Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
File: 5acde123-8b2a-32d5-8223-e6b8a8424390.roa (raw, json)
Hash identifier: 6yB90PYIvxDQXZFHhcfoTqW4cKIxeEZnoJ5/9UbpiVY=
Subject key identifier: 5B:BC:0B:8C:29:06:17:13:6D:17:11:73:E8:44:9C:C3:65:81:53:9F
Certificate issuer: /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial: 010D0C9F4328584949FE8C439E8DD010E90B1500
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 27768
IP address blocks: 66.249.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:8c:43:9e:8d:d0:10:e9:0b:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=9996bad6-0465-4d46-9f20-f4cc78825f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:dd:c1:ea:55:3e:c4:24:93:5e:5f:22:c7:
2a:2b:00:f3:4e:9c:9d:31:33:fb:c2:57:dc:eb:86:
dc:79:a8:31:e6:f0:30:45:ef:20:23:65:71:f3:2c:
55:8e:55:bb:ca:da:f8:41:26:df:d1:22:c1:44:ca:
57:c9:7e:c8:96:77:c8:2e:34:8d:28:5d:90:70:86:
b3:ad:c7:4c:da:64:0e:6b:b5:97:b3:f4:1e:bf:1d:
59:73:b6:22:89:46:83:a4:bb:71:04:44:70:23:a4:
74:63:0f:91:4c:bf:7c:ee:ee:47:e8:78:13:fb:a4:
8f:9f:99:84:4a:92:c5:ae:c6:2c:43:37:2c:20:12:
ed:3b:80:64:54:a0:f6:f3:09:3b:09:cb:46:b4:d5:
97:98:ee:f3:98:b9:fb:8a:ee:7f:18:fd:88:da:c3:
4d:fd:ae:dc:13:c5:15:31:be:33:10:9e:84:92:d2:
de:49:8a:50:fe:c6:00:e5:12:cf:c0:ea:e7:16:bb:
65:26:b4:32:fe:a5:92:0f:4d:b6:84:15:d6:fc:da:
29:15:06:ba:3d:a1:c4:b4:02:c5:5e:e5:84:9a:cb:
90:ff:bf:db:23:1f:be:a0:31:40:7b:72:cf:ff:d9:
76:6b:e7:14:13:c0:fb:34:c8:9b:6f:31:7a:2a:e1:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:0B:8C:29:06:17:13:6D:17:11:73:E8:44:9C:C3:65:81:53:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
X509v3 Authority Key Identifier:
keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:00:5f:cb:ac:33:58:3a:57:7f:62:ce:90:88:98:90:2b:22:
e8:4d:99:3f:28:5f:48:68:39:84:0a:86:f4:75:81:ff:4b:46:
91:e0:2b:ea:28:59:bd:b0:7b:73:d9:71:92:d6:6d:b4:65:16:
de:95:60:7d:2d:86:93:b0:65:e9:d1:1d:f8:f7:46:a0:61:76:
e2:35:3d:1f:b1:cd:77:b2:67:4c:c0:65:f6:8f:1b:4a:ca:8c:
83:1e:9d:f9:85:cc:00:37:ff:a6:39:d3:d0:0b:5b:9d:d0:15:
35:61:0c:55:41:5e:52:4e:24:10:09:8a:99:68:0d:e4:9e:30:
ec:39:15:35:37:8a:ca:4e:51:f7:86:93:d3:c9:1b:02:f6:18:
aa:d2:1d:3c:b3:7d:22:8e:6f:71:53:3d:93:e5:c2:bf:27:e5:
1f:97:c7:9c:63:2d:b9:18:7f:8e:79:11:7d:d2:34:87:b3:ae:
68:49:86:d8:a3:11:b9:3f:3f:63:8c:9f:a0:11:fc:6c:24:fd:
10:d3:c6:24:38:75:75:00:5b:b1:f6:ca:37:e8:1c:cf:8e:9a:
76:87:8a:50:df:0a:99:46:35:af:38:28:c8:83:d8:c9:3d:6a:
02:46:44:90:4f:d9:8e:79:67:48:b8:d6:a8:90:08:5d:f4:8b:
46:bb:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:54 2025 by rpki-client