Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
File: 3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa (raw, json)
Hash identifier: NKW3z9UlL49kdHy1CWEdxoqiyrcDzFQwnxcH31RP9iE=
Subject key identifier: 12:8E:C6:4C:7B:E0:9D:92:A9:E9:0F:EE:BC:7C:3C:59:F0:B0:0C:76
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F43285848B833287B09091DAA820AD100
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
Signing time: Thu 30 Jan 2025 19:38:42 +0000
ROA not before: Thu 30 Jan 2025 19:38:42 +0000
ROA not after: Wed 30 Apr 2025 18:38:42 +0000
asID: 1403
IP address blocks: 66.158.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:33:28:7b:09:09:1d:aa:82:0a:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Jan 30 19:38:42 2025 GMT
Not After : Apr 30 18:38:42 2025 GMT
Subject: CN=aada53df-7578-4d30-8384-ffd455da2497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:e2:a6:88:8f:35:18:2a:b2:58:d1:0a:1c:
85:be:12:2e:c4:1c:cc:17:30:f4:94:23:42:f7:c8:
46:7a:6c:65:87:7d:ae:b3:ed:b2:13:6b:8d:ea:be:
45:b4:20:de:6a:fe:62:4e:89:d1:46:ca:e3:03:1d:
63:64:39:06:00:e2:35:21:de:96:4a:0a:76:9e:c3:
28:49:91:ba:00:26:e4:0c:23:cb:84:05:1d:01:dc:
07:32:6c:fd:29:7d:5e:53:c6:2b:34:ec:43:1b:0d:
29:64:8c:e4:31:ad:d5:83:59:3e:5d:e4:54:51:f9:
56:08:2b:66:9c:20:51:0f:86:57:bf:51:6e:af:48:
44:bf:60:0d:6a:d0:51:0a:8d:e7:02:2f:d1:ec:6f:
8a:ca:a1:ad:63:d4:c9:95:0b:79:6f:72:6c:ac:27:
e6:3f:f8:b2:a0:f0:b9:01:37:f4:15:63:02:ff:bf:
e0:9c:2c:1c:2c:14:0c:35:cc:01:bc:d6:ad:e0:78:
d4:55:13:41:4d:9c:82:94:f5:cf:f6:e8:3e:9f:38:
24:97:05:d8:d0:e4:ed:1a:8d:1e:34:ed:94:e3:91:
9b:12:c9:60:3e:79:00:79:0f:24:59:33:78:bd:aa:
0d:59:a4:e5:42:99:b7:34:60:c6:4b:bf:1c:0d:d8:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8E:C6:4C:7B:E0:9D:92:A9:E9:0F:EE:BC:7C:3C:59:F0:B0:0C:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:2e:87:e9:f0:c9:e6:38:11:f5:35:03:d9:7d:cf:37:1f:f1:
ec:31:6d:3a:38:dd:07:63:d9:6e:57:dd:05:f4:4d:60:bd:ea:
3d:d9:5c:8e:f2:4c:33:70:b5:5c:9c:c6:b5:70:f0:61:56:66:
9b:aa:12:09:0f:7b:1d:d9:6f:a0:cc:17:08:59:4d:f3:8f:df:
8f:7f:1f:ac:6e:81:95:85:3d:8d:12:c2:2b:b8:50:7d:18:74:
d9:a3:a9:28:11:fa:a5:86:5e:fd:9f:2b:51:68:24:d4:eb:ce:
e8:e8:33:c8:8c:5c:b3:1d:e2:bd:c0:f3:34:96:ad:31:8b:3e:
48:81:2d:ba:5d:26:f5:2e:d8:e1:cd:7e:a9:15:d1:f6:3d:63:
4a:93:84:e4:8a:03:83:06:ba:1b:42:76:e0:c9:bf:03:e1:b0:
f7:aa:b7:84:5b:a5:a3:2c:cc:8b:77:54:d6:35:6a:a5:c3:23:
1a:46:cf:8e:ec:82:98:e1:61:11:0e:a4:64:1f:ed:33:6e:8f:
93:36:0a:15:31:6a:67:bb:69:54:e6:28:59:14:14:a5:12:9a:
94:3f:f1:7b:fe:6e:af:59:1b:df:e9:35:95:ed:f9:97:3d:5c:
28:a7:37:ee:b1:d4:a1:27:e6:43:7d:77:48:af:cf:32:5d:25:
cf:e9:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:41 2025 by rpki-client