Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f0d9892a-66c2-38e2-8ddb-1eddbc1ac0d9.roa
File: f0d9892a-66c2-38e2-8ddb-1eddbc1ac0d9.roa (raw, json)
Hash identifier: 2I2CuNuR5bk7pv7DX5yaR06yopLlRGJ6ITyS+eVz5ZE=
Subject key identifier: F7:B1:B6:9F:D6:20:1E:AD:B2:5C:39:9A:72:63:68:D4:F3:B2:F2:7A
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858488E23E9B60BBF446D30815880
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f0d9892a-66c2-38e2-8ddb-1eddbc1ac0d9.roa
Signing time: Wed 15 Jan 2025 18:04:02 +0000
ROA not before: Wed 15 Jan 2025 18:04:02 +0000
ROA not after: Tue 15 Apr 2025 17:04:02 +0000
asID: 18785
IP address blocks: 66.231.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8e:23:e9:b6:0b:bf:44:6d:30:81:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 15 18:04:02 2025 GMT
Not After : Apr 15 17:04:02 2025 GMT
Subject: CN=d3a78a95-6a02-4575-b961-334f24c9a5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:0b:d0:b0:e2:8a:78:dc:2a:77:b6:e9:1e:
53:49:7d:dc:d3:02:78:44:88:3e:b6:0d:37:10:3a:
93:1e:41:bc:c3:32:74:70:ac:00:90:9c:2b:db:43:
87:db:f8:9c:c5:2d:d6:8d:7a:97:7d:40:2c:c6:a3:
c8:a4:86:ca:92:e7:b4:b7:75:f6:fe:78:ca:6a:06:
dc:0a:c8:c7:6b:16:74:ea:1e:b7:8f:c5:48:65:6f:
c4:87:74:ba:99:f5:95:15:9a:70:10:21:6c:e5:f8:
8f:56:8f:45:eb:59:31:44:a3:69:48:6e:c5:09:65:
ec:a4:24:bb:5e:bc:93:4a:d5:45:59:8d:b3:df:41:
da:da:cf:16:3f:35:f9:72:1a:11:60:70:00:75:63:
41:61:e6:7e:5b:ec:d0:15:33:e4:46:a0:88:2a:1b:
e9:1b:05:b4:33:33:b8:09:21:9c:5a:c7:6b:93:6c:
eb:f6:17:f8:a9:53:0a:f5:61:39:b9:8f:f9:ef:38:
70:4b:55:b0:e2:1e:64:07:02:33:fb:99:70:b2:ac:
36:29:cb:6e:a9:8a:8c:06:9e:32:0a:0b:9e:4c:4a:
10:e3:4c:52:cf:83:4c:7a:bd:a0:11:48:22:ea:87:
43:a8:2e:3e:71:ac:9d:30:f5:9c:da:bb:43:09:86:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B1:B6:9F:D6:20:1E:AD:B2:5C:39:9A:72:63:68:D4:F3:B2:F2:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f0d9892a-66c2-38e2-8ddb-1eddbc1ac0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:4c:93:fe:00:aa:9c:e4:c6:ac:1a:df:93:da:06:f0:a8:6f:
b2:10:ce:36:27:77:3d:81:d1:e6:da:15:c2:39:75:32:e9:7c:
5c:f0:5d:eb:84:b7:a2:bf:f0:3a:69:8f:0b:83:03:29:e0:a6:
00:06:9f:ea:6b:52:64:2b:1b:6e:27:46:f5:70:05:c5:82:69:
4b:e7:e7:a8:cc:38:7c:71:58:c3:a0:97:52:e0:e4:ec:f8:b7:
6b:60:83:3c:b2:66:b0:5b:a2:a4:26:17:71:58:e2:9e:38:0a:
ff:fc:68:02:7b:1e:35:45:3e:72:4e:66:42:c5:1e:17:ef:6f:
05:b3:1d:d0:1a:62:06:e4:30:af:6d:b6:a0:dd:3b:65:71:a6:
f3:9a:a0:a6:c1:4b:87:cc:8c:a9:8b:9e:a7:18:a7:ce:8f:f0:
43:88:7d:72:dc:ee:2c:09:76:4f:1b:83:09:e3:27:a9:cf:1e:
42:43:a3:52:f9:e3:a9:9c:a2:f0:9c:14:48:b8:6b:36:09:e0:
fe:34:d9:63:19:9e:bd:1b:7d:e5:58:b9:0c:02:86:01:4f:c5:
c4:78:ba:df:76:5e:bf:ba:55:14:c7:63:aa:1a:d4:8d:df:31:
69:de:e1:69:3b:eb:ae:76:ff:cf:bf:a1:2b:c5:29:95:d9:d2:
39:18:56:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:47 2025 by rpki-client