Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771691b3-85e2-3225-acad-f9e30b8a0d7d.roa
File: 771691b3-85e2-3225-acad-f9e30b8a0d7d.roa (raw, json)
Hash identifier: 84Gse5y1Iz4OsYEr5UDNInOK6NORsvB6o3AcQ1fIElc=
Subject key identifier: 43:44:3C:04:DA:E3:35:E2:43:33:F6:3B:F3:34:5C:59:4F:ED:D1:DF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D0ABB94E356EF8D490B07E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771691b3-85e2-3225-acad-f9e30b8a0d7d.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 7029
IP address blocks: 69.66.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b9:4e:35:6e:f8:d4:90:b0:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=e727cb1d-eaa4-4787-8ba6-387cb1dd0855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:67:53:c6:b5:41:2b:88:cd:08:12:4c:2e:
b2:78:20:7c:b1:c6:2e:de:17:0d:24:c6:97:d2:6e:
3b:7e:6a:f4:46:94:f5:2a:d6:fb:e7:08:55:85:bb:
60:a6:33:78:79:10:bd:82:b7:3a:fe:52:42:5c:9a:
e2:2c:ea:b8:ec:55:03:18:f0:b4:fc:22:5d:7b:68:
b5:bd:27:dd:68:3c:d2:c3:c8:a4:c7:78:bd:74:b5:
c3:e1:dc:5b:10:c9:a5:fb:f9:f4:d4:bb:66:5e:13:
86:18:0f:d5:49:e9:87:b8:32:5c:06:94:3a:ba:ae:
da:1e:1c:ab:4c:c4:db:b6:ef:4a:97:bc:3d:f2:fd:
55:70:df:da:15:2d:74:9d:ad:0a:0d:6c:ba:da:f6:
10:ce:c3:e4:4f:9f:79:4b:5f:e5:98:cd:22:d4:f2:
26:86:63:59:83:9b:d8:e9:5b:aa:45:42:2f:bb:ba:
1e:bb:4c:e2:2e:66:8d:c6:0f:00:87:78:3c:a1:e8:
6b:c0:f5:d1:b4:1a:81:b2:fb:4a:86:e6:da:29:1f:
fd:61:52:95:f4:a4:3a:df:6b:36:55:57:0a:9c:4f:
4d:25:3c:2b:e6:59:b2:d2:b8:85:bd:1e:93:1f:d6:
6a:f5:9d:f5:42:79:b4:c2:f8:9e:48:16:af:ac:8a:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:3C:04:DA:E3:35:E2:43:33:F6:3B:F3:34:5C:59:4F:ED:D1:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771691b3-85e2-3225-acad-f9e30b8a0d7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:cf:e9:fc:63:c4:c5:c8:01:b1:d0:de:73:81:25:e9:21:74:
5b:6e:16:3c:05:8b:37:67:29:50:d4:04:ea:45:9c:b2:02:53:
15:3b:a8:51:58:e1:80:b3:c4:ba:08:ca:04:55:0a:03:bf:fa:
5e:87:01:86:6f:f9:a4:6a:5f:27:49:09:13:b0:f1:59:fc:9c:
9d:bd:75:6a:a5:16:27:75:d5:87:bd:32:7f:1c:31:98:46:98:
09:b0:ba:da:fc:88:7f:d4:3f:86:ff:96:39:a7:6f:c7:02:76:
b5:84:cb:1c:88:d8:ae:79:35:80:30:1f:94:a9:30:19:9b:33:
12:aa:6c:32:3d:e9:05:c4:af:a7:f8:98:a4:9e:b7:26:32:7e:
6a:06:19:28:8b:17:3d:03:82:97:73:6b:f5:d7:01:60:e6:c6:
7e:43:d9:37:1a:38:44:26:6b:8a:84:0d:32:6c:6c:ba:1b:0b:
18:15:28:62:9e:bd:d1:38:91:df:ad:87:7f:4e:46:74:3c:06:
56:95:fb:3e:15:b6:7e:ab:ed:2f:50:59:2f:7f:b8:74:f4:52:
c7:be:42:92:8d:99:81:22:64:3a:1d:f8:2b:c9:49:a4:a9:5f:
bd:bd:3d:7f:05:af:12:1c:ad:6a:24:c2:aa:6d:28:82:61:11:
49:43:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:02:07 2025 by rpki-client