Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0fbd589-5567-33b4-880b-3db8cdd5df13.roa
File: a0fbd589-5567-33b4-880b-3db8cdd5df13.roa (raw, json)
Hash identifier: 1OBanXnkbq7PDLGjLGqfaMdYe6YUDtDYOnUbhHVluNg=
Subject key identifier: C5:11:C7:13:82:54:40:68:A0:C0:F2:F9:80:C4:CD:FE:FF:3C:CC:BC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848808B426A8E0D5385B6932C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0fbd589-5567-33b4-880b-3db8cdd5df13.roa
Signing time: Fri 10 Jan 2025 21:10:57 +0000
ROA not before: Fri 10 Jan 2025 21:10:57 +0000
ROA not after: Thu 10 Apr 2025 20:10:57 +0000
asID: 33393
IP address blocks: 66.16.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:8b:42:6a:8e:0d:53:85:b6:93:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 10 21:10:57 2025 GMT
Not After : Apr 10 20:10:57 2025 GMT
Subject: CN=8f876af3-3029-4e04-b12c-ede3d76ddb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:5c:d9:a1:fd:35:f9:4b:a2:89:71:80:ee:
33:0c:61:a1:2a:65:5e:5b:f2:f3:8b:fc:32:4c:64:
1e:88:4d:58:dc:0f:f9:44:53:9e:c3:87:70:5d:03:
e7:ab:1f:85:54:46:2d:09:5b:6d:ed:aa:d6:83:04:
f6:46:bf:e2:9a:6c:a3:24:ce:72:c3:aa:ba:ca:63:
0c:af:37:2c:ee:0b:7a:49:8d:51:cd:d2:c0:dd:bd:
63:84:ad:d5:1e:7b:87:37:dd:43:e2:e1:e6:a0:04:
38:0f:c6:1d:95:14:df:83:ad:d3:4a:9f:8b:15:58:
83:69:7a:19:ec:48:49:68:16:d0:cb:7b:96:58:86:
0f:a4:ef:53:3d:5d:92:53:65:b8:43:3b:76:b5:ae:
fe:af:6a:d3:89:03:cd:7a:fc:e0:fd:56:d6:be:ae:
8e:f0:fe:97:6f:6f:9c:ac:4b:74:67:6c:2e:51:4b:
39:65:35:9a:cc:ec:8b:8b:64:d2:b8:95:96:b9:dd:
6f:2b:fb:9c:71:c4:be:e7:85:4d:81:09:45:3f:d0:
86:25:44:f8:e1:bc:e1:7a:e0:66:a1:95:3b:34:9a:
48:a9:b5:8b:f7:44:65:79:83:c2:3b:98:9f:44:9d:
09:5e:4b:35:58:3a:c8:3d:bc:02:4c:20:89:42:94:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:C7:13:82:54:40:68:A0:C0:F2:F9:80:C4:CD:FE:FF:3C:CC:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0fbd589-5567-33b4-880b-3db8cdd5df13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.16.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:c5:23:af:17:3a:8e:f0:ec:52:e5:5c:08:60:df:31:11:be:
04:07:56:00:5c:b8:28:07:a8:98:f4:c2:dd:07:60:71:2d:97:
6f:51:c2:1e:e4:77:f9:aa:a5:91:5f:24:39:c1:40:85:39:d3:
3d:35:b0:c3:95:86:9a:d7:09:16:b4:d7:bc:1a:dd:82:70:8a:
d0:fb:0e:31:72:a5:cd:81:8e:dd:57:31:b0:ba:05:01:4e:d1:
24:54:f6:52:da:bb:9b:83:41:a8:c8:4c:24:0a:4f:e3:c7:f0:
e2:45:ed:e8:e8:6f:bb:aa:f2:06:04:f5:a2:34:60:51:55:63:
3a:10:b8:32:67:9a:cf:b8:5c:27:62:06:cb:7b:17:b2:0e:21:
9b:6f:19:84:88:b0:58:c6:10:13:69:33:30:1a:ef:c4:e3:f2:
38:89:62:4a:6a:25:8f:36:0c:e2:d1:22:4e:d7:55:2c:36:cf:
27:36:a7:42:30:ca:f9:84:13:60:72:95:53:aa:2a:1a:21:55:
7f:36:cf:12:d7:9e:1b:5c:d0:38:f7:d9:92:d7:87:eb:12:42:
44:60:c8:c2:9e:eb:1c:5d:9e:a5:ac:99:e1:0b:fd:b0:7b:47:
e1:22:fc:32:ee:38:5c:97:17:87:57:26:f4:5c:90:5d:04:26:
b3:1f:f3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:41 2025 by rpki-client