Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa
File: d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa (raw, json)
Hash identifier: PUT7CQnjNOPr/fWbLSFv1lIzy2CuXSIv7KJ00D786VQ=
Subject key identifier: B6:42:B9:D2:BD:A7:9D:F2:B1:8A:4F:53:1E:D8:2B:68:FB:F9:2F:86
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858493C092393F4803BD7524CCB80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 29802
IP address blocks: 66.96.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:23:93:f4:80:3b:d7:52:4c:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=3079105f-4eaa-4347-a0cf-33339f541535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:2b:0d:8c:5f:4a:3a:88:a3:de:5b:31:8b:
2c:b8:27:45:b8:ac:58:e7:3b:01:c9:e5:c0:89:49:
2c:0c:e9:ba:87:42:ef:48:09:91:f6:90:16:2f:e2:
1f:70:1f:40:cd:c2:54:6d:fc:d1:05:fa:2a:8e:dd:
a4:52:d3:e5:12:19:60:f3:c6:d4:23:51:a7:e5:84:
ba:71:5c:5c:31:f1:94:04:0f:2d:b6:2d:09:87:09:
0d:67:04:b8:6c:01:8d:3c:f0:b5:e0:76:87:d5:8e:
7c:e6:00:ab:85:b1:44:61:95:41:fd:cf:60:bd:3c:
12:97:98:c0:2d:f9:0d:72:96:cc:a5:32:92:70:15:
68:1d:56:03:50:40:ef:28:87:ff:c6:bd:1a:ca:30:
e1:68:cc:d1:54:49:91:19:be:2b:cc:d7:f9:af:05:
43:f0:85:79:ba:10:00:82:91:f2:3e:4c:96:3c:a5:
63:a1:6a:f4:96:4d:35:db:6e:bb:3c:64:dd:d2:f4:
a8:75:a0:81:97:01:11:1a:21:87:98:da:16:86:58:
81:b4:bf:85:6a:10:23:0c:53:a8:9a:9b:a9:5a:10:
90:06:0f:65:19:76:3f:67:6b:9f:d8:94:e8:0f:b3:
94:37:f9:65:79:06:f4:b9:67:f5:30:80:a3:14:ef:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:B9:D2:BD:A7:9D:F2:B1:8A:4F:53:1E:D8:2B:68:FB:F9:2F:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.96.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d3:27:12:4e:7c:99:2f:24:45:35:75:50:bf:40:74:d1:18:
55:92:35:ad:f4:eb:91:c7:99:db:5b:46:8c:68:bd:20:a7:c9:
f0:e7:7f:68:ac:cc:f0:79:12:04:09:f2:e4:30:c1:42:59:7a:
fc:31:4b:a6:77:c6:71:86:78:1b:d4:39:05:60:9f:8c:b2:1b:
72:7e:de:01:8d:14:1b:f1:53:77:a2:ae:9a:1f:38:e5:29:83:
5d:20:d5:8f:3a:cd:1a:5f:33:71:a8:43:88:fa:e3:3f:f8:37:
6e:98:bf:3a:53:86:3f:26:7e:ef:07:84:bc:d0:c3:e9:e5:87:
66:32:f4:30:cd:0e:ca:33:a4:02:a0:ea:50:e0:93:3e:bf:d2:
9d:f4:e5:5b:78:f9:47:e3:8d:0b:10:b0:4b:49:a2:a6:20:b1:
03:ca:8a:5c:c1:46:bd:1f:47:92:7c:d5:7b:ce:35:f4:a1:c2:
0f:73:ae:99:50:48:53:72:86:d2:2d:db:f4:a5:10:44:31:7b:
17:b1:04:ef:0e:28:14:b9:76:15:ca:4b:09:b1:8d:ea:cf:6e:
74:5b:06:52:d2:c6:1c:8b:28:be:8f:ec:25:4a:0e:6c:b2:e6:
d4:58:cb:a6:34:dc:61:15:6d:b3:4f:2c:92:6c:d6:9c:f6:cc:
5b:11:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:10:11 2025 by rpki-client