Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa
File: 3a16288a-c441-313a-a400-24f9d544cdfa.roa (raw, json)
Hash identifier: xLNljQlxFD1+uZq0jkDdhNkn3TUEvRBC2AHcuA8JbeM=
Subject key identifier: 1E:10:9D:23:3C:04:84:58:0B:91:91:81:D1:2F:5A:76:76:88:10:E9
Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial: 010D0C9F43285848E16BE884A728E16354744800
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 33139
IP address blocks: 66.49.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:e8:84:a7:28:e1:63:54:74:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=c95f4e11-38ff-4de2-99a9-4796f6fdbfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:ef:7c:8d:96:20:a1:68:33:a7:82:49:11:
1b:ca:b4:ff:1a:3b:53:33:8b:55:2e:6c:ff:cd:b5:
c1:15:1b:be:91:56:90:0a:37:69:7c:74:92:81:1e:
ba:3a:f6:a2:ac:d4:4c:a0:9b:6a:59:dd:bb:a9:17:
c7:fb:90:53:fe:de:8f:50:32:ca:b3:5f:5f:89:e6:
7e:b4:19:2e:1b:ed:d5:f2:3c:03:32:6b:df:9a:72:
5a:fe:c2:41:ac:78:25:4a:88:43:33:0c:65:8a:f5:
c0:25:8e:df:bd:f6:a4:c5:c1:98:6a:bf:a7:27:77:
bb:93:a7:22:b9:34:f6:99:f3:94:9f:03:03:00:05:
b1:20:b6:8f:76:22:c4:08:8c:32:9f:50:83:78:ec:
38:d0:6b:ca:16:df:b0:b8:65:81:c3:e6:65:84:f3:
af:e6:69:42:b3:b3:17:9e:ae:7f:54:4d:ce:7a:8d:
0c:f6:4c:d3:55:d8:fd:47:ac:76:a9:f9:26:d1:33:
8f:22:f9:87:a0:5e:97:e9:9f:28:d0:81:ac:22:69:
4b:38:fa:41:82:bb:30:e4:9d:5a:17:89:59:4e:28:
fd:45:b4:d6:a9:cd:03:ba:40:7a:46:fe:71:8e:29:
31:d6:96:1a:38:43:be:5e:13:69:64:d5:25:e0:7f:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:9D:23:3C:04:84:58:0B:91:91:81:D1:2F:5A:76:76:88:10:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
X509v3 Authority Key Identifier:
keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
sbgp-ipAddrBlock: critical
IPv4:
66.49.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:de:bd:93:b2:a5:e5:01:a9:63:af:cd:51:73:a9:30:d9:33:
63:9d:f4:37:40:8c:50:d2:cb:b8:66:33:af:8c:06:8c:d3:93:
ac:0c:2e:2d:b6:bc:d1:d5:56:70:cf:32:ef:c7:f8:27:47:15:
03:90:1f:54:90:f1:49:3d:0a:63:c7:9f:b2:54:6d:33:97:a6:
1e:6f:19:7b:3e:16:57:c7:55:e4:ef:0a:b0:96:01:ee:47:06:
dd:a0:46:50:5d:36:cb:34:f6:cb:28:42:6c:92:36:eb:8d:11:
20:5c:75:31:dd:b7:c1:4c:f8:0c:75:69:21:bf:b0:e4:92:47:
b3:fb:92:70:18:e8:ae:b4:5a:c8:f3:62:98:17:eb:ac:70:fa:
34:54:81:f8:e5:a3:fe:e6:77:0e:30:46:25:e3:e3:62:d6:85:
11:f5:89:8a:3d:09:0a:f5:b5:59:dd:d5:4f:c1:5c:25:1e:7b:
91:42:ed:15:c4:d5:f6:91:21:9e:55:c6:0b:0a:45:ce:5c:dd:
54:97:93:4f:b0:99:33:62:56:b7:a9:ca:1e:79:4d:76:1a:59:
27:68:7d:1c:ad:b9:1d:e8:6f:58:96:b4:bb:af:81:fa:c7:a9:
61:ad:a1:ef:30:ae:30:23:22:fc:25:bb:2c:9e:b4:ce:54:2e:
95:07:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:16 2025 by rpki-client