Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/16633004-e46a-3fb4-be3b-681f6a980807.roa
File: 16633004-e46a-3fb4-be3b-681f6a980807.roa (raw, json)
Hash identifier: skdZfF4KuJGslbTkByQoqtmj+cSQnHxrX8bZiroIUf0=
Subject key identifier: 0C:0B:37:D6:CC:D9:85:0F:7D:6E:C9:30:B5:0F:50:15:BD:F3:B5:BD
Certificate issuer: /CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe
Certificate serial: 010D0C9F43285848E006594AEC94EF0434594458
Authority key identifier: 27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/16633004-e46a-3fb4-be3b-681f6a980807.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 394763
IP address blocks: 23.182.248.0/24 maxlen: 24
2620:c9:e000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:59:4a:ec:94:ef:04:34:59:44:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=cb01fc65-cc3e-4519-94c1-9ba3bd020695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:af:4d:42:53:71:1e:39:e1:c7:7c:2f:9a:
da:cb:f5:3b:96:0b:f7:f1:5e:9c:2e:42:e3:44:f5:
93:ae:aa:99:72:fb:c7:c3:f6:2c:da:bc:f2:3d:fd:
6b:17:57:7f:e7:56:c5:34:80:84:80:83:dc:5a:ca:
e8:61:6a:19:48:f9:65:52:b5:0c:78:b0:4a:0e:5d:
23:8c:37:6f:59:84:15:5c:2a:64:e9:8e:04:28:f8:
63:a0:55:5b:0c:e7:11:cf:74:23:39:11:0e:2b:42:
b2:da:02:c2:04:ca:f2:1c:4f:63:92:0e:57:37:25:
4e:fd:23:23:74:52:9d:cf:81:0b:87:4e:da:32:62:
2e:63:b1:72:4b:3e:4c:f7:29:fb:45:23:3e:1f:74:
b6:92:de:a7:fc:2c:da:bb:cc:75:5f:fc:f7:49:ae:
3a:21:ca:ac:50:e3:03:b6:db:a7:c3:6a:4a:47:dd:
5b:06:b3:08:6a:68:65:f4:2d:05:5e:42:8b:e7:73:
ca:92:7a:53:55:e2:c0:86:86:1a:0a:8c:74:34:7b:
7e:35:c3:0f:aa:a4:83:e9:31:65:e6:e7:df:11:29:
d8:d1:3c:ec:4d:6b:e4:dc:99:67:be:33:19:69:d7:
7c:e0:7e:16:f9:39:fd:ba:da:a7:c6:2b:f4:d2:3f:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0B:37:D6:CC:D9:85:0F:7D:6E:C9:30:B5:0F:50:15:BD:F3:B5:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/16633004-e46a-3fb4-be3b-681f6a980807.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl
X509v3 Authority Key Identifier:
keyid:27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.182.248.0/24
IPv6:
2620:c9:e000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:9a:d4:9d:5a:61:f6:7b:1d:64:7d:fa:a2:a0:ce:48:b8:ac:
f1:7b:3e:27:7d:4e:9c:f6:e3:81:20:41:5b:19:7f:c8:32:cd:
07:c8:e6:a6:12:ba:1d:6e:5c:92:e1:4d:22:75:4e:9c:1e:f8:
9b:13:44:c4:50:01:af:a9:2c:cc:ce:e3:57:b6:81:2d:c0:a1:
a4:79:9c:fc:ef:30:b1:2d:76:70:36:45:86:bf:15:fb:77:89:
73:4c:ba:64:3d:58:b7:2f:ae:b7:b4:b8:f0:67:48:ad:9a:56:
06:8d:92:42:5e:45:c9:98:91:8a:56:52:49:df:32:d0:1a:57:
c4:40:0f:1f:e3:61:ab:05:7e:e2:4b:fb:7a:59:cd:f1:db:ac:
17:8a:ae:4f:ef:53:23:eb:67:8a:99:80:18:cf:9a:8e:07:08:
51:e1:32:5f:31:14:ee:ff:d6:6b:0a:9e:95:8c:2e:53:be:b6:
e4:b8:32:a4:bd:b8:83:7b:ed:97:08:5c:18:2b:44:4f:aa:b0:
66:54:f4:59:7e:55:8f:4b:99:a8:a4:08:5b:b5:ca:e2:07:ba:
82:a2:5f:e4:7a:0e:57:c3:b6:fb:7f:f9:c0:2c:d3:df:65:d3:
3d:7e:a2:fb:78:5e:f5:35:b8:75:16:3d:6c:51:52:da:e3:e9:
33:d2:94:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:11 2025 by rpki-client