Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa
File: 99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa (raw, json)
Hash identifier: +xEaL+KsvYK8O0RFp8iHxtqDlnLsIFSBzxvUWXV4wYU=
Subject key identifier: BB:99:3D:CC:00:1E:96:28:D8:37:8E:FF:51:76:19:69:24:85:FC:33
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285849446950452365EB6F1E232A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 7029
IP address blocks: 66.16.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:50:45:23:65:eb:6f:1e:23:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=303f81c2-9d6c-4912-918c-368121edf287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fd:7e:7d:6a:c4:13:4e:cb:1d:63:d7:17:1e:
fd:16:8d:02:27:8e:8e:55:f4:37:8d:0d:13:32:74:
92:ef:f9:17:d0:cc:63:61:71:67:19:1e:21:1a:60:
17:60:01:9d:09:d7:df:3d:49:77:0e:32:0a:3e:ab:
c3:f3:59:8b:48:5c:03:ce:2f:f2:4d:f6:e1:4e:c7:
13:83:2c:e6:3d:6c:83:b9:3e:0b:1d:d2:38:74:7a:
b7:2d:b2:fc:f1:2a:ee:98:31:51:05:95:81:37:36:
0a:61:c1:47:d1:98:ae:a1:81:24:a2:b7:a9:41:88:
82:ee:8d:7c:65:62:96:24:f8:d4:3d:ba:7c:c5:38:
fd:93:38:6b:20:0a:09:a3:6b:d2:4f:8e:d1:32:95:
4d:4e:e8:bc:bc:a9:f5:dc:9e:cd:2c:91:c8:b3:0e:
b2:02:2a:78:fa:0f:5f:0f:b2:42:36:4a:7a:9f:8c:
e4:82:3b:4a:d7:52:d7:40:60:37:60:dc:d6:cf:13:
cf:5e:0d:99:8e:cb:fb:b9:a4:12:de:b1:41:35:21:
b2:f0:73:e1:b6:87:b9:36:6d:d8:2a:c7:37:00:6f:
62:e8:54:6f:b5:5b:f5:74:d0:58:ad:c3:8a:53:47:
53:dd:cf:17:35:e9:4a:9e:08:3f:23:1f:91:c0:62:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:99:3D:CC:00:1E:96:28:D8:37:8E:FF:51:76:19:69:24:85:FC:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.16.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:94:e4:e0:ce:fa:5c:91:85:b3:30:d4:51:28:da:7c:76:5e:
9f:e5:58:b3:38:43:9d:8f:01:52:c5:3b:e5:44:7f:c3:b3:fc:
96:0d:f7:97:e7:51:a6:52:cb:72:5c:b0:ed:a5:dc:3b:f2:a6:
c4:af:ef:68:c4:ea:d9:c5:1f:9c:2d:1c:37:f0:0a:9d:73:ba:
1c:99:1a:49:c7:5a:26:cb:b9:23:94:7a:66:80:75:04:20:0a:
17:7b:bc:99:a9:12:4f:77:1e:1a:bc:46:61:29:69:ce:f1:da:
b5:71:51:9a:a5:87:5c:7b:24:0b:eb:c5:38:d0:6e:7c:93:23:
c3:49:b4:e5:92:ff:b4:fe:c8:a6:5c:01:f3:1e:7b:aa:04:bc:
4a:f3:dc:c4:66:35:71:bd:dc:29:cd:d5:6d:dc:8c:17:48:a2:
5c:9e:4a:f3:cc:a2:cf:8a:64:bd:b6:17:a7:9c:fe:56:fa:75:
7d:79:cb:b1:a8:c0:61:65:8e:cf:ca:1e:36:79:8a:d4:e4:52:
ee:f2:cb:39:73:ca:25:a9:04:7f:c9:7e:92:55:a9:00:4c:2e:
05:b4:1f:d3:59:20:4b:ee:53:61:73:df:14:66:62:04:19:3f:
11:ea:f6:3f:17:a2:c1:3d:cc:24:f6:00:ed:23:4c:59:c9:f2:
d1:70:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:48 2025 by rpki-client