Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/ee0ed4d5-cb19-33ff-9df7-8591db62f62a.roa
File: ee0ed4d5-cb19-33ff-9df7-8591db62f62a.roa (raw, json)
Hash identifier: n5kwLI7pIkVqpbLMguv6LxjsqzaSQdURXY7TKKxmfT8=
Subject key identifier: 34:35:7B:F0:1B:AB:A6:07:77:DB:AC:04:F0:21:94:1D:80:13:9E:9A
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F432858491ED6E5834792DFB6056BAC80
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/ee0ed4d5-cb19-33ff-9df7-8591db62f62a.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 22925
IP address blocks: 66.208.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e5:83:47:92:df:b6:05:6b:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=8901375e-7668-4706-b145-3d7a49d8fa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:82:6f:95:1e:42:5b:16:4e:35:39:9e:b5:34:
09:ca:b7:62:2b:eb:2c:cb:2f:2c:18:c4:15:ae:da:
e8:dc:f6:17:05:89:34:4d:66:09:b4:1d:0c:77:f4:
1d:b5:14:b3:45:fe:ab:76:27:d9:49:2b:0f:9b:38:
c6:6b:af:29:0d:74:80:7c:2c:70:73:46:61:9d:9a:
71:97:13:3e:ce:87:26:b0:48:04:98:fa:be:ad:39:
e4:75:e8:d1:f6:bf:ca:f0:d0:84:6e:70:68:b6:cc:
71:d0:52:bf:15:3e:b1:7c:5d:63:5d:86:cb:1a:26:
d9:1f:38:48:a7:01:73:1b:c8:b2:e5:1a:c1:38:c3:
a0:a1:66:06:24:ff:de:fe:f0:b0:a1:b1:3e:2d:90:
61:4e:e7:28:fa:ad:cf:7a:95:e8:61:0e:60:bb:c6:
ca:ba:92:04:25:00:fb:3b:24:54:30:a7:99:cc:20:
68:92:41:2b:a3:8a:32:3f:54:7d:53:fe:49:c8:4c:
df:ff:2f:e0:25:ba:f9:15:01:ef:be:b7:1a:84:4b:
3b:12:a2:18:75:de:10:ec:8b:8e:c3:1a:c0:c3:04:
51:c3:17:34:0f:3b:50:95:5d:ac:13:87:f0:06:3c:
8d:31:23:5c:80:ad:82:99:3b:f2:81:9d:9a:88:56:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:35:7B:F0:1B:AB:A6:07:77:DB:AC:04:F0:21:94:1D:80:13:9E:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/ee0ed4d5-cb19-33ff-9df7-8591db62f62a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.208.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:79:4c:f9:f5:9d:48:d4:d7:b3:5d:31:61:1a:b6:cb:1b:4b:
12:bb:fd:b8:62:7e:60:35:8b:ff:4b:8c:af:8d:34:43:50:40:
6a:13:86:a7:ae:d6:db:c9:72:99:f2:5a:4e:eb:f0:4d:51:d1:
8d:d6:82:a0:ef:1e:e7:94:cf:0a:b8:52:2c:c7:de:e6:22:d3:
cb:df:ab:94:f2:cd:6f:8e:78:70:57:6c:90:9d:dc:f7:fb:41:
de:55:ab:ad:72:8f:3f:56:64:8a:a6:9f:eb:c9:75:6c:9d:ca:
c5:a1:dd:21:d5:29:5f:51:57:98:93:2a:66:71:55:3f:c4:5a:
4c:e5:91:58:01:95:bd:fb:08:5a:e5:7d:8e:45:e1:14:9d:9f:
32:f8:05:3e:3d:aa:5e:9e:86:0c:6c:fa:08:49:9c:bf:c0:c0:
a5:69:f4:28:54:5a:0d:32:b0:8a:cf:3e:b7:ab:2f:41:f7:56:
1d:d5:71:7e:eb:16:f5:69:00:be:84:e0:b7:17:2a:c6:fa:d6:
89:35:0a:f4:33:ea:7d:68:fb:44:c0:05:5f:41:b5:e4:23:e3:
74:2d:46:1d:20:0f:59:ac:a3:30:89:d5:30:ac:8a:93:57:b3:
3e:63:5f:6f:f2:da:bf:d0:da:01:15:45:66:f0:f0:90:2f:74:
8c:5b:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:06 2025 by rpki-client