Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa
File: 7d7dc10a-737a-3507-8608-457a37bc28a2.roa (raw, json)
Hash identifier: zGLY8pFA9uiHWPDkvNRF7JHElcOx4hS7ZB0AtWDf8Fo=
Subject key identifier: 70:D5:12:1E:FC:2C:B7:58:8E:51:AD:02:BF:63:CE:A3:A3:2C:66:9C
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285848A99628D854913AF8937171C0
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 23525
IP address blocks: 66.152.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:28:d8:54:91:3a:f8:93:71:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=f606aa06-75d7-4715-98f0-c2d0ebbf1aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:55:e1:80:6c:cf:4e:13:53:b0:a1:83:1b:80:
86:33:50:6a:da:26:0a:f1:b9:43:79:12:cd:2c:1e:
2e:12:e7:67:45:45:c4:9e:ba:d1:d7:16:30:c4:cc:
52:ef:fd:c4:4d:03:c4:04:0c:a4:79:b6:f0:b8:b6:
8a:12:71:7e:ac:af:bc:05:e2:46:11:d0:60:9c:35:
5d:d7:6b:93:d7:57:9e:0d:43:a1:9c:9e:d4:a4:73:
4d:b3:55:83:da:3d:5a:36:97:6c:9e:bc:7e:4b:68:
1c:36:5f:77:17:98:b1:41:b8:2c:0b:3c:b0:ca:4a:
98:28:20:5c:99:51:78:b3:a5:00:17:23:d6:f7:9e:
3a:7a:16:08:95:3b:4b:8c:9a:5b:7e:4f:ad:67:88:
ef:3c:b4:fc:7c:1d:ef:94:cb:6e:95:bb:b9:a0:02:
28:97:20:29:a7:1d:b8:9e:63:d5:64:b5:ab:07:53:
38:16:79:72:6d:2d:9e:af:a4:7c:b5:b4:f9:35:ab:
a8:16:e8:74:8f:a5:3e:39:f9:b8:9b:f3:83:c6:93:
9b:9f:be:b9:7c:8a:ef:a4:58:ea:69:06:ea:34:44:
02:fc:aa:62:5e:ae:24:a9:cb:50:d5:66:43:93:a5:
23:03:9b:69:61:c4:1f:60:ca:75:c1:64:95:9e:55:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D5:12:1E:FC:2C:B7:58:8E:51:AD:02:BF:63:CE:A3:A3:2C:66:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
66.152.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:84:cc:d6:cb:13:c6:63:b7:d2:a8:78:5e:5e:50:6e:be:5c:
0b:58:c2:e0:f9:d5:c1:cf:bf:96:99:cd:a4:31:c4:d8:83:81:
84:b8:b1:82:49:39:5d:b7:21:eb:9b:64:68:e8:e9:29:5c:fe:
30:f5:21:c6:37:54:ef:75:5c:b8:cd:ce:0a:14:75:f0:40:17:
99:08:86:95:df:92:df:7f:c7:ef:44:5c:61:09:ee:a0:34:16:
ce:b0:ad:59:7a:92:25:70:44:b3:30:b2:ce:f9:41:72:05:d7:
69:c8:b0:34:61:12:03:39:24:49:b2:0f:22:d7:57:fa:a8:8e:
f1:59:db:95:84:ae:4d:d4:85:b2:b3:9d:aa:f3:a6:71:e7:aa:
c6:0a:36:6e:cd:fe:b8:c0:dd:1b:d8:8d:5b:34:f1:e8:35:ee:
cd:5a:28:d2:5e:e6:b8:ff:b0:5e:0c:c2:a3:ed:24:89:89:c5:
19:a8:ba:02:55:00:2d:6a:53:a1:11:6b:6f:7c:8c:3d:bb:0a:
82:f3:56:b9:76:8e:72:e9:b5:80:42:c0:94:7e:05:c2:f2:70:
ec:52:92:28:35:63:bb:29:5a:ed:9b:8d:9d:d2:4c:33:fa:35:
98:b9:05:de:82:16:04:61:44:e7:93:02:c3:5f:60:91:b7:c6:
1e:a4:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:57:45 2025 by rpki-client