Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/686da44f-d526-30d1-b2e7-2f3a72e454d6.roa
File: 686da44f-d526-30d1-b2e7-2f3a72e454d6.roa (raw, json)
Hash identifier: NbsNOLZcQ6+pr3IyrGz0g4HfVouwwX4mP+E7tagn9YQ=
Subject key identifier: AF:FF:F3:CC:6B:44:A4:11:71:D4:E1:DF:BF:58:5C:4F:BC:DC:27:B8
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F43285848A29B564B6C79F6F5962C5F00
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/686da44f-d526-30d1-b2e7-2f3a72e454d6.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 19905
IP address blocks: 66.206.199.0/24 maxlen: 24
66.206.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:56:4b:6c:79:f6:f5:96:2c:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=6ee8505e-ffaa-4c6f-bf29-8de9604d5dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:2f:3e:57:49:a3:29:a7:8d:aa:99:da:d1:
ef:b5:fd:ec:a1:79:da:50:75:9a:7b:11:2b:f2:81:
cf:d8:54:f7:ff:f4:d1:c2:55:76:f0:88:6f:81:dd:
93:87:39:06:4f:28:98:3f:2a:1f:38:a6:ed:3b:cd:
52:0a:58:99:82:14:00:60:1b:53:de:17:da:d6:75:
15:95:52:8c:2d:2f:07:7f:df:b7:2d:b0:d9:ee:c9:
be:2d:48:a3:bd:a5:07:fb:f4:d1:5c:2d:93:4c:0e:
1b:07:70:69:0c:db:22:a7:44:f9:9d:44:79:70:c4:
bd:1a:4b:4a:12:22:2c:01:ea:7f:f5:95:55:a2:1c:
34:dc:11:79:77:a5:fe:0d:8c:c1:34:88:e5:c4:2e:
9e:f3:27:6f:0c:a6:a2:95:17:ed:ec:cd:aa:aa:b6:
21:49:0d:4a:ab:10:48:94:e8:64:e5:94:fb:58:a4:
8d:e2:ed:3d:32:c4:4c:03:9c:ef:8d:5b:70:12:14:
86:95:69:60:1e:b9:a9:74:46:0c:57:79:bb:f7:a4:
29:c8:3d:f7:9f:d2:ad:0e:b0:95:de:e1:c0:da:31:
1b:8d:7d:4a:95:e3:79:5e:ef:95:16:88:47:ed:ed:
3b:7e:52:d0:99:a7:5d:39:da:b5:2a:8b:49:16:72:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FF:F3:CC:6B:44:A4:11:71:D4:E1:DF:BF:58:5C:4F:BC:DC:27:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/686da44f-d526-30d1-b2e7-2f3a72e454d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
66.206.199.0/24
66.206.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:d0:e6:99:a9:82:61:df:6e:7e:cf:d0:a0:f1:68:01:81:1e:
7b:20:a1:f2:f9:fd:f3:c2:ad:5a:0c:e1:fb:fc:2e:49:f7:cc:
d4:96:29:2c:6b:c8:e4:88:42:ce:08:1d:6b:fe:c6:c5:23:29:
dd:12:aa:78:d1:89:31:f8:2c:38:19:a2:c8:cd:a7:a2:69:2c:
f5:9e:42:e6:4e:4d:96:3f:47:34:90:38:13:0e:ed:e4:08:9e:
ab:be:09:82:fe:ad:cc:c3:95:02:e8:f2:b9:8a:d8:a8:38:64:
76:36:47:cf:a8:c8:0d:15:44:8b:3d:e1:fc:d9:18:43:c3:91:
ee:79:d8:e1:12:60:9d:72:74:8f:05:fa:24:e1:24:e2:c1:74:
1a:c6:37:0a:c8:46:6a:3a:6a:4a:9e:2c:ef:af:38:dd:93:bc:
ee:36:c1:cd:7e:0e:18:19:de:4a:69:50:c0:58:94:3f:94:81:
0a:02:a2:3b:98:bf:90:cc:e6:97:34:3b:31:ed:99:f9:ed:98:
86:a2:8b:46:b5:09:7d:58:4d:ac:24:ea:0e:cf:de:8e:21:2e:
be:de:37:67:e9:e7:86:8d:99:e8:b1:a9:82:65:b5:d7:ca:eb:
ef:cf:d8:ad:bd:2f:54:76:34:cb:56:c5:46:96:92:1a:9f:26:
05:21:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:43:51 2025 by rpki-client