Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa
File: dc041d99-8872-3e16-ac74-885f3001767d.roa (raw, json)
Hash identifier: N9zfdQhE3CPWQFWTp+LCinHeaiQekGkebuJLw5EqsBw=
Subject key identifier: 2E:14:18:E5:90:3E:C7:4A:FD:03:01:CF:75:C2:6A:DA:E0:3D:71:66
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F43285848B4C0D4F147EF87A2F5D69100
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 46378
IP address blocks: 66.172.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d4:f1:47:ef:87:a2:f5:d6:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=bd0e08e0-150d-4a95-8221-b9eed597501f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:5e:e3:d9:43:99:06:74:33:be:60:81:aa:
f0:a8:34:ad:c0:72:71:05:fd:cb:07:76:76:d0:2f:
c0:a9:d2:7f:41:74:2f:6d:77:20:a0:89:3a:2a:ac:
48:6f:9f:4e:17:1a:71:0e:9b:df:4d:3c:16:6f:58:
a3:d8:89:b6:cd:90:b3:37:64:91:7d:aa:95:97:f4:
7f:29:00:ed:65:12:12:e4:6e:f6:44:25:e1:b9:d4:
70:16:1d:84:dc:54:45:b8:97:42:68:4b:b8:dc:05:
de:3f:6d:9a:66:87:0c:c3:f6:82:f8:7f:c2:a6:54:
75:2e:59:c1:a3:91:b8:e9:92:b4:9e:88:2a:d9:7e:
80:17:51:1a:84:d1:3c:e0:98:a5:09:ff:85:a0:ff:
f3:58:52:6a:12:a5:23:8d:9a:35:e6:0c:5b:4e:ab:
c3:10:2f:7a:30:71:9c:bf:e8:ad:dc:24:de:9c:84:
fe:6d:ae:d8:0d:50:ed:0b:28:2a:be:15:8f:a2:5b:
17:99:1c:e1:5b:f3:0c:ba:ca:17:f1:b8:78:85:0d:
90:6d:bd:7b:44:7e:db:81:97:66:49:7a:cc:1f:96:
0b:13:9c:11:d8:5e:04:e8:52:af:27:8c:31:74:d5:
31:83:69:5c:f3:8c:6c:65:65:8d:fe:31:80:36:bb:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:14:18:E5:90:3E:C7:4A:FD:03:01:CF:75:C2:6A:DA:E0:3D:71:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
66.172.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:b9:59:d4:c5:9d:50:90:7d:c1:95:00:c1:a9:7f:84:72:e1:
7a:30:c8:89:d7:20:68:da:f8:03:9e:61:9a:f5:ba:07:e4:e6:
fd:ab:79:96:43:9b:e2:67:d3:45:fd:2b:3d:4e:8e:71:9a:99:
ef:c9:01:fe:da:8d:85:c7:49:0f:93:44:3e:f8:bc:e0:a2:0c:
48:a1:e0:d8:26:b8:c0:76:e1:45:82:09:74:db:fd:15:ac:38:
3c:9d:03:e7:ad:88:1c:3f:84:ef:20:2f:91:1d:10:d3:75:69:
4d:a5:b7:36:ff:22:31:f1:c3:d7:fe:58:7b:be:cf:e0:1b:b5:
24:10:8b:77:e4:73:1e:5a:40:ce:78:29:fa:94:fe:ca:7e:06:
c1:1e:ab:5c:0f:71:c6:a9:5f:84:92:26:4d:e4:25:4a:08:44:
6f:5d:71:c2:c4:97:fa:46:2b:b2:f9:6b:de:66:d3:5a:ee:32:
bf:c4:5f:9f:76:dc:56:31:6f:de:24:15:97:81:22:f9:e5:7b:
3b:f9:34:05:42:8a:8a:c1:d9:73:ec:29:fd:e2:7a:9f:e1:9b:
88:b3:c9:6a:24:f7:75:19:5a:5c:cf:c2:64:a1:53:df:89:25:
dd:ba:a1:18:5e:fa:2f:bf:53:f7:2c:63:16:dd:2b:0f:71:f7:
51:59:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:57:23 2025 by rpki-client