Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b751744-4053-31fd-8acf-f4a444d19b31.roa
File: 3b751744-4053-31fd-8acf-f4a444d19b31.roa (raw, json)
Hash identifier: th0AwSoKe+j8Pw8bFk3nryG7d+5w3M8G8YfWJL1ToU8=
Subject key identifier: 5A:94:7C:E5:D3:3B:CF:A0:C6:E3:CA:80:9B:72:76:46:75:58:C3:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849115E1B0A16656B76D3BE6180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b751744-4053-31fd-8acf-f4a444d19b31.roa
Signing time: Mon 03 Mar 2025 18:12:11 +0000
ROA not before: Mon 03 Mar 2025 18:12:11 +0000
ROA not after: Sun 01 Jun 2025 17:12:11 +0000
asID: 401152
IP address blocks: 50.114.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:5e:1b:0a:16:65:6b:76:d3:be:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 3 18:12:11 2025 GMT
Not After : Jun 1 17:12:11 2025 GMT
Subject: CN=0cc1660f-2d49-4790-aa07-4271d70a3e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:20:6e:34:69:f8:05:2f:ea:7f:42:27:ec:
83:9e:a9:07:4b:c7:f9:9d:34:54:96:34:40:92:70:
ab:df:c8:f4:1b:93:c6:4a:16:8e:69:98:57:3a:aa:
cc:15:d9:d2:a8:e3:d1:51:11:85:55:5e:50:23:b3:
04:03:09:2d:d3:1d:d6:02:eb:87:56:45:70:6e:2a:
91:00:81:a3:15:7e:cb:1e:91:cf:d1:ee:cf:68:d0:
ff:7b:0c:4a:67:44:ce:84:f0:4d:dc:d8:08:c0:d4:
36:e7:73:4f:75:0c:e0:10:15:7c:2f:5a:ad:21:f5:
02:50:de:47:d0:f3:b3:27:d9:a6:e1:35:bc:af:8c:
32:97:f1:e4:97:af:ea:dc:9d:e2:23:f1:11:a1:24:
a8:18:a6:c6:9f:00:25:9a:5b:a0:82:71:bb:26:07:
b7:b1:61:d8:ae:4e:bb:31:ab:59:b5:8e:51:28:78:
4e:4f:b6:b4:31:5d:b5:d2:73:62:f9:36:fc:fb:2b:
d8:a2:f0:c4:ee:12:60:a6:d8:d6:bd:07:ff:0e:92:
04:1b:d5:a4:89:7e:a0:df:37:94:09:14:74:83:ad:
6f:f2:cf:de:32:62:dd:6e:9c:4f:b8:c8:86:a7:64:
38:ff:8d:07:26:13:70:98:7f:ec:c3:54:e2:3e:07:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:7C:E5:D3:3B:CF:A0:C6:E3:CA:80:9B:72:76:46:75:58:C3:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b751744-4053-31fd-8acf-f4a444d19b31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:61:f9:74:0f:82:d4:ab:0f:ff:e0:6f:8f:0d:0c:a3:38:4a:
e3:75:10:cc:d5:94:6f:e5:88:45:db:39:33:a3:93:b6:c9:2e:
15:cd:8a:f3:53:92:58:c6:03:47:53:ce:9f:ea:46:9a:52:09:
50:cb:d8:f5:47:68:3e:45:56:05:8c:d2:44:65:28:bf:44:ce:
e2:c9:79:e3:f5:2b:07:de:e6:07:ee:fe:99:a8:78:ec:c5:8a:
24:d7:59:1a:0f:5f:3f:3e:e5:64:7d:b9:da:ce:14:84:1e:80:
25:88:5d:a5:ae:65:ca:98:5c:54:64:a0:e0:ed:bb:f0:b2:5e:
71:ca:bd:ad:35:ae:df:09:35:ab:94:8f:5e:d2:03:ac:9d:81:
e0:d9:69:40:7f:ec:c8:df:32:15:ec:b6:5a:4c:0a:46:81:15:
e6:9c:21:76:8b:a9:53:27:44:8f:71:f8:3c:b3:0a:44:ba:ed:
9f:36:58:f9:cc:16:7c:6e:8e:d6:d1:74:a3:02:06:27:1b:1a:
54:8e:f6:39:9b:17:57:65:40:25:8c:3e:bc:2e:c3:42:8b:d3:
a4:3c:aa:4e:a8:76:03:54:0b:6b:df:7d:05:80:fb:09:f4:94:
ba:87:c0:8a:ee:1f:2c:f7:a5:25:83:ee:dc:1d:65:65:7e:44:
e7:99:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:42 2025 by rpki-client