Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5/d70716a0-55a6-33cd-be3d-1a61e9134540.roa
File: d70716a0-55a6-33cd-be3d-1a61e9134540.roa (raw, json)
Hash identifier: EmfiqlVOrT5aT+T5rDOygfwkUwV+3f78yP45zaaUBIA=
Subject key identifier: CC:B9:6D:2B:D0:BD:28:8A:44:B2:A6:CE:1D:88:70:09:32:18:86:D2
Certificate issuer: /CN=65045431-d7a2-4974-ba9e-4c2dd967a5a5
Certificate serial: 010D0C9F432858494303F1F094B45C9572C33B40
Authority key identifier: 3F:A1:86:E4:D1:42:45:8A:3C:B5:B2:BB:F0:F2:61:08:98:79:29:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5/d70716a0-55a6-33cd-be3d-1a61e9134540.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 400920
IP address blocks: 66.132.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:f1:f0:94:b4:5c:95:72:c3:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65045431-d7a2-4974-ba9e-4c2dd967a5a5
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=33b1198e-e5e1-4ce4-a9e7-9106630dc9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:0d:f8:1b:05:54:21:0f:65:5d:5b:5a:b1:
74:85:1a:d7:bc:a4:20:e7:c4:7b:a1:15:3b:bd:4c:
44:0f:6f:7a:18:bf:4f:3a:27:fb:7a:47:83:3e:50:
5b:4a:9c:ac:d0:7b:50:7e:6d:08:0e:37:c3:46:4a:
cb:3a:da:03:40:c6:74:26:a4:a1:ab:df:52:62:74:
4f:f8:81:b2:db:1b:56:a6:7d:70:5c:9c:aa:1b:e6:
a3:60:4c:13:f3:58:9b:c7:f1:cc:82:d4:dc:9b:19:
96:c9:10:a6:8f:be:5e:57:b1:17:1e:0e:75:a8:11:
49:5b:5c:73:77:1b:d8:66:2d:0e:b9:87:ec:0d:44:
e0:96:24:13:9a:22:27:b4:61:04:e9:18:58:1c:4a:
9d:45:38:23:ab:b5:4d:8c:16:a3:08:a6:86:eb:49:
13:74:a9:d4:48:75:de:01:b1:d5:05:a4:cb:d5:8f:
4e:38:23:3f:86:ac:32:4c:47:82:ff:c0:37:37:ee:
21:14:16:dd:8f:35:b9:aa:fb:5a:8e:a0:7d:d6:57:
3c:8d:4c:31:b0:40:cb:e6:df:67:bc:5a:f4:07:8b:
d0:75:0c:ab:7c:c4:62:7c:97:22:e0:4e:82:9d:a1:
43:d5:0f:a7:17:b6:fc:0b:3f:8e:9d:c8:7b:94:7e:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:6D:2B:D0:BD:28:8A:44:B2:A6:CE:1D:88:70:09:32:18:86:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5/d70716a0-55a6-33cd-be3d-1a61e9134540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5/65045431-d7a2-4974-ba9e-4c2dd967a5a5.crl
X509v3 Authority Key Identifier:
keyid:3F:A1:86:E4:D1:42:45:8A:3C:B5:B2:BB:F0:F2:61:08:98:79:29:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65045431-d7a2-4974-ba9e-4c2dd967a5a5.cer
sbgp-ipAddrBlock: critical
IPv4:
66.132.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:19:b5:5a:e4:99:d3:d0:b2:e6:63:7a:ba:1d:95:50:da:8a:
e0:0a:59:59:84:e9:b1:f2:3f:bc:b0:22:61:9e:45:b9:e2:ea:
73:1d:da:ea:54:79:f5:fb:3c:92:51:67:d7:10:a2:2f:0c:29:
a4:f7:e9:ac:e7:ef:39:23:51:83:7c:d1:8a:ef:8f:39:ac:32:
98:4b:ac:c7:a9:80:ff:d1:dc:0f:e6:a2:ca:08:f7:88:4c:5f:
90:6b:27:ea:00:8e:d2:e2:90:cd:83:d0:3b:51:c2:f5:9f:1a:
53:06:f8:ab:cb:09:fa:2a:ea:a2:de:ea:63:1a:19:eb:92:a0:
9a:f4:f0:90:35:aa:26:51:48:60:cf:8b:8d:73:88:dc:34:24:
50:93:f0:ac:88:f6:92:5e:9f:85:20:b0:9c:1d:63:51:17:ce:
07:be:84:86:2d:34:ca:8b:73:86:e6:6f:51:8a:ac:1b:f2:7e:
84:ee:01:d2:f2:cd:cd:9b:ce:a1:13:b3:eb:7e:7e:bf:76:29:
e2:f9:c3:f8:20:18:fd:d5:05:e5:1c:fa:c4:21:c9:66:c6:d2:
85:ed:88:56:ef:12:04:15:0e:7b:08:52:8d:87:76:27:36:75:
85:5c:a9:15:93:5a:b1:1f:46:08:a9:05:7e:9a:bd:6f:0a:83:
52:89:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:59 2025 by rpki-client