Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a0e3e32-fb21-33ad-ac70-a464c30fb0a7.roa
File: 1a0e3e32-fb21-33ad-ac70-a464c30fb0a7.roa (raw, json)
Hash identifier: IsA8H27l3/f8RdMH5M8i9lbyKN4pnyrC75E7Ka0hUsY=
Subject key identifier: DE:31:FB:FE:CF:34:E1:09:D6:75:B7:9F:66:E3:BE:96:6C:A4:A1:8E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858492CAE83F4FB4675833BEA7940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a0e3e32-fb21-33ad-ac70-a464c30fb0a7.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 19437
IP address blocks: 50.114.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:83:f4:fb:46:75:83:3b:ea:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=61363ee9-a941-4b68-be00-b42120a83cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:b9:13:8a:51:6f:bb:67:ed:b8:43:fb:13:
88:26:7b:7e:15:30:7c:8d:33:40:c0:7f:38:73:6e:
ab:e9:3f:e1:8e:65:37:7b:a9:04:f7:03:ea:bf:91:
93:b4:e5:73:1a:06:e9:17:b1:4e:e3:28:b8:f1:3c:
b0:1c:ad:64:0a:eb:46:32:5c:97:f9:93:8e:46:9a:
39:18:42:4b:b0:78:b3:9a:9e:aa:f2:2b:fc:d8:a1:
48:0a:a3:62:0e:1e:0e:84:3f:8b:74:51:a2:b1:be:
e1:9c:b2:ee:7b:c9:44:ab:ab:c5:0f:44:84:81:de:
d6:7f:fe:8d:35:b0:c7:b9:57:fb:34:4c:2a:f7:24:
52:8f:8a:0d:fc:52:fd:d9:e6:87:ab:5c:c1:a3:67:
71:ef:46:9c:8f:f5:12:76:63:6e:47:51:0b:8c:ab:
04:4a:48:0a:af:b1:c2:1b:c9:52:02:06:79:da:d3:
57:6e:ba:22:3b:15:47:ac:7f:60:52:26:bd:01:6d:
71:a9:34:27:57:20:ad:e1:78:b7:0f:5e:6f:1b:5c:
41:dd:49:4c:e1:42:42:91:01:47:e0:53:92:30:15:
30:03:6a:19:21:18:77:50:0d:cd:b6:e4:36:62:d5:
e7:5c:43:a8:86:d0:9e:6b:73:1d:27:b9:d1:78:a3:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:31:FB:FE:CF:34:E1:09:D6:75:B7:9F:66:E3:BE:96:6C:A4:A1:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a0e3e32-fb21-33ad-ac70-a464c30fb0a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:bb:5d:60:c4:d5:58:1d:12:75:67:e1:ba:9a:17:84:51:14:
bf:13:84:60:ac:a7:26:87:f2:28:a7:22:b2:11:31:63:1b:0b:
3e:55:99:6d:de:9a:91:2c:77:2c:94:56:0c:36:f0:21:ab:f3:
86:07:55:68:39:e5:6f:d0:92:dd:28:a5:38:b0:19:ec:c9:3d:
d8:08:c9:95:0d:2d:98:97:14:be:d1:b1:11:18:79:cc:46:92:
e6:c6:c7:eb:17:ff:d2:38:db:ff:98:bd:79:8f:b9:a9:4b:37:
8e:c3:ca:0b:60:38:40:28:89:ac:52:52:7d:69:e4:72:ff:c4:
2a:a8:80:69:08:3f:2d:2a:32:42:01:e0:6c:f7:a8:89:45:8f:
8f:7c:ca:7e:3e:a9:1e:19:e8:cb:32:4c:9a:7b:c3:ce:3f:04:
c5:bd:98:88:eb:98:a9:e2:8d:37:53:51:e3:22:1a:93:26:30:
6a:6b:9f:02:84:00:56:ec:a2:fa:3e:ce:03:db:1a:d6:65:fe:
c4:65:00:e3:03:a3:c1:6b:e3:35:49:54:e5:69:6a:a8:75:b2:
40:1c:96:6e:50:3b:11:c0:01:9e:e1:50:50:fe:e4:b4:41:fb:
8b:b0:f3:1a:68:8a:47:2e:8c:2f:2d:b3:53:60:f3:b2:3d:d3:
d9:24:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:23 2025 by rpki-client