Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa
File: 04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa (raw, json)
Hash identifier: EC4vmpLsugjlu4txOiveVDs5lns42He/UseBdnI1nXw=
Subject key identifier: 1B:47:60:32:8F:C8:22:1A:5A:AF:3B:2A:35:9D:8B:D7:D7:8D:04:3A
Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
Certificate serial: 010D0C9F43285848FBA5890AC91A97E619E41F80
Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa
Signing time: Sun 23 Feb 2025 23:28:19 +0000
ROA not before: Sun 23 Feb 2025 23:28:19 +0000
ROA not after: Sat 24 May 2025 22:28:19 +0000
asID: 54309
IP address blocks: 66.33.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:a5:89:0a:c9:1a:97:e6:19:e4:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
Validity
Not Before: Feb 23 23:28:19 2025 GMT
Not After : May 24 22:28:19 2025 GMT
Subject: CN=5d034ebe-7303-4f70-9d08-9c3b4ed23ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:14:62:a6:c6:1c:0a:6e:78:99:a1:8f:e0:
40:de:31:c2:e6:05:6c:d5:8d:d1:49:14:0b:d2:23:
43:89:3e:39:42:04:f3:49:31:a0:24:d7:2e:a5:13:
29:70:c9:e9:f5:e5:04:a5:3d:a8:34:4e:c3:fb:2b:
a7:c2:25:20:de:c0:e2:26:fd:f3:03:ba:13:b4:25:
69:92:b3:79:51:85:95:f1:17:c7:ac:ec:12:06:ee:
62:09:4d:e2:92:e1:82:d8:3e:45:71:ef:7d:ae:55:
f3:74:6d:a0:7c:55:dd:91:e6:b3:fb:43:68:0e:99:
7e:3c:92:e5:30:8a:9e:1a:0d:30:c4:3e:8f:74:14:
c4:bf:0b:04:c4:00:2e:bb:48:5f:37:30:50:d6:f3:
7b:51:bc:ce:83:50:d1:6e:85:be:12:9e:80:c6:2c:
7b:99:d2:5a:50:24:0c:5c:a4:81:b2:00:64:2f:52:
52:67:96:22:e2:04:97:d4:bf:1a:80:31:c0:b7:ba:
21:e2:21:90:64:d4:de:49:ee:50:33:e0:51:1a:37:
8f:50:2f:d7:87:8a:fb:6e:b3:dc:ee:4b:b0:7e:27:
03:3a:16:87:58:b1:46:f8:e6:cc:36:35:71:71:11:
fb:58:d0:54:64:fb:77:60:1b:fa:4d:6b:1e:66:5c:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:47:60:32:8F:C8:22:1A:5A:AF:3B:2A:35:9D:8B:D7:D7:8D:04:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl
X509v3 Authority Key Identifier:
keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:76:8b:9c:8d:52:45:c0:13:f8:04:7a:c4:30:b9:37:76:aa:
ad:96:87:e1:fa:1d:53:9f:b5:5f:ad:6b:39:f9:8b:f7:2a:aa:
4d:b2:08:19:6d:1e:38:1d:f5:f0:52:2c:e2:d7:60:80:91:be:
02:68:2e:00:ac:53:14:b5:a9:24:99:b6:c0:e3:e9:7d:b2:90:
8f:56:14:a0:16:8a:8b:4a:a7:88:05:af:ae:c5:9f:24:a7:b5:
64:3a:ec:41:88:bf:7c:13:59:e8:fc:ee:74:91:34:a3:54:79:
a6:6b:6b:f4:39:50:87:13:94:8c:19:1d:18:ee:e4:3f:82:6b:
cf:0d:51:21:ec:18:a5:37:00:b7:40:a4:b0:a4:6d:3a:71:9c:
c5:d7:df:55:7a:21:5c:43:3d:6d:21:06:1d:a8:80:8d:bc:dd:
22:bf:f0:46:97:40:ad:b7:03:95:2d:07:76:00:e5:29:6c:63:
d2:ef:c6:2a:1d:b8:08:14:80:d9:f9:4f:b4:b0:89:9e:f3:0c:
8e:b5:b8:ea:bb:e8:c1:4d:26:37:a4:0c:82:8f:fc:7a:cb:96:
42:2b:28:bf:f5:6c:77:06:34:1e:c2:81:ae:c3:4b:ae:90:fa:
38:65:f5:c2:dc:17:c9:0c:aa:96:74:6a:66:d0:c6:30:e9:5d:
b6:39:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:08:28 2025 by rpki-client