Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/cc87d929-d8c6-3b06-9491-02e7091519d0.roa
File: cc87d929-d8c6-3b06-9491-02e7091519d0.roa (raw, json)
Hash identifier: DYfj91NGttksWEm10Z0HjvbZsK6+cDy0dEjH1We6P+Q=
Subject key identifier: 43:1D:70:04:DE:E5:D2:D5:83:59:1D:51:87:77:C6:58:0A:25:2B:CF
Certificate issuer: /CN=55113823-1e91-4b80-9639-924369210e51
Certificate serial: 010D0C9F43285848897B1FC609013CA0F26828A0
Authority key identifier: 8B:E2:68:25:C1:48:EB:66:50:D0:E9:B4:81:22:B7:90:4A:D8:DC:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/cc87d929-d8c6-3b06-9491-02e7091519d0.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 399915
IP address blocks: 66.118.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:1f:c6:09:01:3c:a0:f2:68:28:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55113823-1e91-4b80-9639-924369210e51
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=cbff3d63-3884-4c3c-a2ea-fcc3c73c7b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:77:2a:42:f2:99:6e:5f:fd:f9:a9:8c:2d:
18:10:3d:0b:bc:3e:09:07:7d:3e:f4:ca:65:ca:4a:
11:30:1d:46:c3:f0:e0:56:49:c9:56:7f:37:a5:5e:
db:36:88:2c:cc:ca:01:81:5e:09:46:4b:a6:51:37:
08:6a:d4:d0:15:d5:5c:c8:82:9a:53:5a:e5:07:2b:
bb:68:e5:41:ff:7d:4c:8c:2a:e8:12:2f:42:e9:a9:
aa:df:33:ff:60:f9:10:7f:91:87:8c:a3:ea:21:bb:
39:36:84:5c:40:69:e7:9d:6f:95:3c:76:19:a8:8f:
55:78:dd:10:6d:ef:18:6b:74:ab:66:e9:06:7e:8c:
fe:a7:fa:7f:38:b0:55:56:a4:3c:75:c4:22:d1:48:
20:c0:07:52:d3:61:fa:93:bc:eb:c2:0f:6c:23:90:
e5:9e:96:a5:c7:5a:e0:8e:6b:ca:80:84:8d:9c:7a:
b7:2c:eb:b5:5e:e0:8b:9f:f1:9c:f5:0a:51:27:ff:
2d:8f:a1:ba:68:d0:39:ea:4f:99:5a:56:78:c5:49:
c4:1a:77:67:69:1b:1b:ee:a1:5f:a9:92:3c:04:28:
cd:1c:10:8b:3d:e6:05:5d:3c:e8:71:70:03:46:79:
17:cc:4e:54:3a:66:2f:ef:30:4b:fd:90:43:8f:8c:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:70:04:DE:E5:D2:D5:83:59:1D:51:87:77:C6:58:0A:25:2B:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/cc87d929-d8c6-3b06-9491-02e7091519d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/55113823-1e91-4b80-9639-924369210e51.crl
X509v3 Authority Key Identifier:
keyid:8B:E2:68:25:C1:48:EB:66:50:D0:E9:B4:81:22:B7:90:4A:D8:DC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:6b:e0:0f:f1:5c:83:81:2e:5c:09:3d:0b:8a:74:01:70:65:
a9:ce:b9:58:ec:0c:b2:d2:92:e4:e9:e0:b2:aa:aa:83:ec:c4:
a4:f9:a5:19:8f:54:d1:13:a3:a2:06:e6:bf:2e:46:3b:4e:50:
f8:96:55:a3:d8:7e:27:21:3c:ed:da:ae:af:24:5f:d0:3e:bf:
d2:29:a3:f1:86:12:b7:fa:38:37:1a:fa:ee:2e:65:96:b0:c8:
e0:52:0c:e0:c4:9e:74:42:38:d1:e4:d9:88:22:5d:d7:37:23:
2e:e9:14:87:a5:57:e0:71:6f:43:ab:a3:fb:47:a0:c6:7b:d6:
ea:65:64:09:65:69:15:ac:52:15:43:fc:19:5a:aa:33:e4:38:
8b:31:62:fa:91:83:63:e7:f5:80:d5:9c:78:39:33:5c:79:12:
91:b2:7b:81:d3:30:93:1d:31:31:e4:8d:75:c8:20:13:bd:16:
2f:6c:82:58:77:b9:26:f3:21:4b:2b:5e:cf:b5:62:e3:71:c0:
a9:6b:97:df:7d:7b:eb:2b:f4:80:db:81:49:46:9c:92:f8:c2:
7f:cb:b4:2d:55:5a:dc:9e:b0:83:a3:0d:de:e1:89:a9:f7:06:
e5:7f:13:f8:df:61:4d:61:f6:a4:ee:1c:2a:5a:45:78:8d:63:
95:1f:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:53 2025 by rpki-client