Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa
File: fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa (raw, json)
Hash identifier: yG+GChzLDmQz6X/gOjpjTbZMpVTOfKYOarWy7+4sS34=
Subject key identifier: 60:3C:14:5F:3C:43:FE:3D:65:74:89:DF:40:A5:C2:42:E3:D8:CA:31
Certificate issuer: /CN=ec9034a3-96a4-4b09-a2c9-7f75c1740d36
Certificate serial: 010D0C9F43285848B6261ED4FBF66DFAFDD0BC00
Authority key identifier: D7:BE:84:9F:39:54:D9:00:21:0C:4F:C0:FD:CA:24:A1:7D:6E:47:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 27235
IP address blocks: 66.220.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:1e:d4:fb:f6:6d:fa:fd:d0:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9034a3-96a4-4b09-a2c9-7f75c1740d36
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=31d36cc1-92c5-419a-a072-99a0b61c43f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:fc:10:ae:59:9c:f8:37:14:ee:c6:4e:b4:
cc:38:81:6e:70:e2:54:4d:fe:3e:c3:99:2b:0b:0e:
cc:f9:3d:5d:27:1b:61:25:9f:eb:4e:75:4d:a3:b0:
1f:6c:c5:2e:84:22:c2:60:fa:2d:c8:76:d8:01:27:
ba:7d:9a:08:82:c0:a4:1d:f5:54:e7:0a:72:89:7a:
16:4a:1c:b8:f6:5e:f8:87:36:1f:2c:98:62:34:68:
d5:20:87:78:4b:e4:24:0d:f6:ff:c3:d8:3c:6f:78:
a1:c7:e6:0d:04:91:16:53:76:b1:78:c0:77:99:83:
88:8b:2e:e1:45:10:f6:4c:86:84:e9:ae:45:65:84:
52:db:07:fa:b4:0b:f6:ce:b7:bf:82:38:7c:bf:b3:
ce:39:87:de:44:a1:e7:d5:cb:7b:33:25:22:90:f4:
3b:75:9e:4b:fe:25:ea:72:2b:d4:2d:ea:10:65:20:
ee:c9:ed:eb:13:e8:68:46:de:66:13:c9:ec:8a:3a:
8c:70:ac:f3:da:c7:b8:0e:ec:42:90:32:3b:07:c5:
32:62:0c:6c:09:0f:4a:9b:45:ba:bd:69:62:bf:2c:
9f:bc:8c:e9:ee:29:b2:20:5f:2b:c8:90:72:f4:9c:
37:0a:09:55:9d:dc:3a:64:fa:8c:fc:39:4a:6e:51:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3C:14:5F:3C:43:FE:3D:65:74:89:DF:40:A5:C2:42:E3:D8:CA:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.crl
X509v3 Authority Key Identifier:
keyid:D7:BE:84:9F:39:54:D9:00:21:0C:4F:C0:FD:CA:24:A1:7D:6E:47:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.cer
sbgp-ipAddrBlock: critical
IPv4:
66.220.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b2:2d:66:c0:0f:e2:d0:1b:f8:c6:e1:c8:fa:bc:2c:b9:2d:
ea:f1:c8:76:77:7e:c0:c4:94:73:22:1c:79:19:90:86:60:ab:
75:49:17:ec:ea:78:52:25:8a:80:4c:ff:bc:76:83:25:ff:b7:
9d:ab:ab:b4:36:7b:e2:dc:61:82:7d:08:4a:d9:13:c7:44:cf:
b1:fa:34:2c:6b:3e:c1:c0:a7:b0:60:b6:16:3a:c9:b4:df:16:
cf:08:c7:3a:17:65:ae:04:3f:e3:89:33:aa:b3:3a:b1:a8:0f:
e0:12:19:bb:6f:0e:b1:93:5a:b4:5f:95:87:1d:c3:0c:77:ac:
58:8a:ec:72:09:43:ae:76:78:45:e7:21:38:05:2e:53:a7:e6:
a4:83:6f:d3:41:4a:7a:88:33:32:12:3c:2e:02:7c:d2:ee:3d:
15:f3:39:be:b2:f3:3b:c6:63:c5:1d:31:83:a4:56:d4:9e:aa:
c8:3d:47:4d:7d:de:9a:29:31:4f:2c:06:20:8e:99:93:26:77:
31:b0:7a:ab:2a:1d:5d:ef:8f:93:2a:1e:e1:7b:2f:9e:74:c0:
18:32:ab:5e:5d:b7:78:b1:02:c4:4c:2b:dc:5d:bb:6c:b6:96:
c5:b9:a1:e9:bb:e9:f7:ed:a8:47:62:7a:80:78:17:97:48:da:
98:1c:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:53 2025 by rpki-client