Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06ec7975-08d6-3ae5-b849-eb78311f177c.roa
File: 06ec7975-08d6-3ae5-b849-eb78311f177c.roa (raw, json)
Hash identifier: h7XCP8cWl6P0nMgM3sSV5pdeBfadT1qSVqpl8lJ1KJs=
Subject key identifier: 5D:AF:EC:EA:81:1B:19:0C:62:47:88:58:8E:35:A3:39:28:E3:43:8E
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848F65BE562285DAC9108B14880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06ec7975-08d6-3ae5-b849-eb78311f177c.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 22969
IP address blocks: 66.213.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e5:62:28:5d:ac:91:08:b1:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=3bb530b9-912d-41d7-a76a-115e3a9d6915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:03:85:fc:0a:e4:67:9d:97:6b:b6:fa:83:
40:f8:c6:bf:3d:aa:8d:e8:de:01:47:5f:f5:b8:b4:
96:8d:75:4b:18:e1:c1:ad:61:42:db:5c:ed:e8:71:
95:2b:e0:ec:c2:e0:bc:38:ac:df:68:66:c3:49:23:
02:08:39:d9:98:54:e0:af:a0:5f:f7:05:01:23:18:
7d:21:10:14:a9:f3:ba:a3:fb:52:6f:96:9e:93:a9:
08:bf:55:12:c6:f2:24:3d:17:04:bd:fc:8b:b4:13:
51:16:5f:65:72:ab:58:5c:40:bd:b5:3d:3b:bc:5b:
89:f0:a6:9e:9f:18:e8:63:25:60:be:89:27:ef:44:
34:aa:e2:83:f3:37:02:ca:ce:48:fa:01:3b:43:85:
e7:c4:8b:ec:fb:d5:53:68:a9:20:76:44:cf:5f:fe:
aa:03:ba:b3:2a:69:55:fe:23:fb:e3:62:34:cf:67:
14:f9:e9:21:ff:c3:08:22:66:36:69:d7:73:64:ca:
f4:af:b0:3c:05:14:8f:ff:79:bf:99:7d:81:9e:04:
29:d0:ab:0e:d7:ac:fa:33:85:fb:68:ac:00:91:a6:
d4:77:7b:6a:92:10:a0:74:25:fe:bb:e2:1e:89:cc:
73:64:16:9c:6b:ad:69:b2:4d:ae:8b:ca:bf:c3:af:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AF:EC:EA:81:1B:19:0C:62:47:88:58:8E:35:A3:39:28:E3:43:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06ec7975-08d6-3ae5-b849-eb78311f177c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
66.213.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:f6:70:75:84:98:88:e1:7c:ca:5b:79:ad:62:f4:cd:a5:0f:
aa:e5:ee:0a:18:21:9f:d0:46:37:e2:35:38:c0:f9:ad:f1:7d:
83:76:6c:96:80:b5:8d:1a:bc:bb:31:00:61:45:20:fd:26:20:
b5:d3:5f:84:15:9e:ca:f6:c2:65:83:41:24:b2:ac:19:f1:f0:
4b:7d:6c:55:ca:b7:06:ab:32:00:f1:f4:e5:3b:2e:bf:ac:63:
ae:cc:d8:5a:4b:4f:3d:47:e8:24:aa:bc:dd:64:97:c5:71:fc:
58:23:ec:4e:76:c1:d3:f1:0f:79:d7:e1:9f:5d:b5:88:98:3e:
fb:87:51:33:0e:18:6a:65:dc:11:74:9c:f2:62:33:1f:e3:f4:
d3:78:ce:c0:ba:c3:dd:ab:ef:8f:bd:0c:5d:a4:61:c9:9a:9f:
88:ee:3e:88:56:9b:9a:bb:6a:14:94:f6:d6:ff:ae:4b:49:55:
1a:a5:ea:2e:a3:41:f9:73:9e:4d:e0:6f:dd:8c:6c:9f:35:f2:
12:de:43:89:fc:78:71:a3:1e:4f:e1:e6:af:bd:2c:c1:45:02:
a8:ec:34:a1:ef:05:cf:8b:de:d4:08:a8:de:5b:4d:3e:25:2c:
00:85:27:43:e0:83:ea:e2:19:76:6d:b6:52:c6:ad:5a:f8:69:
9f:00:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:50 2025 by rpki-client