Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/51b7e3a5-39e2-3728-b955-fbf00d7212c7.roa
File: 51b7e3a5-39e2-3728-b955-fbf00d7212c7.roa (raw, json)
Hash identifier: nkJWDusd9yunoPL6HqzSnT5W0T4+5dtMAe7hGhPf+YI=
Subject key identifier: B1:BF:76:CE:A3:A4:22:93:5B:5E:E8:D7:79:B8:45:0F:F5:00:9D:D5
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584940395000C45BB41EA6ED8040
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/51b7e3a5-39e2-3728-b955-fbf00d7212c7.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 198335
IP address blocks: 66.250.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:50:00:c4:5b:b4:1e:a6:ed:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=53071589-f8a1-4db2-a8b4-d2f2b33e8c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:7c:a7:39:1c:6d:a7:9a:97:2e:3f:b2:0b:
7e:70:cc:94:1c:48:5b:b2:b1:60:0e:b0:f3:48:f7:
95:0d:26:b8:52:43:12:d5:ad:9c:05:16:63:f2:ff:
87:60:97:89:02:e3:f7:45:31:39:c2:bc:71:73:aa:
f8:9b:41:3a:93:fe:55:7a:c4:ba:57:bf:c0:fc:e4:
1f:04:b8:cb:14:23:6b:d4:ae:c6:08:f2:ff:f0:fe:
88:45:47:e6:3a:7a:2f:90:d2:22:4c:b3:db:0b:6c:
5f:41:00:d3:a2:ab:7c:be:c0:f3:39:43:39:0f:23:
75:11:16:b9:0c:3c:f0:02:bf:dc:f4:60:4b:f8:be:
1d:80:b5:c3:e2:70:73:32:66:f4:ec:4a:a3:9c:6f:
fa:59:54:fc:6c:76:67:92:66:92:8f:cd:37:de:5d:
63:7d:8c:8e:e9:50:1f:0e:68:61:39:52:35:a0:ad:
cf:db:ee:6f:af:9d:74:90:be:1d:f5:e4:f4:c7:24:
d2:41:09:b1:57:80:95:1e:9e:08:32:38:28:81:a3:
ca:19:e0:bc:81:b2:bd:37:d7:27:23:12:1f:30:18:
5a:a5:48:3a:05:d8:69:62:55:33:54:b6:32:30:79:
dc:9b:5b:90:b0:57:32:90:1a:9e:fd:47:c7:b9:66:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:76:CE:A3:A4:22:93:5B:5E:E8:D7:79:B8:45:0F:F5:00:9D:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/51b7e3a5-39e2-3728-b955-fbf00d7212c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
66.250.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:93:5a:fc:ac:16:8c:75:19:ac:aa:0d:2a:89:91:2f:7d:58:
e4:13:d3:b0:c8:16:8b:f1:77:39:76:d3:29:e9:fa:f5:24:a8:
40:7b:d7:fb:a6:40:21:9c:ed:93:bb:73:e2:01:4a:e9:10:69:
c3:84:73:25:fb:70:bf:e5:7b:2e:17:79:d1:c3:7f:f3:d1:17:
92:f7:d6:ce:cb:8a:9e:07:77:ea:46:39:fa:67:4f:b5:26:eb:
07:7f:54:2c:1f:f3:ee:32:5c:61:0a:37:ec:2e:bf:16:ad:17:
90:37:d8:a0:69:ea:51:40:25:78:75:72:b3:61:fc:18:f9:1e:
49:8a:9d:75:46:e2:22:38:c1:66:36:43:9f:2d:18:07:3e:ec:
d4:38:21:02:61:28:37:f4:8a:ac:04:c7:e2:40:c9:9e:be:9e:
fd:f1:7e:fd:cf:46:76:67:2c:06:0b:d8:fd:8c:ca:b1:8c:7f:
b3:44:10:31:26:b3:1a:60:12:b8:2b:64:42:80:6c:00:99:41:
29:0c:d9:39:f0:f7:51:52:0a:f0:3c:e2:f8:8f:4d:5b:94:48:
ee:54:42:57:94:a7:d3:b7:dd:2f:18:cc:4e:93:99:60:55:35:
3c:66:47:c3:96:e7:3f:2d:5e:19:9a:7e:75:8a:6d:38:bb:53:
7b:40:5f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:41 2025 by rpki-client