Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa
File: 520be285-2429-3ad0-8ae4-5cc51f14e87e.roa (raw, json)
Hash identifier: KDtVMcYgyTzEVjoUq/xAWdmzvYJGVaPGyEl0gMRCNjU=
Subject key identifier: F6:F4:F8:45:6B:4F:AD:D3:5B:5C:8C:50:5B:38:6F:31:C0:CF:F6:CE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2111ADCF0391FD1CF50EA00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 66.0.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:1a:dc:f0:39:1f:d1:cf:50:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=0a820cfb-78af-46b2-ab0a-5f0cc8fe1ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:3f:74:78:d4:4c:b8:72:ad:7d:6a:59:69:
c5:57:c1:32:23:48:32:ab:62:fe:06:6e:23:61:04:
21:70:ea:78:9f:79:0f:a3:13:89:ca:11:7c:dd:3a:
a0:9e:81:b6:f2:30:cd:f4:72:63:43:0f:f6:23:e4:
9e:b6:7e:bb:d2:f4:8c:dc:c0:ff:05:56:79:8e:34:
9a:49:0a:49:54:c6:00:55:ce:1e:cc:79:2d:cf:03:
0a:ca:23:4d:d2:18:64:ee:83:5a:74:21:d0:02:8a:
2a:55:65:33:de:a6:37:eb:c4:37:1f:6b:dd:77:b1:
aa:e2:2f:39:a0:43:7b:cd:6d:c8:8f:ac:27:45:45:
a5:1f:c8:8d:65:ca:d9:4e:91:12:ca:4c:73:1a:6e:
b1:b3:a3:8a:96:20:97:7b:64:27:3a:81:75:3b:59:
33:e8:4e:f0:c3:a5:87:3b:69:19:2b:1f:4f:57:08:
6d:f8:f6:28:a0:87:28:fe:61:f1:43:a2:e5:6f:2b:
2f:8e:1d:21:9f:36:04:27:18:5c:65:fa:68:c1:35:
13:7d:81:39:4f:69:57:ec:ed:e6:7a:84:f2:24:af:
c9:ef:5e:72:7b:7a:55:87:18:38:b1:88:51:44:19:
b3:78:03:7f:95:ac:d9:e9:3b:36:1b:28:3f:d8:91:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:F8:45:6B:4F:AD:D3:5B:5C:8C:50:5B:38:6F:31:C0:CF:F6:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.0.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:71:b3:10:b2:47:68:7c:ae:ea:ae:32:4e:6c:99:53:92:9c:
7b:36:e8:e8:bc:e1:ad:1d:4e:a8:c1:75:b2:86:69:6e:96:8e:
9b:2b:ca:a8:58:ab:94:1a:d5:75:b9:e5:7a:c6:f0:7b:20:d9:
54:1b:d4:4e:5a:f1:eb:aa:5c:01:4e:21:23:b3:ad:59:ce:72:
24:6d:1a:e8:1d:5c:58:ad:cb:64:86:c2:73:f5:88:25:6d:ed:
f6:5e:ab:84:f2:b5:15:0e:12:3c:0d:25:d4:44:f9:28:60:a8:
17:3e:da:1b:34:d4:fe:f7:71:d9:b4:97:61:f6:3b:a3:c7:d8:
2a:23:d9:e2:e4:b8:81:ed:ee:2b:98:88:1f:50:24:24:2e:f9:
5d:5d:9d:a6:3e:d9:b2:1b:9f:0b:3d:f1:39:82:76:96:b1:c7:
83:aa:7c:80:35:9f:4a:d5:76:6d:ed:98:95:a7:eb:f0:8e:83:
2c:44:37:34:13:2d:12:eb:6b:f2:b9:63:9e:e2:a5:67:d2:d6:
95:26:3e:e5:48:1c:93:7d:e1:de:ca:3f:a1:60:1e:5f:fb:46:
f3:a0:4b:05:c3:1c:2f:91:82:4f:16:12:7c:23:48:61:1b:ce:
65:24:ad:11:70:0b:b4:fb:c0:5f:b4:cc:38:77:97:59:ec:11:
6d:85:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:29:25 2025 by rpki-client