Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/bdb594be-25b2-3939-93cb-470fe9e560e4.roa
File: bdb594be-25b2-3939-93cb-470fe9e560e4.roa (raw, json)
Hash identifier: 32njBspgbpuzwulZ9zC0/ldPDOTGHCn1h146fGBiG44=
Subject key identifier: 84:64:7D:93:11:00:A2:2C:D5:D2:49:10:A6:6F:BF:21:37:B7:F0:35
Certificate issuer: /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Certificate serial: 010D0C9F4328584909E697ACE34382089DD8F6E0
Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/bdb594be-25b2-3939-93cb-470fe9e560e4.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 23483
IP address blocks: 66.244.0.0/20 maxlen: 20
66.244.16.0/20 maxlen: 20
66.244.32.0/20 maxlen: 20
66.244.48.0/20 maxlen: 20
2602:fd01::/38 maxlen: 38
2602:fd01:400::/38 maxlen: 38
2602:fd01:800::/38 maxlen: 38
2602:fd01:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:97:ac:e3:43:82:08:9d:d8:f6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=cd5516e6-4648-4446-b906-8599090d512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:62:6c:e1:a4:c4:d6:09:68:4b:11:9e:f0:
c6:1d:73:ab:1a:03:58:48:57:88:32:79:d0:2b:7c:
63:cc:06:cf:7d:7e:fe:b3:28:34:9a:2f:c8:b0:ec:
84:c6:31:b7:43:ff:d1:b7:83:e6:75:cd:67:c8:74:
7f:20:91:f4:a3:98:67:80:36:e3:63:4e:96:a1:01:
e1:0a:d2:7e:dd:12:fa:58:70:c5:11:f8:7c:cb:f1:
77:03:42:d2:dd:5a:59:a4:d1:ec:26:12:e5:01:8d:
07:d6:ff:74:54:ac:71:61:67:ea:58:e2:ae:89:ea:
3f:59:0e:c5:f4:79:0f:2a:08:2f:87:11:cf:80:b4:
ee:cf:7b:27:de:78:9a:54:95:e8:27:59:dd:66:cc:
f2:44:8b:61:62:a8:f6:63:93:68:55:c6:83:2c:22:
ae:4f:e2:44:e7:0f:59:91:66:d4:f2:47:52:cf:42:
d1:25:95:39:be:21:cd:dd:8e:a4:7d:6b:5a:02:71:
c7:f4:f2:12:6f:5f:23:15:c4:af:06:fd:36:a8:a9:
b6:f0:f3:99:1a:d7:92:98:a0:d4:bd:2f:c6:57:2b:
84:9d:a2:82:a7:42:0c:77:b1:0b:dd:de:28:0c:42:
37:c1:f2:39:4b:63:83:f5:4d:61:d9:a9:3b:b3:86:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:7D:93:11:00:A2:2C:D5:D2:49:10:A6:6F:BF:21:37:B7:F0:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/bdb594be-25b2-3939-93cb-470fe9e560e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl
X509v3 Authority Key Identifier:
keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.244.0.0/18
IPv6:
2602:fd01::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a6:f3:dd:c6:75:d2:e3:ca:14:2f:76:e2:a2:ac:8d:af:da:
c3:50:2f:6f:48:ab:a6:62:0f:32:a9:2a:57:09:66:de:a3:e2:
71:00:d1:f9:c0:6d:7e:36:1a:a1:14:cb:3e:d4:32:64:ac:80:
20:02:da:fa:79:d2:0f:90:5e:f7:7f:54:66:72:56:7a:94:1f:
6b:58:d4:9d:78:77:f7:4d:84:dc:25:7b:86:98:95:86:5f:1a:
6c:c8:e0:5a:a8:c5:ca:67:4b:2b:f1:da:d0:af:85:ed:34:7b:
7c:8f:10:69:2d:e5:16:43:8f:53:a2:d1:a6:03:3a:05:d7:e5:
48:fa:21:a7:3e:76:63:3c:8a:b8:32:e2:96:c3:e1:bf:2c:c2:
2e:a4:24:dc:e5:1b:38:30:0c:39:f4:ad:03:a5:be:b6:32:f1:
90:e0:e0:89:7b:22:59:3c:83:6b:79:af:1f:f8:e4:39:15:92:
e7:6c:b0:3a:97:cc:2f:4a:96:62:3d:c8:2f:a8:60:95:96:2d:
5e:cc:bf:6e:cb:34:67:70:b1:12:84:45:b0:e0:5d:89:6b:e4:
74:26:5a:d4:34:15:89:ea:7f:d2:a9:21:73:89:4e:56:e0:cb:
b7:4c:2b:0d:94:77:ef:9b:9b:a3:5f:1b:64:24:0e:d9:87:05:
8c:4a:ed:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:01:11 2025 by rpki-client