Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa
File: faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa (raw, json)
Hash identifier: LAow0AL6TfRnQvLagjqvZJt4GaaUvflYhiKOQ5dnNwA=
Subject key identifier: EF:E3:8B:FB:70:C2:3B:86:D4:01:91:87:47:FE:9C:C3:66:B1:76:F0
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F43285848E16BE1F418C35C2761FBB780
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 5511
IP address blocks: 66.112.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:e1:f4:18:c3:5c:27:61:fb:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=b27a29db-08ee-4195-a896-03a21a78dca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:59:f6:74:f3:e9:00:77:bc:66:87:ee:5d:
53:5b:7c:6a:c4:38:32:a0:cf:da:8a:70:e6:58:ae:
40:e3:95:76:72:80:2d:46:a8:40:59:19:b0:5a:02:
bd:c3:4c:6b:3e:2d:6c:2c:7d:2c:ef:dc:71:63:86:
d3:2c:7c:ae:b6:03:cd:2d:96:b8:55:69:59:2e:f5:
71:07:78:7f:4d:a4:4d:06:2b:8a:f6:92:b2:f1:8d:
aa:ed:d2:dc:4c:06:07:92:bc:9d:8b:47:b1:24:be:
e4:b7:a2:86:07:da:c7:2c:5d:5a:b2:b9:a6:16:5e:
48:33:67:63:f5:72:83:47:18:62:83:9e:49:3b:d0:
a5:bb:2b:bf:5b:bc:23:e3:69:f4:a0:1d:34:82:f7:
77:78:73:f5:99:ec:7b:d7:8e:f5:35:2d:8e:cf:1c:
b1:6b:80:19:9f:eb:22:c7:99:af:5b:41:de:24:f4:
9f:11:e8:ca:37:fa:3a:08:c5:6a:3a:c4:f5:db:81:
4b:de:31:9d:06:67:1a:5a:0f:cf:30:a5:bb:9e:e7:
33:8e:6e:fe:70:6e:ff:c7:47:aa:d8:10:65:d7:49:
2a:4d:15:51:6f:6a:e6:15:f7:bb:eb:dd:ba:ad:e6:
09:6c:35:1a:0f:16:1f:07:0c:81:1c:b1:ab:ab:e1:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E3:8B:FB:70:C2:3B:86:D4:01:91:87:47:FE:9C:C3:66:B1:76:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
66.112.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:fc:ca:8f:3e:3c:aa:63:d7:d6:12:1e:3a:01:bc:19:6d:f5:
5d:84:ef:88:7e:9a:9a:07:a2:8c:4b:4d:36:a8:7a:b2:58:60:
51:ac:6c:1f:23:bc:70:e1:b7:16:82:4c:85:c3:a4:2f:73:ef:
7c:98:ea:e6:4a:f7:b4:e8:67:42:a0:e7:da:64:5c:6f:4f:2c:
ba:b9:47:17:17:e6:bd:e4:2f:38:6f:d3:6e:f2:39:79:0d:ea:
51:22:b7:be:7d:f0:ec:3c:8d:69:60:06:33:de:a6:4d:80:4e:
1b:cf:4a:48:3b:2f:08:66:e8:4f:29:05:6c:6f:ff:9d:04:1b:
59:ec:e5:4c:35:d0:77:f6:a5:96:42:1f:a3:a6:b1:11:75:58:
a3:3e:c8:a6:8d:a6:e6:aa:56:2b:2e:63:52:cd:03:cd:e6:25:
c0:82:e9:64:a0:fb:7c:08:7a:65:da:18:3b:d8:58:5a:9c:f5:
a9:d3:8d:42:3f:7f:31:e2:ec:94:9a:91:c6:14:20:60:6e:46:
84:81:37:79:42:50:fc:60:c3:12:a0:2f:a3:72:22:65:ce:d0:
4d:4c:16:5a:da:2a:4d:0f:ad:37:cf:e6:2c:74:80:98:74:62:
e7:56:ab:da:5e:40:c9:82:ef:ae:4d:77:05:1f:84:3a:55:ab:
f8:c6:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:03:08 2025 by rpki-client