0c:ca:77:3d:18:74:ac:77:
4e:f8:f5:6a:5f:38:d7:32:03:3f:99:57:26:1e:d0:
43:e4:25:f6:63:25:8a:9e:79:9f:ae:36:b2:f6:9f:
84:4a:d6:dc:8f:4c:37:d2:5b:6c:a9:5f:ef:6a:d5:
ab:bd:4d:b7:75:7c:ae:8e:d6:da:4e:95:34:47:c0:
49:c5:67:33:8f:9f:f8:c1:5e:08:7c:ac:77:7f:3c:
a0:d4:eb:b8:2d:c9:63:8d:7f:80:7b:52:18:ef:9b:
7e:64:1c:88:8e:94:b5:a7:0b:97:ce:54:20:84:9a:
5c:60:2c:39:06:06:64:4a:ea:6b:12:ac:5d:64:36:
1e:b6:c8:cb:af:8b:ef:92:72:68:d5:16:7d:ff:e9:
58:fe:bd:f9:4f:4c:c5:b7:c3:56:45:df:71:f4:29:
51:94:15:f7:7e:e5:35:7e:63:8e:92:57:e7:29:c9:
e9:0e:54:9b:68:10:c1:8a:39:f2:f7:7b:06:e5:27:
31:d7:c6:f1:6d:a0:23:cc:56:ba:52:dc:61:7b:fc:
ac:13:95:0d:e8:54:49:8e:2e:ef:28:56:90:0a:a8:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:33:28:89:B3:46:B2:81:38:77:DC:EE:16:DD:87:EA:E1:F7:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f872e7d3-40cd-3dd0-a43a-39d09b1b4050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.166.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:25:c1:b3:e6:6c:13:37:64:a2:bd:36:8e:63:33:a3:aa:cf:
9a:09:fb:6a:3b:ae:be:df:c2:78:87:37:19:8d:30:86:69:33:
c9:58:2f:70:c4:ef:88:77:1e:71:df:76:d4:92:c4:8a:fe:d5:
91:2d:49:71:b2:c7:a8:3f:68:8b:28:2d:03:d8:4f:17:62:32:
dc:96:2d:d1:ce:a0:95:d4:df:4f:8e:e6:ba:5c:3d:dc:0b:8c:
c0:56:69:c6:d9:31:eb:15:ea:6c:a9:58:d3:b4:57:66:03:b5:
00:1b:2c:cc:99:0e:62:ad:50:70:8b:31:14:cb:11:da:7d:39:
71:31:6d:2f:39:0e:49:8a:50:96:12:9f:61:df:50:a1:cc:76:
bb:0e:d0:fc:e6:2b:fe:a9:df:20:89:da:2f:67:ac:d4:5e:66:
d6:32:03:97:91:86:c4:11:8e:03:bc:be:10:cb:25:eb:aa:88:
0f:8f:05:8d:5e:87:ad:40:b4:85:3a:c8:81:b2:3f:d3:9b:8b:
99:4d:25:40:7a:15:51:e6:7b:d2:97:aa:09:cb:79:ad:54:6d:
b9:5f:bf:80:4e:ed:8c:55:7f:1d:3d:8e:40:74:4d:fb:61:9c:
84:62:ad:57:fe:40:76:4b:57:15:62:16:db:af:a7:f3:42:d1:
44:8b:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:03:05 2025 by rpki-client