Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa
File: 8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa (raw, json)
Hash identifier: oIoG0W/R376Pz38Wlbjc9H3X25vKB86EQRaY7VBvB3g=
Subject key identifier: 49:4E:FA:0E:EA:AC:FF:93:F8:91:25:98:F1:3B:82:41:7B:67:AA:A3
Certificate issuer: /CN=903ec3cf-858a-457b-844f-8c6283f5e5d9
Certificate serial: 010D0C9F4328584949FE92B16A669AFC2DC62E40
Authority key identifier: 3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 30255
IP address blocks: 66.205.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:92:b1:6a:66:9a:fc:2d:c6:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec3cf-858a-457b-844f-8c6283f5e5d9
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=1ef20a5c-93a7-4746-9ef3-5a49a4dddd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:eb:89:3f:e5:2e:e0:8c:76:fa:03:15:45:
1a:7a:6f:a3:41:3d:3a:04:bd:11:16:46:c2:71:ca:
5e:89:e3:52:81:9f:33:af:04:29:34:e5:74:ea:98:
3e:d2:00:0b:d4:d7:9b:cd:8c:52:4d:e9:4f:db:87:
0a:5d:5d:70:40:0f:08:88:e6:df:7d:75:67:35:70:
08:00:fe:57:47:f1:8d:24:35:f2:02:73:7c:58:ba:
ca:90:21:6b:4c:9f:4c:6f:9d:6b:28:03:5e:40:65:
69:80:23:6a:5a:42:4a:90:b0:dc:53:e3:d3:31:63:
cd:37:39:c3:44:8c:47:56:14:ee:0b:fc:c3:bb:fe:
71:b4:7c:8b:d5:95:f5:65:be:05:28:a6:3a:5f:d1:
15:61:55:f5:de:4b:60:35:6f:61:f2:1a:41:b2:48:
65:85:61:dd:7e:90:78:11:b6:07:5b:0e:59:99:94:
48:ef:58:d3:8c:7b:9e:63:a1:f1:e4:a2:f1:5b:6d:
1c:79:af:69:a6:e1:92:bd:ab:87:58:ee:71:e4:76:
65:dd:d3:39:5e:e2:07:24:f9:e9:40:91:9c:30:14:
c3:b6:53:6d:08:e5:a0:39:78:c2:ff:17:f7:6e:04:
1f:29:94:4c:65:52:8c:72:25:4d:5a:fa:42:b8:ea:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4E:FA:0E:EA:AC:FF:93:F8:91:25:98:F1:3B:82:41:7B:67:AA:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl
X509v3 Authority Key Identifier:
keyid:3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.205.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:58:21:4d:5d:e1:2a:e3:16:ed:73:0f:95:7f:df:af:d1:ed:
fc:82:c1:12:77:50:29:e6:aa:4a:3c:ef:b3:da:91:c5:47:55:
4f:ea:62:d3:4d:52:91:56:31:c2:21:61:a4:c9:77:09:cf:5e:
0b:d9:69:02:9a:cd:0a:73:f8:47:d0:97:91:d1:aa:cf:03:5b:
72:2a:24:0e:9b:7d:85:c8:66:2c:5f:b1:29:2f:5c:e3:39:d1:
e7:2a:98:04:54:b4:25:9d:e5:ee:56:ae:2c:e8:4d:2c:a0:41:
01:83:c0:d9:e1:89:03:fb:9c:bf:65:ff:4c:c5:b4:db:6c:a0:
2b:f1:b9:09:f6:f8:ab:26:50:ff:95:ba:00:5f:49:39:45:2e:
d4:01:a6:27:d2:8f:0c:d8:5e:e2:39:f4:9d:38:bd:e0:4a:e6:
f8:36:c1:8d:4f:b4:a6:de:f9:0a:44:7c:24:1c:77:c4:0c:65:
4d:d1:ce:5f:cb:db:67:e7:08:39:0a:fa:2c:cb:6a:78:69:88:
c1:33:2e:0b:ef:6d:17:b6:bd:a2:f5:e9:6e:12:e2:e5:ef:ad:
d6:53:ef:6d:eb:a1:49:11:54:2d:02:5b:72:25:cc:69:b2:b3:
55:c3:c6:25:a7:13:a0:08:68:1a:2d:aa:1c:6c:07:3d:11:3c:
cf:cc:4e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:04 2025 by rpki-client