Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/62962b3f-e107-3091-8b85-2ac1d6fd8981.roa
File: 62962b3f-e107-3091-8b85-2ac1d6fd8981.roa (raw, json)
Hash identifier: rOxd7hl2xTGWM6IBaUoU1+g3vw8WGsg/I3lLH3jmfbc=
Subject key identifier: 1F:A5:F1:B8:30:34:76:27:0F:8F:82:94:30:7C:F8:46:74:57:85:4C
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F43285848A400B863525C6A0238A08F00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/62962b3f-e107-3091-8b85-2ac1d6fd8981.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 52129
IP address blocks: 66.159.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:b8:63:52:5c:6a:02:38:a0:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=34c70826-c176-4ff0-a0ee-6c0a3cb1921d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a6:67:65:0d:0a:bb:08:fe:b2:f0:45:e3:e6:
8a:85:df:53:90:fb:28:ba:82:04:59:d4:86:62:a4:
e7:91:f4:25:bb:d6:86:ab:82:69:10:90:40:40:af:
48:b8:4e:b1:ff:75:ab:9b:d9:39:f7:e6:97:20:c7:
d6:8e:26:05:e8:b1:71:38:0d:9b:fc:71:fb:56:b3:
9b:af:25:08:22:45:c8:0f:7b:a7:ad:49:64:84:b9:
e8:04:da:e0:ea:79:f6:b3:08:71:c9:47:8e:15:b2:
83:73:fb:17:75:7f:6e:a3:bd:f1:cc:e0:9e:dd:0f:
b3:32:11:00:da:20:eb:1c:e3:05:0b:f7:da:2e:b3:
6c:c8:e7:2b:93:43:b2:15:a8:3e:3c:97:37:e9:87:
10:a7:9c:72:e6:d8:18:97:d3:ee:4a:44:14:5e:7a:
52:c0:e2:dc:ab:47:af:54:2f:a0:39:d2:94:ca:9c:
21:e1:3d:3a:2e:17:0c:14:62:f4:1c:23:09:e8:a6:
12:35:c8:fa:26:1a:20:72:79:6d:5a:d2:db:3e:8b:
18:bb:c8:39:5d:e2:38:1f:71:99:e8:d2:fa:89:64:
8b:a4:49:6a:dd:44:88:8d:ed:2f:52:6b:1b:e0:91:
11:0b:0b:3a:73:ba:36:0f:9c:5e:cc:ac:81:d9:e0:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:F1:B8:30:34:76:27:0F:8F:82:94:30:7C:F8:46:74:57:85:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/62962b3f-e107-3091-8b85-2ac1d6fd8981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.159.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:53:c9:dc:88:81:45:72:14:7f:16:6c:42:c1:1b:43:9f:f4:
94:11:13:0c:02:28:fa:9a:5f:34:64:45:cc:d6:7e:cb:57:da:
de:b6:f3:cb:6d:e1:e1:cc:72:ed:cb:e6:b6:6c:68:13:3b:91:
0a:26:e7:d2:a0:85:f9:b5:93:91:7b:29:6b:e8:e3:49:70:1c:
32:4a:9e:38:3c:be:0a:9f:a3:d8:78:cc:f9:75:7d:51:70:76:
44:21:5e:fc:5d:6c:79:63:2c:46:98:f5:5f:1e:91:31:72:ec:
81:71:1e:b7:38:e0:59:f9:fc:36:21:b8:be:46:c5:90:ac:95:
a1:93:d0:9d:3b:e8:00:77:8f:dd:2d:0d:19:20:78:b3:7a:49:
33:ca:8a:0d:48:4d:88:60:4f:b8:1b:57:83:c3:86:19:92:7a:
0e:df:80:fd:0b:f7:6a:ed:14:1d:39:0c:96:17:a8:a1:2b:83:
a6:7f:e5:42:ee:58:27:bb:43:16:a2:6e:e4:27:d7:6b:2d:ae:
fe:ab:67:d4:15:c7:5a:d5:5b:2b:8e:c0:6a:7f:9e:47:8c:28:
e4:9e:81:ba:88:b6:3d:79:c8:6c:bd:e6:58:05:de:31:2b:21:
ef:d6:69:51:eb:af:ef:65:a5:c4:50:92:34:b8:1e:b3:8f:61:
b0:33:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:12 2025 by rpki-client