Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
File: 25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa (raw, json)
Hash identifier: jCTexrmytjHJudZvKlgb48WW5izqIFZJaySB3I9dVH4=
Subject key identifier: 41:C4:E4:C4:85:F0:FB:9A:AB:92:1B:90:1F:61:5C:79:A8:A2:05:D6
Certificate issuer: /CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
Certificate serial: 010D0C9F432858492883596CD3D982E64170E160
Authority key identifier: 8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
Signing time: Wed 12 Mar 2025 01:10:49 +0000
ROA not before: Wed 12 Mar 2025 01:10:49 +0000
ROA not after: Tue 10 Jun 2025 01:10:49 +0000
asID: 32083
IP address blocks: 66.158.192.0/18 maxlen: 24
173.46.160.0/19 maxlen: 24
208.111.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:83:59:6c:d3:d9:82:e6:41:70:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
Validity
Not Before: Mar 12 01:10:49 2025 GMT
Not After : Jun 10 01:10:49 2025 GMT
Subject: CN=a8601d85-dd09-4836-b838-c7d3a3a954da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:8a:16:38:15:d3:db:b2:8e:6b:46:42:c6:
4e:2f:ca:9d:2a:5a:01:35:3e:1f:e3:ed:3d:4d:49:
67:08:ec:80:ce:ef:dc:79:d5:0a:b1:9e:24:52:82:
1a:da:f5:db:3f:d8:b0:8f:7a:9a:a7:4b:39:f2:d1:
9e:26:cd:91:36:78:05:e3:31:51:b6:2d:b1:21:1d:
1a:bb:f5:b1:2b:32:fe:97:69:73:39:af:f9:82:9f:
03:d6:5e:a2:c9:3d:91:85:dd:14:1e:7e:48:6f:06:
d3:a4:65:b4:a1:e0:36:96:b2:de:fe:a1:bd:b5:fd:
13:80:11:d1:00:37:3a:8f:e9:1c:23:8b:fe:43:41:
07:a3:6a:23:7c:dd:eb:9a:4e:50:d2:be:da:63:21:
ce:3d:19:c7:c6:af:33:69:41:f9:ca:79:97:0f:d2:
a5:f6:35:03:8f:3d:4f:9e:58:2c:ec:e6:33:f6:75:
e4:8d:38:b0:c7:e4:c8:48:c7:52:9f:dc:7d:f5:f1:
e1:83:e0:92:04:43:70:07:23:35:a1:4e:34:b4:36:
84:12:d3:7a:bd:6e:83:03:a9:47:f3:71:69:9e:17:
3b:29:6e:85:f5:2c:24:c5:99:45:18:dd:62:3f:0a:
18:d4:f5:b9:36:c2:15:7c:a0:9f:1a:57:f6:38:36:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:E4:C4:85:F0:FB:9A:AB:92:1B:90:1F:61:5C:79:A8:A2:05:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl
X509v3 Authority Key Identifier:
keyid:8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.192.0/18
173.46.160.0/19
208.111.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:3a:84:20:46:34:ba:4e:62:8d:6b:77:54:fe:35:0d:01:4d:
e7:78:0b:04:0c:4b:4a:d2:46:c7:33:3a:82:1c:34:da:18:e3:
cf:71:e4:db:5d:34:67:9f:2d:4d:d2:9a:7c:b4:95:cf:e4:b4:
f8:6c:76:3a:68:02:67:92:50:37:f6:64:6b:dc:8b:c5:92:17:
2a:6c:27:c6:1b:e3:8d:ea:5d:0b:e9:f8:d8:bb:9d:de:a7:4d:
34:53:7a:ee:89:65:ec:4e:48:1f:00:15:f0:bc:00:b0:fb:c6:
1d:b4:45:f6:77:b7:d1:f8:30:8e:a1:47:18:f2:db:83:a0:68:
9c:9d:47:fe:10:3d:6e:14:fa:3c:b7:4b:b3:11:8a:19:05:f8:
d8:8c:84:13:17:24:37:fc:b8:6e:2a:96:93:0a:c7:9d:f8:0a:
60:bf:a0:a2:4d:dc:a1:e5:af:a4:e1:a3:8e:80:12:c7:f7:35:
68:25:7a:4b:a2:71:76:c9:2f:16:1d:09:5b:e1:12:3a:02:f8:
bf:20:4a:4e:f1:84:4b:d6:d0:67:00:9c:71:19:fa:22:6a:c8:
56:5b:ea:2b:d9:c2:86:6e:d8:9a:4c:c8:db:92:d0:3a:47:39:
59:ff:0b:0c:0a:92:f5:6f:52:38:03:89:40:4d:30:c7:82:e9:
a4:36:25:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:43:04 2025 by rpki-client