Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa
File: 8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa (raw, json)
Hash identifier: D65xqbISaq9mc6cxJUWtnBtWCpDTOtOL0C8a5STk8u4=
Subject key identifier: 24:82:64:A1:1C:E6:B0:58:3B:C8:B3:33:C5:DA:A7:4A:A6:4D:39:BD
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F43285848C306CB6203B7E9EC725EE080
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa
Signing time: Mon 03 Feb 2025 16:43:12 +0000
ROA not before: Mon 03 Feb 2025 16:43:12 +0000
ROA not after: Sun 04 May 2025 15:43:12 +0000
asID: 16532
IP address blocks: 66.158.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c3:06:cb:62:03:b7:e9:ec:72:5e:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Feb 3 16:43:12 2025 GMT
Not After : May 4 15:43:12 2025 GMT
Subject: CN=6823a118-9c41-4c3c-b552-76f3de5476f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:4d:0a:45:33:c7:7f:c0:3b:d6:fa:92:a2:
c9:55:f4:07:25:0d:4c:7d:00:64:49:5a:41:69:a5:
ec:b7:5a:d5:f1:94:fc:0f:fc:e2:5c:c6:2b:23:55:
e9:49:5a:12:b2:eb:a9:89:59:75:99:d8:0b:0f:19:
04:47:1c:4e:68:78:23:dd:d2:3c:9a:96:19:5f:91:
cc:1f:82:5e:f2:6b:42:cb:11:d1:5d:77:3e:f2:1e:
9b:3e:4d:b4:69:47:2b:ef:d5:7e:50:9f:01:65:fd:
f4:ef:d4:a6:69:65:b1:9c:ae:67:cc:1f:e2:26:2a:
39:0e:b8:cf:8f:2a:0e:9f:12:d0:22:f1:fc:97:c5:
32:01:8b:86:86:b1:2b:38:79:ed:25:d3:bd:14:ac:
84:b4:95:81:e3:3e:bd:41:b9:70:0a:ae:ef:70:f1:
05:a8:a8:7c:89:6f:89:9e:7a:71:06:dc:ea:db:51:
85:56:0b:e1:9f:d4:e2:fe:ac:b7:2b:57:cb:a0:17:
23:44:cc:3d:22:de:83:2f:4a:57:4e:35:8f:4d:7c:
2c:b4:89:c9:77:2f:94:d3:9c:92:10:5f:f5:d0:dc:
98:02:af:f2:1d:46:14:c8:70:ff:78:05:53:f4:a4:
94:47:f1:62:d7:c1:cc:94:77:98:0a:e7:54:ba:cc:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:82:64:A1:1C:E6:B0:58:3B:C8:B3:33:C5:DA:A7:4A:A6:4D:39:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:96:dd:ca:1a:67:c6:97:90:14:62:cb:09:87:64:87:b6:04:
c3:d8:44:6b:55:29:80:30:04:86:52:8b:96:b8:73:0d:3f:82:
85:00:ab:b2:4c:94:a6:8e:5e:30:09:82:1e:db:e3:57:83:75:
5d:22:41:4a:c0:b3:cb:d2:1a:f0:b7:00:f1:13:43:f2:98:61:
65:69:8e:ef:0b:5f:1e:c4:4b:b9:7e:18:00:3a:1d:7a:5b:06:
9a:91:c1:25:f4:1e:77:f0:6d:cf:fc:f3:1a:85:fb:e0:ee:7a:
84:0c:8b:00:a0:63:66:8b:e8:07:b3:1f:9b:69:3a:8f:57:af:
a5:d1:1c:b8:fe:84:a6:e2:d1:4e:af:ce:47:f3:b8:67:cf:73:
79:df:49:4d:a6:ff:0c:d3:d4:9a:9e:1f:85:61:63:5e:a9:9b:
51:22:93:8d:68:d8:dc:6e:8d:c2:cf:14:d5:73:b3:39:e3:41:
4b:78:e4:9b:db:52:27:01:f8:90:f1:b3:d6:72:ea:99:27:66:
23:76:67:c6:41:13:e6:4b:a8:95:cf:b0:94:5a:be:78:dd:f1:
e4:4c:f3:38:3f:c6:4e:ed:d1:75:66:4e:54:07:39:67:0b:74:
d2:2c:1a:77:b4:ad:44:e4:f5:5e:93:8e:6e:62:bc:ef:7f:e9:
54:e5:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:04 2025 by rpki-client