Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa
File: 0dfe2830-3978-3ff5-b745-9bca32c3f603.roa (raw, json)
Hash identifier: NHQKmL1v+q6oBoBSDe/JyMB8JQLG/Yg/IMR/ut5LckQ=
Subject key identifier: 91:70:BF:ED:C6:C5:7F:D3:BF:EF:7F:7D:5A:5C:8C:92:94:6B:2D:D3
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6C89DAFB9A3FF5A7EC2A0
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 7106
IP address blocks: 66.209.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c8:9d:af:b9:a3:ff:5a:7e:c2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=a96f4124-5e0d-4719-bc16-5cd5b858edb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:75:49:04:47:79:44:5e:4a:b6:9f:4f:d8:c7:
04:d1:90:3e:c5:cb:6c:b3:3a:a4:f9:5e:88:2b:72:
b8:3d:14:14:47:3c:fb:43:6b:1e:b3:24:1a:20:18:
ba:67:44:b5:f6:59:ac:6e:ed:85:fb:19:40:7d:ce:
86:ba:46:28:d6:5b:57:a6:7b:62:9a:d5:e1:79:ec:
97:85:12:a8:25:e2:4b:08:e5:c9:ca:f5:9f:c7:9f:
64:28:65:e3:9e:0f:9b:e6:48:e1:f7:58:50:6f:5a:
4c:40:55:f2:15:ea:37:3f:f3:a6:9a:fb:2a:4f:e4:
e3:4d:a6:0b:83:b8:b9:85:8d:88:89:ec:ad:df:a6:
f1:e9:46:65:ac:22:95:01:f2:ef:05:b5:06:79:c2:
b5:76:6f:3b:10:6c:f9:43:00:31:bb:2b:30:96:33:
2f:ad:19:49:08:b7:15:3a:1f:6a:8b:60:69:b9:82:
2c:5c:76:ae:9f:35:61:db:24:f1:6c:af:10:dd:bf:
71:9d:03:be:91:1e:10:63:69:28:10:00:8f:80:86:
74:6a:fd:ca:d6:e6:c5:c9:3d:c1:d9:f0:0d:ff:8b:
55:52:67:58:33:ef:59:b0:2e:37:e6:01:1f:17:5c:
1d:10:11:52:37:f2:85:c4:d1:b6:c4:80:7f:54:c0:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:70:BF:ED:C6:C5:7F:D3:BF:EF:7F:7D:5A:5C:8C:92:94:6B:2D:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
66.209.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:87:34:96:17:aa:34:49:dd:74:ff:3c:74:04:d0:dd:84:b3:
6d:a1:8f:54:e1:81:c6:62:43:a8:1e:fe:fe:fb:3a:2a:6c:be:
d5:68:4a:37:71:d2:4c:4e:ac:95:44:87:95:ef:82:a1:3a:fa:
0b:08:bd:49:0a:09:37:68:70:c4:55:1f:4c:8b:dd:63:00:27:
83:38:0d:04:24:2b:67:b3:3f:6b:cc:d3:c9:05:e6:da:3a:32:
7c:af:7b:2a:22:d6:e1:6c:f2:55:3d:1e:48:f8:66:6c:0c:37:
2d:d1:18:09:e3:78:a8:cc:b6:6b:70:85:4e:1d:89:b3:93:cc:
cb:07:df:04:e1:d2:1e:25:01:5d:c0:fa:ce:2c:97:b2:6e:75:
e1:e0:49:2b:ce:90:0b:a3:85:1b:d9:d0:51:7d:fc:6e:27:23:
12:c0:d4:50:66:8d:18:e2:e9:3b:05:72:91:68:9d:09:7d:d7:
d5:39:3e:91:44:0c:64:07:34:37:f2:a2:8a:c4:93:56:43:a6:
1f:31:71:31:46:8f:c3:41:ec:2b:63:42:2d:66:c3:8a:a6:e1:
0f:21:13:74:2a:56:46:2d:c1:29:b4:dd:33:87:2e:98:73:da:
3a:59:98:67:29:4e:fa:98:63:ce:7e:6a:3f:8f:e1:c9:b6:f6:
16:da:51:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:07:25 2025 by rpki-client