Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/142bc1ae-6580-3084-88a2-46ad8017df2d.roa
File: 142bc1ae-6580-3084-88a2-46ad8017df2d.roa (raw, json)
Hash identifier: qWEWG+2Ns+0D7bZdzzsCI2uEojDlsyGmHp74+Av48lg=
Subject key identifier: 7B:11:58:E7:0B:74:D7:35:22:FB:10:C9:9D:13:5F:DE:DD:F6:38:61
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858494B64017312B8C87EF1CDF9C0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/142bc1ae-6580-3084-88a2-46ad8017df2d.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 13576
IP address blocks: 66.115.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:01:73:12:b8:c8:7e:f1:cd:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=202f7fc9-e2cc-427b-8970-95d6d1df2f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:80:03:d3:50:52:f5:a9:63:64:e4:8b:bc:73:
03:90:b9:e5:e3:2d:af:df:48:e5:f9:20:36:12:18:
d7:fc:27:18:f8:1e:83:5f:ca:bb:e8:a9:9f:ac:fb:
2d:aa:bc:fc:14:2f:b5:2e:22:a5:21:4e:b2:4d:00:
b8:2f:7d:8a:f7:a6:47:bd:a3:a6:9a:08:ee:9d:61:
de:42:c0:3b:11:82:9f:48:95:f6:25:b9:06:9f:1d:
aa:f7:68:b5:4c:0c:ab:d2:69:88:70:34:5e:16:1c:
0e:53:6a:77:ba:8d:f0:a8:17:b9:8f:ab:be:62:1e:
e8:85:89:79:2c:f6:9c:75:c0:86:3c:b8:ae:e2:9d:
09:ce:4a:7e:f2:3c:cf:85:e4:69:8c:db:41:11:cd:
6c:25:0a:72:a0:73:28:4a:0e:1c:d2:4d:5d:25:e4:
de:cb:78:4f:76:8e:b5:fd:f0:e5:f4:7a:65:1d:a2:
17:a8:71:b2:e4:97:57:e8:97:6c:6d:07:77:f8:db:
38:8e:6d:e9:0d:5e:52:26:a5:02:cd:c5:c7:14:50:
9d:99:18:41:3f:0c:8c:7c:af:32:fb:87:20:0b:f0:
aa:df:9b:24:58:0b:56:71:8d:fc:6e:d8:95:e1:61:
48:8b:79:97:e9:e7:b9:72:e7:4b:df:f1:10:dc:06:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:58:E7:0B:74:D7:35:22:FB:10:C9:9D:13:5F:DE:DD:F6:38:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/142bc1ae-6580-3084-88a2-46ad8017df2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:3c:02:86:9c:b1:7d:9a:ca:83:29:de:c6:0d:3e:36:84:06:
ff:26:0c:03:1f:ca:93:cd:1f:4b:17:e7:2d:08:57:ce:d9:9e:
56:17:9b:75:b8:04:57:43:90:73:4c:27:59:59:f8:45:5f:5a:
04:79:92:f2:42:a1:72:e4:ed:c1:d6:2f:b9:f6:65:25:38:99:
39:5f:f9:d4:6f:43:35:77:b4:09:f1:bc:ee:d8:16:52:98:06:
8e:6a:6e:75:af:0f:4e:cb:84:ac:61:d1:03:38:a0:4c:78:df:
09:a6:9b:e1:c2:85:57:4f:43:23:91:1f:bf:11:99:d0:be:46:
96:af:2c:8f:21:a2:3b:ca:4c:44:00:28:3b:bd:09:67:f2:ca:
3f:5b:4e:95:45:57:ec:36:aa:a3:a4:70:ea:61:01:3b:5c:3a:
86:f7:39:8b:1c:11:c6:42:87:15:78:62:86:36:0d:ef:7b:35:
d8:72:67:60:18:0b:29:90:5f:58:af:49:fa:e0:a3:cc:81:16:
3c:bb:6a:59:3f:ba:1e:1d:c7:a2:4c:c4:1b:86:ca:f4:e2:46:
50:a8:8d:4a:30:07:84:61:a5:5a:07:95:83:8a:ae:c3:bd:e5:
09:34:9e:e4:f8:7b:f9:95:66:21:86:4a:9c:8c:7f:06:a8:56:
ce:b1:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:20 2025 by rpki-client