Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/f6a4bd98-41e5-3d8a-aa2c-cdbf360cd7cc.roa
File: f6a4bd98-41e5-3d8a-aa2c-cdbf360cd7cc.roa (raw, json)
Hash identifier: beL6FzogV2s/DTVFkJBR7/3HYjLJrmOd23RjuzT0TA4=
Subject key identifier: 31:FA:A2:63:D7:DE:89:B9:9C:0C:5A:FB:76:37:1A:5D:D3:7D:8F:47
Certificate issuer: /CN=3505b615-7597-4cdc-9539-0a0a5c49dee8
Certificate serial: 010D0C9F432858492E13B71F5DDEC3B5BA7B0900
Authority key identifier: 31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/f6a4bd98-41e5-3d8a-aa2c-cdbf360cd7cc.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 32097
IP address blocks: 66.85.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:b7:1f:5d:de:c3:b5:ba:7b:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3505b615-7597-4cdc-9539-0a0a5c49dee8
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=102b4c4a-5ac1-41b2-921a-98362beb82d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:84:f4:b4:a7:58:7d:b2:8e:60:53:3d:e1:
0b:49:52:c0:48:92:32:42:ee:c8:dd:af:f1:33:3f:
e3:03:f7:2b:c9:c5:24:27:c7:d5:3b:ee:56:af:6a:
f8:d9:f8:d3:6d:05:5d:2a:a0:fb:ef:82:3b:22:b5:
39:8c:92:77:da:6b:9c:a1:ac:95:29:3e:f3:4f:3b:
98:09:5d:ab:df:bd:1c:67:3c:97:4e:bf:8f:9e:dd:
90:40:e7:b2:3c:57:7d:e5:ad:6a:2d:19:85:ce:e7:
ab:6b:c5:d2:bc:52:08:44:11:bd:0c:66:37:ab:1e:
5a:35:2a:dd:8e:a4:5f:98:e3:27:f1:15:df:73:76:
14:7d:88:2a:88:23:f2:4f:df:35:fc:36:d6:80:35:
1e:42:50:2e:df:a7:85:2b:78:9b:94:df:3d:31:f6:
14:54:5b:f4:62:59:2d:ec:38:51:b9:5d:7c:3a:c3:
ef:3f:9f:ad:d9:5b:25:f0:bf:72:0f:a0:3e:91:eb:
ec:0b:b0:5a:d7:57:36:21:26:52:92:07:f3:21:66:
1d:1b:cd:06:bc:61:38:14:a2:7f:47:60:4a:c2:da:
73:de:ee:84:13:8d:8b:79:29:08:6e:e7:6c:d6:6a:
a7:31:c7:2a:31:12:32:db:83:a4:e8:66:b4:89:c5:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:A2:63:D7:DE:89:B9:9C:0C:5A:FB:76:37:1A:5D:D3:7D:8F:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/f6a4bd98-41e5-3d8a-aa2c-cdbf360cd7cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.crl
X509v3 Authority Key Identifier:
keyid:31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:26:25:0c:3e:49:0b:9a:99:67:e7:17:f7:e1:26:2a:6b:ea:
b0:ee:e5:bb:9c:dc:c8:a5:62:68:0d:c4:79:26:cf:75:6c:95:
be:3b:89:ce:08:3f:5a:89:93:41:0b:61:69:83:40:5d:e0:71:
0b:ed:2f:f2:bd:32:1f:4a:b2:07:7c:6e:8c:12:5a:37:ed:63:
3c:04:d4:69:a8:64:e8:87:e9:f9:c5:df:e8:b9:58:19:45:9f:
55:d6:ed:1c:0b:e0:c8:33:cc:e7:66:51:f6:b7:a3:90:0f:ac:
6b:57:8d:0c:61:93:28:1e:fb:04:ce:d4:35:2f:cd:36:31:d1:
ae:e5:37:25:f2:24:7f:b2:c2:85:e5:74:45:ff:e1:46:af:d6:
b3:a8:f4:83:f7:2c:bc:45:83:54:70:ed:6a:27:94:c4:45:f3:
b7:f8:b9:37:bd:8d:91:9f:ae:05:5a:0d:e7:cf:bd:29:8b:06:
12:aa:9f:c2:c7:d3:d1:66:b5:f4:bc:d1:a3:78:8f:e2:4a:73:
c1:fa:74:a8:1c:bc:bf:2d:99:8a:2a:59:bc:c9:49:bb:24:65:
ff:a3:b3:ea:9c:05:27:7f:9a:cb:c2:be:94:cd:3a:6c:49:3f:
c1:23:03:8a:6b:12:30:1b:81:80:16:eb:4f:58:05:c9:42:88:
5b:40:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:38:31 2025 by rpki-client