Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/878e0fa9-c533-34c8-b706-532867da34be.roa
File: 878e0fa9-c533-34c8-b706-532867da34be.roa (raw, json)
Hash identifier: kF2QEYNWua2COnSZ4XRnObYuwj/iKkuNN1hzhYRBWzc=
Subject key identifier: 32:AF:01:02:8E:22:9F:1C:63:ED:99:4C:B7:08:C7:D2:E5:CD:7E:8C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858492E13BD46B1924E62525B37C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/878e0fa9-c533-34c8-b706-532867da34be.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 19437
IP address blocks: 50.114.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:bd:46:b1:92:4e:62:52:5b:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=bb1fe785-7491-4b1f-b2f1-d2492ccfeff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:6d:88:e4:aa:84:34:7f:4b:00:55:81:0a:
93:11:68:d6:00:70:6a:da:d9:71:88:a4:5a:66:28:
2a:32:e2:25:34:de:d4:c0:9e:3b:26:a2:76:b5:7b:
8c:d0:37:f2:a9:3f:62:4e:bc:af:1a:84:e4:17:ed:
7e:06:cf:ae:bf:79:c9:ba:52:7b:fc:8f:5a:c7:d7:
e4:c6:9a:54:8c:53:2d:dc:21:3e:61:0f:fc:e8:3c:
c5:e5:3a:6a:4a:ca:fc:4d:89:cf:96:9c:dd:b0:22:
d6:55:27:43:e9:3b:bf:b0:fa:ef:a1:a6:73:dc:3c:
30:39:47:b1:5e:cc:a5:82:32:9a:c1:0a:2f:ef:ea:
61:3c:06:ec:bc:23:b1:0a:46:ed:30:a2:02:24:2b:
70:b8:56:3c:7e:77:8c:c4:22:54:fb:c4:e1:07:e6:
54:b9:41:63:ed:60:06:64:8d:5c:d6:f5:22:fa:0b:
22:53:c1:dc:8f:93:8f:2f:4e:62:92:fe:82:19:ed:
73:b7:3f:79:76:ec:60:48:ba:12:4c:cc:89:53:74:
b9:9c:29:45:ef:e4:f6:05:fc:b7:42:4e:20:16:aa:
eb:6b:ba:2c:18:fa:b5:3e:cb:cb:e8:2d:69:75:bd:
48:e4:3b:32:8b:fb:a3:12:3a:ad:7f:01:a3:72:32:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AF:01:02:8E:22:9F:1C:63:ED:99:4C:B7:08:C7:D2:E5:CD:7E:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/878e0fa9-c533-34c8-b706-532867da34be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:12:db:b4:ec:44:1a:22:1e:c1:43:74:30:aa:e9:14:6d:d3:
a0:2b:5a:35:bb:9a:70:43:c6:80:ec:1b:44:85:ae:8b:0d:51:
f6:8a:b4:02:55:e2:b2:f1:36:41:6d:ac:21:08:82:90:fd:5a:
9e:11:d8:b5:85:2f:44:de:cb:2f:c4:ab:7e:0c:21:55:4a:6a:
e8:33:d7:31:61:99:a4:f4:d3:26:ce:f8:b9:e2:4e:ee:11:6c:
8a:1b:ff:c4:15:3a:86:95:ad:f2:e7:20:51:67:aa:e1:36:ac:
13:62:39:49:ab:22:6c:a5:c8:f9:d8:73:95:4d:0d:22:a4:d0:
58:b1:0b:9a:a7:ed:39:74:8d:99:e7:98:ea:54:ca:3d:7a:c3:
30:70:17:08:f6:22:48:4b:c5:5d:ff:49:63:db:13:0d:12:dc:
c6:e7:69:47:e7:bf:5c:8e:e2:30:76:24:b2:3b:8d:9d:9d:06:
e8:d6:2d:60:7a:ac:cd:71:27:cc:63:15:57:9a:c1:b4:55:d9:
a4:af:b0:9e:39:20:73:73:3b:b4:84:d3:63:cb:f7:33:6b:ed:
0a:4c:f0:df:af:f5:ed:3c:3b:ab:ad:5d:9e:b7:31:9f:87:71:
b2:ac:aa:81:17:fc:54:5a:46:76:6d:1b:ff:05:6b:2d:12:78:
ff:1e:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:32 2025 by rpki-client