Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa
File: d88a912e-dbfe-3d36-b104-8cc39e60b039.roa (raw, json)
Hash identifier: WEj1001a8VUeexboAQna7300ausFtzvO58QeVBU1M+g=
Subject key identifier: 4E:6F:9F:52:5F:64:BC:4F:73:0A:AE:86:25:8F:14:7F:8E:CB:4E:A2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926DC245685966A0BE02CF8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 22369
IP address blocks: 66.160.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:dc:24:56:85:96:6a:0b:e0:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=4408df27-5c4e-4c1d-82b7-ffaf4b9d6cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:bb:f9:d5:b5:93:3b:f5:41:30:c9:6e:d9:
25:10:83:e1:84:f5:53:6d:01:78:ec:ab:4d:b5:47:
c8:fd:93:70:bc:a9:81:41:74:94:2f:13:25:5e:12:
d2:83:95:a0:81:57:37:ed:8f:e5:7c:80:a9:10:d0:
e4:b7:b8:a6:15:ee:e0:91:5f:7f:8d:19:eb:a0:87:
3a:8c:97:78:5f:46:19:96:21:8f:21:17:98:5c:bd:
30:8e:c2:6f:81:08:94:2d:51:1c:d5:ca:6c:ef:3b:
1a:09:1c:a5:ae:44:54:f6:fa:cf:31:c7:f9:86:84:
0b:fa:93:2f:52:30:c5:b2:c1:e0:cd:48:37:81:b6:
67:0d:cc:43:9d:51:30:85:fb:ac:c5:0d:e6:87:96:
28:9d:9c:c5:31:b4:3e:03:83:c8:46:82:b2:fa:3e:
cd:a2:ec:88:e5:7c:e4:05:df:87:96:3c:bd:f7:4f:
2c:56:b3:0f:a3:42:e0:08:fe:13:05:69:bf:21:9b:
3e:0c:31:a6:8c:99:28:e1:27:3c:58:2d:95:9c:e8:
29:db:24:48:fe:9a:ad:05:8b:58:9a:bf:4b:2b:dd:
8d:58:de:fa:6a:b5:07:17:14:20:11:db:80:97:b6:
ff:9f:36:c2:f9:5e:e0:06:ec:70:33:aa:19:27:cb:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:9F:52:5F:64:BC:4F:73:0A:AE:86:25:8F:14:7F:8E:CB:4E:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:4a:f2:0d:6f:22:85:cb:da:8e:17:65:ec:df:99:8d:48:09:
ff:08:64:ff:bc:7b:45:80:2f:c0:43:94:2d:f8:ba:b5:4c:11:
c6:70:bc:f6:11:e0:5c:f1:4a:3e:f1:84:ed:09:1b:4d:b7:5a:
bf:b7:63:52:82:34:df:3e:ce:ab:2a:6c:47:61:5b:57:b5:6d:
f3:87:52:e0:01:54:0e:ec:9f:1f:be:cd:a2:f9:4d:b3:47:85:
e3:33:a5:99:a1:c2:19:01:7f:db:31:63:6b:f4:e7:23:3f:38:
38:95:2e:e7:60:df:dd:10:75:88:b5:0f:d7:fd:a4:3f:44:8a:
7d:db:b0:35:a7:f9:d4:ea:df:e1:e8:31:f9:ca:b7:a3:bf:92:
01:b4:2d:ac:fe:c2:b9:6d:52:36:e4:31:ce:21:ca:97:ba:7a:
da:6a:db:e6:e5:df:bb:cb:dc:c2:c2:41:6f:87:4b:cf:22:92:
05:5c:30:b5:d0:da:0c:e3:f0:4f:60:7e:09:81:fb:61:77:a0:
05:3a:83:ee:02:ea:1e:c3:67:83:40:64:e4:ab:e0:f9:c5:59:
7a:63:9a:f8:97:3a:30:c7:70:47:a5:8f:29:0c:e5:d9:38:56:
85:e2:ba:cf:12:9c:73:36:2c:f3:43:db:8a:8a:f6:45:74:4b:
11:2f:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:26 2025 by rpki-client