Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33478fd0-3b50-34e7-bd2b-e7fa757c89fb.roa
File: 33478fd0-3b50-34e7-bd2b-e7fa757c89fb.roa (raw, json)
Hash identifier: UP3D4ZYNq3HAgCGyOTo3Nvtr9RFTuGFQjeE5K7nl1+8=
Subject key identifier: E9:28:6B:E0:80:80:8C:CD:9D:20:40:C7:E8:21:5B:18:EF:29:05:40
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14ECD539DE5AC049C1400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33478fd0-3b50-34e7-bd2b-e7fa757c89fb.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 66.91.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4e:cd:53:9d:e5:ac:04:9c:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=387e3a0e-956c-428e-a6cb-30ce34666960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:34:3d:54:25:75:1f:0e:97:63:80:cb:7f:
17:47:81:01:15:50:47:a5:39:e9:8a:61:86:6e:e3:
a0:16:7a:c3:87:ac:d8:8c:3c:68:5a:c8:7e:e6:38:
7d:1d:e1:0f:a8:61:8d:7b:eb:c2:c3:a7:08:fc:3c:
ae:32:f8:db:1d:41:c2:98:a1:97:b7:7c:db:56:ef:
df:1f:ea:68:f2:2f:98:b3:31:e4:87:78:dd:83:55:
43:77:1d:bd:bb:ec:88:9b:3b:af:da:e3:c4:97:9c:
03:76:c8:cb:4c:9c:20:85:9e:b4:03:01:91:ef:51:
e1:df:49:7b:e5:33:4c:c4:41:e4:02:c0:af:f6:17:
21:b7:de:f6:ab:45:ec:5b:63:e5:67:92:6c:7e:ad:
9b:81:29:e0:3f:21:e1:49:c2:3e:a4:1c:7d:83:cd:
64:fb:f7:05:9a:93:a3:0a:8e:c0:a8:ff:d9:a1:5c:
53:6e:cd:20:6d:3f:b1:16:d8:98:35:03:75:fa:28:
81:4b:30:a4:56:f9:73:bd:31:5c:42:be:85:40:94:
25:a7:7b:0c:18:de:a4:0b:f7:70:7e:85:c1:10:d8:
49:07:ff:e0:6c:01:d2:85:b3:de:84:c8:07:44:ce:
f4:b8:55:fc:0d:82:29:c0:97:fa:29:1a:9e:19:2a:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:28:6B:E0:80:80:8C:CD:9D:20:40:C7:E8:21:5B:18:EF:29:05:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33478fd0-3b50-34e7-bd2b-e7fa757c89fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:6f:2c:28:9a:4d:f2:f7:a9:78:63:41:12:bf:b1:a5:81:eb:
e6:d2:63:39:54:ce:cd:9e:4d:7f:8b:a9:51:e7:68:c8:85:aa:
0f:61:c2:ad:56:4f:9f:b5:b4:d2:83:5a:a9:c9:7e:22:31:fc:
bd:cb:e4:e3:ea:ef:58:24:89:a6:a7:91:d6:d2:35:b1:d2:18:
ba:0e:d1:aa:bd:02:4d:32:3e:a3:47:2e:ea:e2:36:92:e7:7c:
e1:63:e5:eb:ca:7f:9f:63:7f:e6:40:3a:89:49:f4:5d:58:5e:
ca:ca:d4:3e:70:be:08:f6:e5:26:67:49:a0:53:bd:2a:4d:bc:
72:e4:34:7b:ba:39:a7:f7:b6:7d:99:bd:77:50:fa:41:5e:06:
bd:2e:ef:be:be:df:5b:9f:75:b2:88:6b:cf:7f:45:24:bb:69:
e3:2a:26:ee:95:a3:5a:85:c3:71:00:3d:b6:de:2d:00:f6:8e:
84:56:63:4c:49:02:69:75:f6:a8:74:5d:eb:36:b4:88:71:1f:
f2:6f:57:fb:f5:56:4f:18:16:fd:46:a8:84:02:2b:3a:a6:06:
de:2b:9a:6a:fe:53:4a:88:0a:5d:f7:59:b5:0e:ff:42:79:75:
b7:dc:ff:b7:ac:b7:37:ca:ce:d8:24:59:b4:34:34:b2:0f:ef:
9f:79:d1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:28:51 2025 by rpki-client