Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c3bdb9ca-679d-314d-abfb-fed998457471.roa
File: c3bdb9ca-679d-314d-abfb-fed998457471.roa (raw, json)
Hash identifier: DT7KRZMJnGaqDXaM2bsmYLC3+5Ioes5E4bKkPfEeCqg=
Subject key identifier: CD:F6:62:46:09:8C:7C:3D:94:29:0D:A9:39:D7:14:7F:18:1F:A1:1B
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858494E2EB45AC325B9A250548E80
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c3bdb9ca-679d-314d-abfb-fed998457471.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 2559
IP address blocks: 66.185.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b4:5a:c3:25:b9:a2:50:54:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=00cf8a9c-040e-4fab-8ed3-ba24a4df8683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:80:54:ad:56:72:fc:11:26:4c:e7:84:e3:
a4:e6:0a:41:d2:7b:62:bc:23:e4:27:71:6f:5d:0d:
7e:a2:88:7f:67:3a:bf:37:1a:f6:18:94:38:7c:2f:
c6:d5:a6:78:39:6b:c6:37:c9:7f:f3:a0:75:49:56:
2d:65:68:cf:de:c8:a5:79:a5:94:85:50:a9:0d:2b:
44:61:d0:38:2e:67:01:d9:dc:e6:4a:86:dc:7e:f5:
2c:8c:79:e6:b6:bb:94:92:30:44:ed:84:58:35:03:
d3:4f:fe:af:bb:8b:a3:c9:37:fd:12:82:0c:4a:32:
fb:03:80:2b:a6:9c:82:50:80:a1:60:59:80:08:42:
b1:c5:e9:af:82:6f:6a:34:03:2f:cd:df:30:19:59:
fa:03:e0:24:83:ca:9a:ac:0a:67:06:25:ff:2f:73:
92:51:d0:c8:57:a7:29:f0:70:f3:05:ca:e8:d1:74:
67:af:74:3d:95:79:cd:ed:7e:2c:4d:82:08:03:b9:
23:bf:25:07:84:2f:a2:f8:ea:71:fa:64:5e:3e:cb:
8c:97:b8:c2:ba:8f:06:e0:ec:04:10:a5:5c:c8:21:
df:24:4c:9a:2d:05:5e:01:bb:e3:d5:4d:79:78:57:
ea:1b:27:81:01:c0:7d:66:b9:d7:d5:8b:cc:cb:1c:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:62:46:09:8C:7C:3D:94:29:0D:A9:39:D7:14:7F:18:1F:A1:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c3bdb9ca-679d-314d-abfb-fed998457471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
66.185.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:1e:66:be:81:07:89:e8:83:1f:90:58:4f:b7:fd:6a:a1:73:
60:90:ad:a0:b5:d2:35:e4:d0:6a:56:8f:84:18:a1:c1:a2:34:
d0:9b:a1:9f:70:bf:95:d0:71:df:03:e3:85:43:2d:e7:40:c9:
9a:9f:e0:c8:c4:5f:e3:32:35:08:eb:fe:a2:36:b5:d2:36:54:
9d:71:a4:ce:32:b6:7b:ae:05:4a:87:20:8d:d0:05:7f:50:e9:
33:6f:95:90:74:b7:a9:26:b7:b1:94:94:c2:9d:6a:19:1e:44:
3f:01:92:f5:fe:40:eb:6f:23:92:bd:7a:f7:14:20:6e:ad:8f:
79:e8:ab:48:94:84:ac:76:e2:38:df:b3:13:c6:d5:42:37:74:
67:93:3f:cb:94:6b:57:02:69:20:70:af:a4:7a:41:50:4d:84:
2f:72:17:49:60:20:34:d7:b6:c4:cc:9d:cd:b4:65:91:8c:05:
87:1a:19:43:d9:0d:da:d2:06:3d:7c:42:48:11:25:44:f1:56:
9c:2e:46:1c:37:ca:36:bd:f3:1d:1e:34:9a:a2:c4:db:ed:62:
78:fc:b6:23:45:05:f2:cd:65:5e:ef:5a:93:77:8e:12:02:24:
45:c1:00:3c:e0:f4:de:5b:31:a6:79:8c:df:be:5c:26:83:12:
06:ff:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:16 2025 by rpki-client