Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa
File: a1599c49-20bf-390c-9d21-4c927a2074e3.roa (raw, json)
Hash identifier: Ldstk9pF3O9ysZlGaHGC7OpL4Sw8KQBWmvaC0Isr2UI=
Subject key identifier: F4:09:00:6C:5D:3A:89:2A:DC:DF:F0:A1:82:43:E0:ED:C5:E7:07:CD
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F4328584902EC2926287957C3A9AD2100
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14618
IP address blocks: 66.178.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:29:26:28:79:57:c3:a9:ad:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=2c43c315-34bb-4041-b41a-7216a73d8406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1c:3c:ea:43:c2:20:ac:13:ef:c2:83:f2:1d:
18:82:56:c1:0f:eb:f2:da:7d:3d:01:e2:81:e4:28:
91:e3:14:bb:49:c7:f2:9d:51:39:40:2f:2a:a1:55:
ea:ab:b6:99:5f:43:6c:9b:98:c9:ab:50:c2:d2:53:
03:3e:e2:4a:9c:a7:20:b5:f4:8a:46:f6:a7:3f:e3:
da:cd:db:c6:9b:ae:50:58:06:40:31:aa:e4:1b:fa:
d4:df:33:94:d0:6f:92:57:fa:0e:63:cc:05:29:e7:
59:16:8b:49:f2:1b:4d:a2:31:bc:d6:cf:31:0a:70:
7b:22:f2:f5:c1:0c:a1:d0:03:77:3c:f4:c7:88:5d:
39:c4:a3:c0:8a:20:9d:fa:fe:95:11:d7:3a:73:02:
bd:09:cf:83:c9:37:0d:24:c2:65:4e:c8:6c:48:1b:
16:6f:09:53:cf:16:2a:8a:06:b8:bf:df:7c:d7:d2:
4e:39:53:d3:37:90:a2:60:4e:c6:e3:aa:7b:e1:87:
6c:5e:b9:b3:1c:3c:40:05:e0:79:91:88:96:a1:e3:
b2:58:a2:72:dd:ab:ff:b9:e5:b0:68:e1:dd:96:a8:
ca:99:1a:1a:85:42:67:1d:54:bf:8c:10:69:32:e0:
c9:7b:88:35:e3:ab:46:dd:40:e0:cc:f4:23:e1:0b:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:09:00:6C:5D:3A:89:2A:DC:DF:F0:A1:82:43:E0:ED:C5:E7:07:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:73:25:25:11:0b:d5:a7:86:bc:ca:dc:7b:dd:0d:f4:6b:a5:
71:ca:02:00:db:ba:e3:e9:ae:74:5d:9f:95:13:e2:56:62:a4:
21:db:3e:26:ff:2b:86:b8:5f:7a:19:a5:2f:67:7f:7c:90:ae:
5d:16:86:71:81:5a:85:be:9e:b5:a9:c7:af:4b:ad:bd:f5:45:
5a:69:20:03:8e:da:b6:f5:9c:cd:15:a3:ed:66:00:e1:38:d3:
a6:b0:d6:f7:86:6d:dc:7e:b7:84:06:6b:d1:e7:04:20:d6:e5:
4e:12:3c:fb:52:ef:9e:b6:d2:e0:c0:ec:36:2c:d5:02:e1:09:
3a:15:81:a7:20:2c:83:97:23:d8:a2:b9:54:72:85:8a:2e:dc:
8c:88:07:94:43:2e:69:3e:c0:5e:49:71:07:cf:29:19:83:06:
df:55:a2:b0:1e:59:90:24:e9:cc:f9:3b:83:10:6d:cf:8e:39:
2a:8e:a4:1d:0b:11:fe:b6:b3:d2:f7:94:7d:25:14:15:24:f9:
3d:86:cc:c9:bf:b2:eb:3f:ee:ee:55:b0:5a:56:35:38:c0:06:
45:3d:39:e2:a0:fd:69:7c:68:c3:fd:37:f3:67:35:a4:d9:2c:
16:15:5b:86:ed:98:21:47:5d:9b:e6:14:86:99:d7:b5:30:3f:
04:b4:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:09 2025 by rpki-client