Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/a7109183-1584-33a4-afd9-201d6e6f0710.roa
File: a7109183-1584-33a4-afd9-201d6e6f0710.roa (raw, json)
Hash identifier: 4pe1+vFfLUV4TPQe1rNX2XUOfxjiy3pIxSlUc77zczs=
Subject key identifier: C2:81:07:88:63:DD:52:C1:BA:A8:69:C6:1F:39:72:47:DD:D2:F4:B8
Certificate issuer: /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Certificate serial: 010D0C9F43285848960B4CC9B722064EE0030440
Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/a7109183-1584-33a4-afd9-201d6e6f0710.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 23483
IP address blocks: 66.244.0.0/18 maxlen: 19
66.244.16.0/24 maxlen: 24
66.244.63.0/24 maxlen: 24
2602:fd01::/36 maxlen: 37
2602:fd01::/48 maxlen: 48
2602:fd01:40::/48 maxlen: 48
2602:fd01:fc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:4c:c9:b7:22:06:4e:e0:03:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=f56bdaea-0109-44ac-980c-c1aca9a233a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:b3:43:ef:18:71:7a:20:07:65:3e:3a:6f:
9d:37:f7:59:72:e4:8d:f9:bc:99:8f:69:09:f5:f8:
f5:20:a5:15:83:9e:d9:d1:a5:3a:57:8e:58:14:db:
02:9f:20:6c:c4:c3:dd:30:79:a5:68:1f:bc:bb:b8:
8b:25:9f:99:a9:d6:3e:30:be:ae:61:b4:10:64:cf:
03:5c:01:3c:8c:c8:f9:4c:33:31:ef:e2:4c:55:d2:
6e:48:34:44:c1:b7:71:b1:d5:26:03:9a:e6:48:93:
96:c0:1c:f2:01:9e:3f:95:34:a4:b7:a2:36:9a:3f:
f5:30:2e:c7:09:52:03:a5:2c:0d:de:de:7f:74:68:
00:dd:dd:54:72:ab:f4:0d:cf:c8:50:5a:a8:f7:0c:
99:b1:c6:9c:fb:93:b7:ee:ac:cb:d1:bb:bb:61:cc:
9c:96:51:13:53:67:65:30:ad:2a:32:08:c0:24:ff:
62:d2:48:a9:37:48:53:ce:5d:df:de:24:41:fd:28:
35:3b:68:bd:d8:b3:9a:51:2d:fe:cf:6d:99:90:7b:
71:82:23:84:60:bf:34:95:a3:50:df:27:42:ca:39:
b9:c7:18:1c:3c:6f:eb:ba:ae:75:1a:da:e2:99:9e:
84:83:81:ad:7b:c2:ae:54:60:fa:62:5b:b7:0f:81:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:07:88:63:DD:52:C1:BA:A8:69:C6:1F:39:72:47:DD:D2:F4:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/a7109183-1584-33a4-afd9-201d6e6f0710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl
X509v3 Authority Key Identifier:
keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.244.0.0/18
IPv6:
2602:fd01::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:84:2d:aa:50:0b:51:c0:6c:62:3d:da:93:be:37:d9:b8:15:
f6:c6:a0:c1:85:ee:20:29:fb:6d:1f:f9:0b:af:eb:64:d3:de:
2a:eb:3b:b4:df:d0:be:fc:96:77:13:aa:46:10:13:d6:13:90:
af:71:f2:80:30:79:df:29:8d:e3:02:dc:3a:6a:c1:22:5d:16:
5e:fb:90:ab:c6:69:03:2f:6d:07:e5:0c:9a:27:a0:90:fd:03:
bf:f9:2b:33:4e:d3:b0:cb:64:45:47:98:f8:b3:c2:14:ee:40:
be:4c:f6:0d:b6:50:60:8d:07:50:3b:ea:be:46:dc:73:33:28:
46:dd:a4:c1:f9:a6:6a:ec:a2:e5:35:03:4e:54:9e:3c:29:11:
0a:60:04:c7:16:4b:9f:08:06:74:c4:99:fc:3a:40:98:c5:d2:
85:56:e4:61:e5:ac:b3:04:b0:2a:b6:76:2b:49:5a:b8:46:0e:
b9:b7:6f:bc:6c:e3:22:f1:92:4d:0c:33:41:2f:f4:d9:35:a0:
29:d9:4e:01:74:8e:8f:8d:e6:2c:c6:98:1c:95:ff:12:54:38:
be:df:f2:e9:a4:77:fa:c5:58:28:36:3d:ed:61:24:48:b0:73:
5c:74:ca:05:6a:e6:39:56:e6:ab:79:92:8d:ab:18:91:23:95:
9a:02:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:41 2025 by rpki-client