Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/40ac8344-ffcd-3af7-9ffe-fde7301cabb6.roa
File: 40ac8344-ffcd-3af7-9ffe-fde7301cabb6.roa (raw, json)
Hash identifier: S7FpH+SbrkX35qDxzpoCanTycGD/JOt9Bne2P9Yp7T4=
Subject key identifier: 0C:3F:CF:33:38:7D:85:BA:F7:ED:8A:6D:03:07:6A:09:75:2A:CC:81
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847D8766DFE0AC2F6FADF8C0E00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/40ac8344-ffcd-3af7-9ffe-fde7301cabb6.roa
Signing time: Mon 11 Nov 2024 16:13:10 +0000
ROA not before: Mon 11 Nov 2024 16:13:10 +0000
ROA not after: Sun 09 Feb 2025 16:13:10 +0000
asID: 394437
IP address blocks: 66.249.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:d8:76:6d:fe:0a:c2:f6:fa:df:8c:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 11 16:13:10 2024 GMT
Not After : Feb 9 16:13:10 2025 GMT
Subject: CN=b569ca3c-0741-4627-84c1-9df4fc078e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:6a:74:c1:02:f7:45:e7:a1:eb:c9:2c:83:
94:36:13:2c:8a:06:3b:2a:5d:6c:b8:de:0b:d6:1f:
e0:f3:1b:bc:75:7f:bd:76:ec:3f:72:12:57:6d:fb:
1d:c5:98:f6:a3:00:65:74:93:f8:4f:0e:9b:29:ac:
7c:b0:18:d9:c6:13:b0:a4:91:de:c6:e4:78:c5:5b:
c0:72:03:84:03:b1:0f:9c:c6:e0:f2:2f:cb:90:02:
5c:c0:d4:92:1e:6d:90:f4:6e:4b:3b:c7:d0:0f:fe:
21:9b:7d:f8:39:9b:25:aa:f0:07:b9:a3:b2:0a:b2:
c3:42:27:10:b1:ad:50:83:43:9a:5d:1e:5d:66:48:
fa:4a:03:f1:ec:8c:a9:85:99:ca:65:d5:96:bc:bd:
ae:9e:9d:c1:fd:a5:cd:13:27:15:53:1e:dc:48:a3:
dc:85:b1:d6:53:de:ab:d7:9b:f9:b7:3c:a4:c8:1d:
d0:3f:14:21:dc:7c:2e:67:b0:36:f1:de:04:c4:5c:
d4:63:b0:eb:e0:02:ff:02:4b:a9:68:7c:fd:b2:54:
db:92:bc:4a:71:5c:75:06:32:ec:4d:a6:1b:64:eb:
43:2d:a9:cd:72:d2:65:81:e1:93:8b:32:31:7f:cb:
c9:46:d7:ca:76:81:10:50:87:4b:3e:f3:0c:f7:55:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3F:CF:33:38:7D:85:BA:F7:ED:8A:6D:03:07:6A:09:75:2A:CC:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/40ac8344-ffcd-3af7-9ffe-fde7301cabb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:4a:a8:60:60:63:88:79:ae:dd:35:83:d0:fa:d1:ae:ca:61:
8c:a9:1f:bf:9d:0e:b8:be:36:10:82:a9:b5:55:91:dc:57:81:
94:44:c4:dd:5a:37:1f:36:df:f2:85:1c:d8:2f:d5:e0:f8:b7:
d5:85:80:c0:f6:23:9e:ef:8b:1f:05:6c:12:07:fc:3c:90:87:
46:e2:bd:f6:0d:33:b0:8f:af:e9:25:e3:bd:cb:d0:75:b7:f4:
e5:45:d0:92:44:8a:57:75:0f:bb:46:e8:47:b7:1f:8c:99:fe:
12:9d:5e:ed:93:ae:da:13:1e:db:76:46:88:56:78:72:b2:eb:
90:ea:6b:7b:30:6a:31:b5:31:5e:cf:68:b9:61:ba:89:57:95:
c2:85:4c:c7:e5:c4:42:0a:7f:ea:c4:3e:5f:24:2b:ff:24:f1:
9c:a6:bc:e2:f0:e9:fd:6f:d4:fa:f2:ac:13:f0:ee:c7:f0:16:
01:de:ea:26:d1:f1:d4:ee:01:26:33:06:ed:1a:97:61:cd:1b:
08:8e:8e:90:7b:a0:0d:89:f5:c0:7b:b8:0c:86:20:8a:19:0b:
c6:99:5e:cd:f7:0c:96:b9:6b:9c:f7:a6:95:f6:f1:a7:0a:de:
53:14:ae:c0:ff:ee:92:89:66:45:92:88:85:5f:4a:2a:3b:71:
11:04:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:32 2025 by rpki-client