Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/8ee2a08b-770e-3be0-b580-1401678ad4a4.roa
File: 8ee2a08b-770e-3be0-b580-1401678ad4a4.roa (raw, json)
Hash identifier: fHPKfwYSYGkYOy4A8ShS8v1UjQn9lMw2vi9yL7kbgZQ=
Subject key identifier: B6:1E:BC:CC:7D:E7:45:FE:31:F6:45:47:0D:E9:93:7A:96:EC:19:8A
Certificate issuer: /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial: 010D0C9F432858490E16B701E8346053D2284740
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/8ee2a08b-770e-3be0-b580-1401678ad4a4.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 1299
IP address blocks: 66.187.0.0/23 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:b7:01:e8:34:60:53:d2:28:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=398ce930-9d64-4c78-ae7b-51f1d551789d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:10:78:49:35:d9:77:ff:f3:4e:ea:3d:73:d4:
70:57:4c:44:1f:26:0d:cb:70:bd:6c:6c:c7:ae:ff:
0f:de:13:69:eb:d8:d5:d7:4a:25:e6:4c:53:26:21:
89:42:f1:73:fe:26:e3:5a:3e:2e:42:0e:21:4a:98:
93:2b:4c:2c:18:fa:3e:c0:1c:9f:b9:7a:22:75:49:
67:f6:d7:c5:54:32:94:cd:6c:37:d1:4e:b0:e3:20:
8a:aa:f5:67:1a:3c:49:4a:2e:8a:98:e9:9e:5a:09:
d7:ba:53:1c:35:a4:83:93:83:bf:ac:00:12:c4:6f:
d5:3b:20:04:9c:48:a9:77:da:d3:46:e7:80:f6:ab:
6e:f9:d4:8f:81:c9:ff:4c:9f:ce:16:1e:8d:12:ad:
b9:e7:b5:97:dd:c3:8d:2d:98:cb:d8:ff:78:90:28:
6d:62:19:77:75:23:eb:8f:80:25:49:10:51:c7:55:
38:30:17:61:f0:f3:10:08:d3:b8:c2:b2:a0:a1:38:
45:9b:c5:ab:6b:d8:6b:9a:d8:81:e2:56:25:b3:23:
64:c5:8b:90:0b:9f:aa:fd:2c:15:98:e4:c8:64:62:
9b:94:b4:f4:aa:bf:c3:28:74:1c:53:1d:56:94:9b:
81:ac:72:2d:38:1c:0c:d8:08:0b:c2:42:99:e3:bf:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:BC:CC:7D:E7:45:FE:31:F6:45:47:0D:E9:93:7A:96:EC:19:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/8ee2a08b-770e-3be0-b580-1401678ad4a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
X509v3 Authority Key Identifier:
keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
sbgp-ipAddrBlock: critical
IPv4:
66.187.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:fa:f9:c8:36:65:68:aa:79:b1:ba:56:2e:08:b2:ad:cc:7b:
6f:77:7b:3c:02:c4:4a:89:48:8e:a8:ea:60:ee:14:bf:de:a9:
e7:48:c2:12:91:b2:9a:d8:0a:ed:74:ad:15:c5:28:a1:d6:bb:
2d:b2:aa:ae:59:e8:c7:48:54:d5:d9:9a:9f:8a:08:df:1a:9c:
a8:81:d4:16:24:d3:76:72:48:01:ac:3c:ed:e3:37:91:f5:55:
1e:2b:cc:9e:7b:f0:c3:c7:d6:68:35:22:f5:57:23:64:d2:4f:
5a:26:11:21:e2:63:09:57:28:ec:25:a0:b7:02:fd:94:da:43:
aa:6c:ab:a7:a1:4b:19:9b:31:00:69:56:97:54:cb:c3:d8:10:
8b:84:91:b4:f3:11:8e:cf:56:14:ca:50:c3:87:f3:67:67:ff:
b0:24:73:59:84:d7:d8:2f:67:49:f9:91:7d:1a:f4:89:b0:62:
53:bf:85:15:e0:18:ac:90:bc:5b:0b:6d:54:35:6b:ed:51:30:
32:1f:f9:90:90:2c:4e:d6:6d:32:cb:ad:f5:04:4d:78:39:c8:
4f:ca:10:63:11:4b:77:91:21:0c:cb:a9:56:3d:c8:49:af:7e:
dc:a8:df:9b:26:14:8f:22:d1:5d:5e:9b:f7:9d:dc:48:5a:40:
07:d3:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:06 2025 by rpki-client