Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03212e39-c85e-3250-b8f9-f642b868e221.roa
File: 03212e39-c85e-3250-b8f9-f642b868e221.roa (raw, json)
Hash identifier: YEbmy2FFOWn3VhLIExO6z30zXqgHLtgTj8M+l7dy7Rc=
Subject key identifier: 4E:B1:F6:45:02:E0:72:9F:4D:D2:63:E2:77:5E:9B:82:9A:80:1C:D0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21102B386CCB4B2010BD5C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03212e39-c85e-3250-b8f9-f642b868e221.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 27338
IP address blocks: 66.0.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:02:b3:86:cc:b4:b2:01:0b:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=e1960ca4-87f8-49f4-958b-e2b5a29a4fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5f:da:8b:1e:37:da:21:d5:4d:a9:ab:c2:20:
e1:ea:6f:51:2f:32:9b:ee:a9:29:9a:d2:fb:f6:ed:
bd:91:a2:79:d5:d9:5f:97:ac:59:61:d9:4b:3e:fb:
81:f7:02:c3:b7:9a:76:aa:8b:00:52:4d:ee:ca:16:
48:2f:28:9d:4a:64:5a:4d:bd:0e:b3:95:bf:73:69:
88:bf:b4:0f:46:ea:2b:f8:c0:8a:cd:a4:81:18:0b:
9d:08:fb:5c:78:07:0d:ef:22:98:58:b2:eb:6a:05:
f3:62:a4:03:13:42:51:5b:1a:e3:23:42:11:35:a2:
36:2e:68:22:77:3e:6d:d3:b4:52:1b:91:87:ba:f4:
b6:2d:cb:f8:36:80:4b:8a:d3:a8:cd:ca:6d:e9:6f:
e3:6a:cf:9b:29:5c:3c:a1:6a:3a:67:35:86:e5:44:
ac:7d:f6:a2:c2:ce:63:f6:ef:e5:7c:bc:dd:10:2b:
8a:e3:ca:d8:52:0e:31:ea:88:3a:35:5e:5c:ea:9f:
fd:a2:e7:80:ad:22:ed:f2:e7:11:29:f6:ac:e7:c4:
7d:f5:8d:2c:94:b9:b4:d9:cf:cf:0b:78:63:90:f3:
0b:c7:52:db:60:05:f3:13:17:29:61:67:4f:85:0b:
2d:63:38:f8:b2:f8:e2:54:a1:92:4a:34:e8:71:3d:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B1:F6:45:02:E0:72:9F:4D:D2:63:E2:77:5E:9B:82:9A:80:1C:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03212e39-c85e-3250-b8f9-f642b868e221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.0.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:0a:29:94:bc:9d:57:bb:01:a5:a8:23:36:41:ab:63:67:30:
9a:37:d0:79:90:34:cf:1f:35:c0:b6:0e:a3:cf:10:d4:d9:a4:
b1:ec:ad:92:57:69:64:3b:c3:20:77:fa:33:f4:3c:79:b0:3c:
d5:4d:69:94:b8:9c:85:eb:33:be:ca:5a:d1:e5:00:08:08:7f:
1a:c4:99:bb:21:9d:b1:fb:5f:47:e4:f4:11:5a:c4:ab:5e:b1:
d9:b5:9b:bb:16:2e:e0:47:da:6a:79:e2:6c:14:e4:cc:df:0f:
37:dd:c9:c1:3c:1f:23:75:d8:08:48:f8:fb:91:e6:0f:9a:79:
f6:b5:9b:65:a3:8c:1b:fc:a6:68:71:77:31:cc:67:4b:01:25:
5f:0f:4e:4a:a2:07:18:df:9f:42:db:a9:fa:b9:a8:da:12:89:
74:73:b5:78:08:16:bd:1d:b6:7e:ae:31:b5:da:45:04:fe:28:
8e:9d:81:47:6a:4f:49:a7:5b:53:96:8e:3d:21:63:64:a5:4f:
f4:65:f0:0a:61:65:87:9c:de:29:01:68:bb:cc:09:fa:04:ce:
18:2e:cb:51:b1:27:f1:5d:4f:e2:4f:2b:c0:6e:c5:f6:61:e4:
9b:16:88:e7:b2:6c:ae:1d:6f:b7:1e:aa:1f:f4:2d:5a:4e:f7:
0a:d4:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:12 2025 by rpki-client