Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa
File: 5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa (raw, json)
Hash identifier: xVs52nWMbwP00i/lkwZlBwKJcAyrn5J8nusGnw+KxpI=
Subject key identifier: 74:8B:99:54:3B:18:C7:90:52:24:FC:EB:49:6C:AF:F2:79:88:CB:62
Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial: 010D0C9F4328584902EC01FD993D437E41621E60
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 23522
IP address blocks: 66.252.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:01:fd:99:3d:43:7e:41:62:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=3c383f9a-2aea-4809-8f56-d39dfca8b217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:ea:08:ac:ad:c2:ce:c8:87:d6:f9:61:3d:
ca:40:2d:5b:5b:dd:3d:02:fa:9d:59:63:e6:07:7e:
41:48:b7:39:6e:00:1f:80:1f:d7:7c:68:08:99:9c:
45:d2:5b:63:35:e1:31:ce:de:1a:d3:12:8e:35:19:
0d:33:64:71:67:b2:64:49:53:0b:7f:8e:fb:ff:1f:
0e:60:11:64:fe:a8:91:88:55:b0:c4:fe:bb:bf:58:
17:22:93:1e:fc:1b:72:92:0c:84:2a:14:ec:9f:5f:
89:59:69:dc:0b:cd:b5:cd:fb:1d:cd:63:e3:9f:b6:
09:5a:b1:a1:67:aa:17:98:81:74:b3:e6:aa:66:90:
40:02:b2:e1:32:e8:d3:24:8c:7c:03:f4:c8:6d:a1:
d8:8c:40:c8:21:80:7c:0b:f8:a3:f9:47:3b:94:e3:
d7:eb:a1:57:8c:0f:a2:d1:24:4e:69:9d:67:7b:78:
15:95:60:04:15:68:da:de:68:07:e5:4d:60:09:56:
8e:c2:e4:c9:59:ac:d1:8d:68:2d:e8:7a:ef:a0:09:
e3:83:f3:89:4d:70:66:28:03:18:06:a3:da:7d:06:
ac:99:66:d3:26:7d:01:9d:41:db:f7:30:cc:55:4d:
27:91:f9:47:16:65:3d:b7:37:53:74:24:42:c3:de:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8B:99:54:3B:18:C7:90:52:24:FC:EB:49:6C:AF:F2:79:88:CB:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
X509v3 Authority Key Identifier:
keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.252.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:eb:60:7b:31:c5:5f:56:ad:4f:9b:cb:3f:68:37:ea:aa:e3:
20:a1:30:a0:22:8b:87:4c:cc:a1:30:b8:a0:58:a7:d1:7f:4a:
60:7f:8e:3d:cd:98:80:8b:cf:64:9e:39:ca:6a:64:e2:69:9a:
27:49:c1:75:82:c5:12:45:6b:de:d2:e6:f9:76:61:1e:f2:bf:
df:49:b1:e2:00:d5:37:c5:a6:59:b4:b5:33:ba:a5:5d:ae:06:
3b:0a:5b:1c:93:2f:67:43:5c:43:24:81:76:12:1a:46:65:9d:
b9:65:48:a2:11:76:7e:f9:48:34:45:68:7f:b6:75:74:0c:12:
56:8b:10:14:29:38:53:ab:b0:63:cd:90:90:5e:19:f5:1a:22:
fc:1b:ad:ef:c0:ea:01:66:cb:53:fe:0c:12:d7:61:a6:49:24:
cd:e5:54:1c:8b:bc:83:22:6b:4d:eb:fa:d7:25:4b:43:0c:c4:
a4:08:16:fc:50:63:01:6a:dd:1d:ce:bf:4b:a4:87:ea:9b:db:
e4:92:bd:6e:b6:d6:ab:fd:ac:11:f6:2d:a8:a5:86:1e:d9:d0:
bf:77:df:ff:bd:a0:4a:10:3b:8c:09:35:74:84:86:73:4f:ad:
e8:10:9a:e6:ee:2e:95:53:1c:bc:3a:e6:67:42:0f:43:ae:fe:
72:2b:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:48:02 2025 by rpki-client