Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa
File: 25e4f701-0c1c-336e-b2fc-6226317b20ab.roa (raw, json)
Hash identifier: KpUZFAdG8HPxbggZtmh4yLQWusDzluLwfhI/hDAMMR4=
Subject key identifier: 9E:AF:21:5E:3B:23:67:E2:AF:FC:7B:6C:7A:74:9F:67:36:7E:12:4B
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F432858490E16CB4A2CFA8531F6A1C380
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 20303
IP address blocks: 66.43.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:cb:4a:2c:fa:85:31:f6:a1:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=d410901a-85f0-4775-a252-04fb9970e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:26:0e:b3:c4:dd:7b:51:0d:08:9f:83:95:
54:ec:f6:c6:6e:28:5c:9c:62:99:f1:ec:17:31:cb:
f9:49:c2:1d:b2:52:a9:8c:86:8d:4c:d2:c9:83:37:
f9:87:3d:ed:b5:64:89:61:fa:58:6a:d7:6c:40:89:
be:20:eb:47:cb:26:a5:c1:81:af:56:aa:88:97:35:
21:55:cf:8f:55:17:46:88:51:f6:16:e3:51:ac:8c:
07:e0:96:30:89:f4:1d:7b:1e:61:b9:84:e2:b8:e9:
91:db:a6:8c:d2:75:33:f4:51:c3:cc:27:84:e0:39:
c2:b9:c5:d2:5a:05:fc:1e:10:63:48:02:49:85:1a:
75:4d:7b:f0:4a:f0:b6:e0:cd:56:33:4c:f9:32:d9:
82:43:30:c7:22:65:5f:e3:45:b7:a0:85:00:fa:28:
68:46:99:48:dd:e0:2d:af:e6:ad:4c:1c:12:21:88:
ba:8b:9e:ab:42:81:e3:1b:4b:b4:bc:c4:12:9a:56:
77:e6:a1:80:7e:ff:b0:a9:2f:cc:3c:03:11:6e:c1:
76:50:c6:ee:83:a3:b1:bc:1b:f9:86:a7:dd:22:76:
50:03:9c:97:60:22:f2:c5:fb:2b:b3:86:b8:3d:69:
32:84:14:ee:ce:e6:18:41:b8:64:2f:ba:11:7f:05:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:21:5E:3B:23:67:E2:AF:FC:7B:6C:7A:74:9F:67:36:7E:12:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.43.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:e3:71:16:02:fd:8e:2a:b1:46:1c:b7:d1:e7:b8:e4:4a:9c:
68:3b:ea:fb:cb:b3:35:9f:ca:7e:55:01:cd:8c:a9:53:ab:1a:
dd:a0:7e:f3:48:fe:b9:44:e9:c4:d5:cd:10:1a:f4:c3:84:b9:
d2:77:7c:92:18:46:8d:55:a4:c1:a2:56:85:a9:87:9a:68:33:
fc:c8:db:ce:f3:db:ad:81:96:19:27:af:62:6a:28:0e:a3:ae:
7d:07:7a:9c:36:bd:24:b9:a3:32:54:d9:96:2f:59:0f:be:22:
32:f6:78:e8:c3:b6:b7:82:7d:bf:e7:bf:eb:2d:8a:be:eb:d9:
51:b4:db:f3:9d:c6:2e:b3:e2:2d:6b:7a:87:ff:0c:90:a3:74:
90:a9:47:1e:d1:3a:a0:4e:eb:53:c5:93:24:da:ff:24:d2:7d:
6f:8a:3e:77:bf:fb:ed:0c:a4:9e:bc:d2:53:46:24:1c:7b:ce:
2b:f3:e7:28:dd:2d:e7:48:c6:d3:2c:50:61:c3:2b:cc:d7:19:
cb:53:a9:cf:64:45:ce:84:8a:32:73:8d:78:8a:b8:ca:b6:49:
2d:28:2c:cb:23:32:dd:6c:90:e6:e9:bc:1c:23:4e:7f:ab:c1:
82:81:53:46:8c:28:d0:fe:d3:10:ed:d7:f0:a9:b0:8c:ea:46:
c5:14:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:17:32 2025 by rpki-client