Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e05dbaf0-6ce9-319e-b05c-070225fbd158.roa
File: e05dbaf0-6ce9-319e-b05c-070225fbd158.roa (raw, json)
Hash identifier: wYVxMISmfDS3EYB0p2SzO1BjFgk8AEhpLhE3NufXBwQ=
Subject key identifier: 56:73:91:0B:60:A1:70:BB:33:38:76:44:12:73:CB:07:03:C6:8B:92
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285848A99628F1C98DF2503B7640A4
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e05dbaf0-6ce9-319e-b05c-070225fbd158.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 14477
IP address blocks: 66.152.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:28:f1:c9:8d:f2:50:3b:76:40:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=536ebab4-f7ae-4137-bfe1-40236ba4a51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:58:0a:b9:ae:86:b1:5e:cb:bc:90:59:c1:
c6:bf:a6:4b:41:38:c9:2f:05:61:9e:31:e0:12:ad:
bf:f8:f6:e7:ea:81:56:a8:1f:43:b7:04:23:23:7e:
2c:b4:09:60:e5:f1:d3:d2:ea:63:c8:9e:b8:15:69:
c8:60:06:4e:dc:f0:be:6b:37:c7:c7:a2:22:22:6e:
c8:c5:45:8b:21:2b:12:29:be:97:3d:61:be:10:32:
d3:30:b4:be:b1:77:9f:cb:a3:77:b1:63:75:f3:0b:
58:f9:8b:aa:3d:2f:12:3e:3d:3e:c0:2a:cb:fe:06:
27:4c:04:29:c3:6e:01:c4:65:9f:ad:57:6f:94:a8:
00:64:1d:65:2c:73:bf:03:79:c4:0f:3d:13:f0:b7:
f5:fe:79:a7:4b:3a:f4:9c:be:15:8d:bf:58:1a:d2:
65:8f:48:3d:4e:29:ef:1f:c9:56:33:57:e2:88:bc:
a6:f1:d8:81:18:2b:ad:80:6f:6a:43:9f:33:c6:d7:
9f:b4:53:21:c6:66:c1:fd:43:aa:cd:69:57:79:3a:
e8:81:be:e4:33:bd:f1:c7:7f:39:3d:d2:6c:9f:46:
96:a6:b7:f1:ad:4f:e9:10:1d:49:c2:80:97:83:af:
4f:88:ef:e5:d7:9a:ca:be:be:c5:27:d7:5d:7a:4d:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:73:91:0B:60:A1:70:BB:33:38:76:44:12:73:CB:07:03:C6:8B:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e05dbaf0-6ce9-319e-b05c-070225fbd158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
66.152.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:d9:bd:fd:06:d3:ff:a6:12:82:d0:08:8d:b7:9f:b8:59:18:
fe:6e:aa:dd:6b:75:6c:a3:fa:53:99:88:bf:d1:b1:0b:61:db:
fc:f0:ea:6e:2e:21:57:42:dd:bf:45:06:be:27:a8:3f:4a:06:
07:f6:1c:8c:b9:46:cc:1a:d0:c9:54:ce:64:be:48:f4:c4:aa:
97:7a:c9:b3:c1:c8:71:78:11:d3:c3:8b:7b:4e:ff:c3:47:8a:
c0:61:90:90:7b:c7:e4:ff:cf:fe:d6:4f:96:90:68:c3:b4:44:
eb:7c:05:14:ba:42:00:ab:9a:31:93:e1:75:ee:e2:74:27:20:
c9:09:8b:da:0c:58:0d:6a:03:41:fe:94:fe:1c:ad:cd:85:23:
77:ef:2b:39:73:fa:4f:ff:dc:0e:07:7a:fe:6a:02:bf:f7:70:
d1:e7:df:42:ca:c2:2c:c6:1f:66:70:2f:73:62:3a:05:02:1e:
64:82:26:d0:1f:c2:15:12:15:56:b4:2d:88:f5:84:18:3f:40:
6b:5f:7a:8d:d3:20:c6:a3:f1:6f:87:9f:a2:e6:71:7d:26:4c:
bc:c7:d9:b1:08:b1:cb:b2:f4:45:40:75:21:ae:39:2f:20:2f:
88:f8:ec:d5:5e:d6:a5:44:fa:92:e0:c8:62:1e:29:98:84:fc:
f7:98:4e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:46 2025 by rpki-client