Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa
File: 421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa (raw, json)
Hash identifier: yAprfN5R3sG50JUCNu4ZHVb2jIXJ3rGQPxKAypxD50c=
Subject key identifier: 1F:E0:13:2B:48:F7:AE:76:84:1E:4F:56:32:17:24:30:4C:A1:10:E3
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F43285848A29B52AACDB951F88C41AEC0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 13768
IP address blocks: 66.33.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:52:aa:cd:b9:51:f8:8c:41:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=ebc90b48-bed9-4d8b-9277-7af30bf099ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:19:6d:5b:cc:43:1f:21:b9:a2:6c:a2:10:
85:af:33:ad:19:f6:0e:73:e3:f9:fd:97:d5:14:98:
bc:65:8d:7e:bd:91:bd:c2:5a:f8:15:8e:7f:5c:d9:
6e:70:99:bb:46:1d:ba:4a:6f:aa:75:ed:54:53:a0:
8f:85:f4:49:dc:ee:46:5b:de:8f:b9:4d:e9:23:66:
e7:9f:d8:45:8e:39:14:93:15:74:71:f4:31:03:4f:
ee:e2:4a:fc:1e:5d:4e:83:a6:0c:ce:a0:65:73:9c:
cc:ec:c5:a5:69:d6:98:66:1e:d6:47:e9:01:75:9f:
d7:18:7d:9c:a7:b8:17:d8:41:c2:67:05:73:58:c2:
22:21:a2:1c:9e:9c:54:ed:c0:1d:dc:01:97:63:9c:
f0:82:ad:72:00:4b:57:5c:d0:46:55:3d:55:c0:fa:
16:54:67:ad:28:7e:9a:87:4b:4e:c2:0f:49:ca:7c:
7f:fe:e6:36:fd:75:a1:14:59:fe:04:de:d8:9a:a4:
b7:20:bd:96:37:a3:bf:16:3d:8d:68:4f:e4:63:6c:
7a:82:5e:71:8a:e6:98:51:5c:4b:58:60:60:fc:aa:
58:b5:b8:6f:2c:2d:dd:f3:60:6d:ff:a0:55:f1:a5:
5f:80:93:1d:1c:34:94:cd:3b:50:eb:2a:96:c8:c2:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E0:13:2B:48:F7:AE:76:84:1E:4F:56:32:17:24:30:4C:A1:10:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:a8:c2:78:1b:d3:f3:21:6b:3b:0c:7f:07:7f:c2:80:97:d5:
16:cc:93:5b:35:5f:0f:e8:de:52:b9:11:c0:76:b6:5f:61:c7:
26:14:5f:ec:11:e8:d6:96:5c:27:22:4d:d1:97:b8:5a:cf:61:
45:f9:3d:6a:09:18:89:a1:53:b4:73:5f:51:55:de:66:67:c5:
c6:63:96:1d:eb:8f:b8:2a:be:25:ac:41:e3:f1:a5:55:49:8d:
19:74:c7:69:8f:8a:0e:a5:e2:fd:7d:fb:14:69:c2:84:4b:7d:
6c:32:b5:62:90:4a:b1:5f:10:91:82:22:7c:1a:bc:0f:fc:d1:
ec:4b:c1:e4:3d:c3:4c:ff:90:7d:5c:f0:ee:69:d3:b9:82:d7:
b5:01:28:2a:28:77:97:ed:69:6b:37:b6:f5:e5:03:4f:06:1a:
d6:e1:7b:bd:2d:9a:92:0a:1a:d2:fa:18:94:f4:45:f3:8d:91:
32:da:f8:94:46:87:43:e9:25:21:37:3c:44:83:8f:7f:0c:9f:
8c:db:53:bd:94:5d:8a:4a:9a:89:64:7e:46:2e:5c:a2:81:a6:
99:32:63:f0:3e:ef:fb:88:e2:29:00:59:1c:5c:52:25:ec:96:
b7:80:1d:a9:61:25:29:de:ab:02:b8:bc:96:14:8c:93:59:a3:
39:a3:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:52 2025 by rpki-client