Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/77c8666e-1f7c-3805-b327-71ffe0546566.roa
File: 77c8666e-1f7c-3805-b327-71ffe0546566.roa (raw, json)
Hash identifier: UcS53dRwPRB0TpfXwLg4GjNF/lirtspXjXLCO1PUckA=
Subject key identifier: 45:EC:0F:60:03:C3:0A:C1:2D:4A:32:B9:89:04:82:B9:9B:33:B9:BE
Certificate issuer: /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Certificate serial: 010D0C9F4328584924E1149175E4C2FDDE6436A0
Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/77c8666e-1f7c-3805-b327-71ffe0546566.roa
Signing time: Mon 10 Mar 2025 17:56:26 +0000
ROA not before: Mon 10 Mar 2025 17:56:26 +0000
ROA not after: Sun 08 Jun 2025 17:56:26 +0000
asID: 23483
IP address blocks: 66.244.41.0/24 maxlen: 24
66.244.44.0/24 maxlen: 24
66.244.45.0/24 maxlen: 24
2602:fd01:a40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:e1:14:91:75:e4:c2:fd:de:64:36:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Validity
Not Before: Mar 10 17:56:26 2025 GMT
Not After : Jun 8 17:56:26 2025 GMT
Subject: CN=f06e2589-470b-4882-b967-b4e8c98258a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:22:30:a8:a5:48:16:08:b1:7b:44:a3:7c:
f6:33:a1:de:16:7f:ae:d5:11:ad:24:ae:ae:b0:12:
0e:7d:f7:d8:b4:15:ad:b9:1b:ab:24:c3:91:db:f4:
f4:52:51:0d:c0:08:f6:3e:c6:1f:c8:fc:7c:11:b1:
e5:6d:40:8f:af:0b:4f:0d:9f:7a:ff:ca:a7:5c:ed:
df:02:c8:e2:9c:b3:cc:31:3c:7d:cd:92:9f:b9:c6:
d8:79:6e:aa:c4:3c:97:a8:76:22:96:c0:b0:a7:e2:
4c:07:d5:8f:c1:3c:db:f6:f2:aa:ba:b3:d0:ed:6e:
a8:b2:63:2a:52:19:47:89:ed:a8:cd:88:88:fd:c8:
d9:aa:c1:ea:35:3a:c6:a5:6b:18:87:ce:75:10:7d:
85:f8:f1:19:56:29:b3:ab:c2:70:25:82:9f:dc:35:
f3:2c:ef:b7:35:7c:e4:0b:75:c8:63:3d:fa:4b:f0:
08:67:60:9e:43:81:cf:b4:35:94:a1:7f:3f:db:07:
0f:45:ad:44:5b:07:0e:f7:70:14:41:71:9c:f5:e7:
7d:04:38:f4:c8:15:4d:d1:37:38:21:83:b4:fd:0c:
fc:99:33:e7:2a:5d:63:84:8a:c0:ec:fb:79:15:d0:
5b:3f:d7:6f:79:0f:36:28:2b:97:60:4c:8b:ec:ff:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:0F:60:03:C3:0A:C1:2D:4A:32:B9:89:04:82:B9:9B:33:B9:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/77c8666e-1f7c-3805-b327-71ffe0546566.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl
X509v3 Authority Key Identifier:
keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.244.41.0/24
66.244.44.0/23
IPv6:
2602:fd01:a40::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:8b:b7:b7:0e:cc:b4:27:6d:4a:24:4e:c1:dd:04:19:c3:e5:
7d:94:6b:b1:c9:4b:64:69:e9:e9:83:94:07:b0:29:55:c4:60:
22:53:69:ac:b5:b9:3c:3d:a0:7b:2a:0f:33:17:46:73:ed:47:
c1:7a:49:e8:27:7d:6f:a2:00:76:7a:ce:00:e6:b3:44:6e:4d:
9f:d8:36:a0:bd:81:e9:0b:32:2f:f1:11:3a:18:54:0c:51:ac:
c4:7a:e3:99:ff:83:e2:b3:08:d0:a3:7b:81:f8:35:0d:ba:b6:
a5:26:b8:4d:06:45:2e:75:1d:ac:31:06:d7:03:33:bd:c2:9e:
2a:23:87:54:88:93:3f:91:14:a7:72:82:64:c6:3e:a1:04:87:
c3:ef:d1:99:49:7e:30:69:23:4c:64:26:f5:60:b6:fb:a2:bc:
25:2f:69:d2:75:c7:f0:b4:d6:1a:49:72:b6:1c:9c:34:d8:8a:
83:a3:66:1a:cd:72:b3:48:25:e6:71:13:3f:18:b4:a6:6f:1d:
82:d3:61:d0:ce:74:e2:a8:02:49:24:e3:63:83:73:a6:75:fa:
c9:e4:b7:e9:16:b6:86:5b:68:58:d2:9e:f9:d7:ce:38:45:90:
28:b2:d8:dc:87:d0:dd:59:de:de:f1:fa:ae:1a:91:4a:7b:10:
51:11:0a:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:48:44 2025 by rpki-client