Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa
File: 9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa (raw, json)
Hash identifier: UefPAKOLEBebKQ+T0otaYW9IlRqC6FvKAW5BSZHqCrg=
Subject key identifier: 46:F8:CB:DA:13:A2:62:59:AF:7E:A2:94:14:AC:9A:7E:8F:DA:F2:DF
Certificate issuer: /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial: 010D0C9F43285848811B12000FFC8C2F21372CA0
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 11766
IP address blocks: 66.60.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:12:00:0f:fc:8c:2f:21:37:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=0872aeb0-4b51-401d-8082-c272b104587d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:af:92:8d:ee:52:96:d5:5d:8e:95:4f:11:
ae:8f:38:50:4d:49:2d:10:46:74:8c:b8:e0:de:75:
b7:17:8f:ba:36:cd:55:c4:4f:7f:16:75:da:74:29:
eb:e2:d2:21:40:50:b7:b6:46:43:37:9a:ed:02:d7:
7b:09:ea:49:d1:32:79:ea:20:85:82:28:59:45:9a:
ad:cb:78:1f:b9:e3:a2:34:d6:74:00:bc:8a:69:da:
fa:9f:9c:8f:e8:00:0d:81:87:ae:60:8b:37:70:9e:
ce:c0:8a:ac:b8:77:02:b7:68:44:44:68:b9:54:27:
ca:65:cd:9f:9c:8f:99:4f:81:0d:ae:0e:b7:be:39:
9f:44:5a:c0:1e:0e:14:e3:33:50:c5:02:f9:b7:16:
dc:94:4e:d2:a2:bc:b6:8c:39:f1:57:9a:ab:1d:7d:
09:dd:83:8c:18:f0:b9:fb:1c:b5:d8:95:1d:32:6a:
31:17:86:2e:8a:1f:c0:5e:19:e0:32:a4:20:c8:30:
0a:60:48:05:a1:aa:0b:73:b2:1d:69:f3:6e:c8:da:
e9:d4:f8:b3:c1:f6:59:74:45:17:52:3f:9e:c0:38:
ac:24:31:e9:98:6f:5f:51:93:0e:ab:1d:6c:33:07:
0a:27:32:56:ca:c4:19:31:03:70:ac:f0:99:72:d2:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F8:CB:DA:13:A2:62:59:AF:7E:A2:94:14:AC:9A:7E:8F:DA:F2:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
X509v3 Authority Key Identifier:
keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
sbgp-ipAddrBlock: critical
IPv4:
66.60.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:4e:52:fd:ad:1f:0b:69:da:5a:3f:a8:9c:41:8f:38:12:90:
b6:53:36:72:68:c5:7e:97:52:f4:47:43:78:db:2e:39:57:4f:
22:53:44:26:23:8d:3c:de:77:20:6b:89:ea:ef:be:c2:e2:33:
d9:96:82:44:54:11:d2:8d:f7:58:62:1a:46:c5:17:f7:0f:ae:
22:38:24:69:a3:de:d0:1a:99:14:1c:4a:eb:d0:65:6b:98:a6:
d2:72:5a:95:79:df:e4:56:55:b8:fe:b5:f9:49:80:89:5e:b7:
a2:40:c2:c1:93:b3:77:46:05:2a:0b:98:88:f3:0e:a9:ca:ab:
0c:09:27:c7:8c:b9:2d:ee:52:5d:d7:69:d6:6a:89:66:c9:eb:
d4:06:67:e2:c7:e1:17:36:d8:02:3d:df:f9:8c:ca:c1:0b:da:
0a:0c:4d:e1:61:40:92:48:2b:05:9a:b3:d8:0f:c0:86:da:84:
40:14:e5:16:41:8e:b3:89:d2:88:bd:42:71:2c:e8:1f:ee:7f:
80:5d:b1:26:6c:47:7a:52:4b:43:d9:98:82:7a:4e:93:12:f7:
0b:a0:ff:26:21:d2:b9:cc:02:69:be:46:e9:04:16:40:7e:58:
4f:a3:93:b4:45:ac:89:63:dd:12:9a:e7:73:4b:29:15:4a:21:
88:4b:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:00 2025 by rpki-client