Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/317443cc-be31-3118-8e38-f2e3a4f203b9.roa
File: 317443cc-be31-3118-8e38-f2e3a4f203b9.roa (raw, json)
Hash identifier: irtQSgoy7PEs86V+IKuI2uEhvIJsF6YcJJpiWBr0loI=
Subject key identifier: 06:4C:9C:FA:23:0A:7A:60:DB:95:11:7A:19:78:24:2A:DC:42:3A:3A
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285848BD20E4300F37A61094E86D80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/317443cc-be31-3118-8e38-f2e3a4f203b9.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 30058
IP address blocks: 66.90.81.0/24 maxlen: 24
198.16.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e4:30:0f:37:a6:10:94:e8:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=10c90eb9-565b-43eb-82ff-6abcc143ca7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:b9:7a:a9:71:8a:be:23:14:3c:0f:b7:30:
b1:57:c0:50:80:29:ae:76:41:ee:32:23:93:92:ed:
22:6c:bd:f5:9a:d1:43:a2:ac:33:6c:4d:54:03:b4:
f4:18:29:c9:92:cc:86:88:ac:60:05:1a:ab:cc:0a:
58:0c:9f:17:2f:cb:63:64:00:e7:c5:fc:30:85:52:
81:23:56:11:6e:28:8f:f1:9e:6e:a4:53:c5:6f:0e:
f0:9e:ad:37:ec:33:55:01:75:08:7b:df:b6:f9:ce:
69:c0:66:d4:9b:81:f2:ac:c1:57:ae:54:e2:d9:4b:
61:0a:32:7b:de:9c:70:ab:d1:f3:79:d2:27:f1:97:
24:48:c4:52:63:fc:9b:97:0a:b5:63:02:bf:6b:c1:
eb:c3:bb:1b:d4:ed:ff:c4:04:b0:6f:72:5f:94:61:
08:5d:48:9a:80:10:24:5d:f5:59:74:95:94:98:c8:
ba:07:01:98:9b:42:2e:81:03:ac:a2:23:6a:2e:71:
6f:fb:8d:b7:22:9a:ae:11:7b:e2:dd:bf:79:57:c0:
08:d6:18:b7:63:bc:5d:27:63:75:f1:a5:a3:fe:a9:
8c:8c:31:43:d9:34:8d:87:53:5d:86:e1:b5:e3:91:
23:15:ae:d8:2b:fa:a4:9f:6a:a3:11:b2:b7:4d:36:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:9C:FA:23:0A:7A:60:DB:95:11:7A:19:78:24:2A:DC:42:3A:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/317443cc-be31-3118-8e38-f2e3a4f203b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
66.90.81.0/24
198.16.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:f5:95:40:e8:cd:25:63:b3:7c:5c:af:01:c7:5c:60:c1:0a:
05:a3:46:66:55:ee:99:5f:71:c6:26:ae:06:6d:06:fa:2f:88:
d0:f3:d9:bb:b2:0b:16:b1:83:6e:d4:fb:dd:8c:51:93:ca:8e:
91:f6:09:99:99:3c:34:bf:08:65:85:61:f9:56:20:6b:ee:87:
01:86:38:0f:b4:8c:90:1b:af:14:ab:16:ea:bb:9f:95:eb:ec:
fd:0f:b0:c8:f7:9f:50:8d:e7:c4:35:2c:f0:08:43:ed:66:28:
bd:31:8e:40:d9:92:ee:3f:a9:0d:e7:b4:12:56:1f:1b:7d:93:
21:f4:a1:d0:34:1b:de:e9:0b:c2:77:2b:6f:b0:5b:66:9d:82:
80:55:12:ce:d5:53:82:1b:6d:f3:9c:36:53:34:71:9e:27:40:
5c:a5:9e:00:d8:72:bd:76:e7:ac:4c:69:39:fd:56:a0:32:9c:
5b:e5:49:86:8b:41:8b:d2:70:e9:14:e7:74:f7:1f:7b:f6:cb:
d2:92:66:80:21:78:bc:12:56:f6:49:f7:30:dd:84:57:63:4c:
68:f7:a9:55:14:c3:b2:82:3f:11:10:f0:7e:51:90:1b:38:82:
23:9c:b7:7e:8c:26:8d:81:4d:2f:9f:9e:e0:a4:3c:3c:8c:cb:
fe:b1:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:13:51 2025 by rpki-client