Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa
File: 932614f9-93ff-322c-895f-a209b9bdba38.roa (raw, json)
Hash identifier: GLQDjhGdLP4ATSxIrn9iRxkSCMkaN3iKsKkWCpkc9pk=
Subject key identifier: C1:B5:FA:F6:3B:A0:4B:6A:4D:BD:9B:17:DC:73:2E:B3:80:18:A7:3A
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858490021622454A150654890FA80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 20014
IP address blocks: 66.115.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:62:24:54:a1:50:65:48:90:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=246ab6a4-8de1-4a82-bdb6-1c89e46cf07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f3:48:01:b9:fb:f5:dd:8b:45:6c:e5:99:19:
4c:d1:6e:4d:ff:97:0c:1d:70:97:0b:3a:8b:96:3f:
77:5b:85:92:1b:14:2e:a7:d2:b1:e0:91:c0:42:2c:
92:33:e7:35:21:b3:cf:0a:0f:5e:73:5d:71:fd:e0:
5b:aa:e9:f6:04:d8:ac:47:b7:d7:a3:e5:7c:7d:57:
7d:98:60:70:a5:93:0f:74:9b:13:55:1c:11:df:48:
c3:67:3e:56:d1:31:b0:a0:38:c6:16:57:ed:c7:6f:
3f:f7:c9:8e:d1:d5:3c:ca:61:83:12:22:aa:07:50:
1c:19:21:07:17:31:e5:8e:83:57:95:c0:44:88:40:
ae:04:12:40:d6:a0:6c:69:23:20:97:cd:22:08:44:
f4:00:bf:4e:86:eb:72:0d:8f:f0:cb:2e:20:12:53:
12:e2:53:63:b3:ec:bb:1b:61:b7:a3:93:69:53:ea:
f7:90:0d:85:0f:01:64:0e:ad:0b:95:0e:52:66:9b:
78:72:65:81:64:3e:a3:2e:9a:cf:c2:f0:e5:cc:31:
70:35:c5:64:c5:76:07:35:3f:a7:b6:25:e9:9b:cc:
7e:06:f3:82:63:ec:d1:cb:0f:67:3d:e0:c5:33:22:
94:b4:20:05:de:27:a2:d2:32:73:1c:20:b3:a6:c4:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B5:FA:F6:3B:A0:4B:6A:4D:BD:9B:17:DC:73:2E:B3:80:18:A7:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:38:bc:c1:22:0b:9d:7f:a3:b7:56:25:40:93:d2:58:d3:3e:
ea:14:ef:27:9c:fe:4b:6c:60:9a:45:74:bb:20:e2:0a:31:34:
c0:02:3f:67:38:b7:6c:8a:d7:ae:e9:09:73:8a:b8:68:04:d0:
32:70:1e:1b:67:83:c9:9f:10:96:c9:84:80:49:59:95:cb:cd:
2f:0c:c6:d4:03:cc:33:ed:00:63:86:2b:81:f7:6e:6e:e2:b0:
2f:4c:f5:86:5d:d7:0f:85:b4:f9:1d:63:88:7b:85:52:e0:23:
2f:a9:f8:12:43:88:df:fc:db:a5:96:1e:8c:70:2e:67:1c:6a:
d9:30:15:53:c3:32:25:90:d8:98:e7:ae:12:74:44:e7:a9:ee:
89:c7:26:1a:9b:5b:6b:cb:c7:61:1b:9f:e6:90:b4:20:89:81:
2a:67:8f:14:7d:06:10:d8:46:28:c2:c9:a8:f2:74:54:2c:41:
54:f4:0f:4d:d7:64:37:a7:17:2b:71:65:04:ac:a0:97:28:af:
2c:db:26:e5:df:c3:01:ca:ec:38:c2:2c:ee:9b:b2:24:50:f1:
53:52:86:49:89:30:59:ad:4b:38:8c:2e:65:1f:20:9c:a6:2d:
ce:d4:73:ae:8f:54:0a:77:83:38:7e:34:84:45:6c:0b:a0:6a:
56:95:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:12:21 2025 by rpki-client