Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
File: cca54213-030a-3b3d-90f9-2b547482f0e0.roa (raw, json)
Hash identifier: JwO4tQTPdw1Ab9XUdUkKzvTvw1M7YCF/5IzeDu2YSZM=
Subject key identifier: BC:10:AB:0E:85:D7:80:38:A6:37:A0:5B:F4:7E:F2:56:DF:CC:4C:CA
Certificate issuer: /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial: 010D0C9F432858494E2EA9E80485B0BCACE91800
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 14618
IP address blocks: 66.43.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:a9:e8:04:85:b0:bc:ac:e9:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=bd092ee9-0d3f-401e-95d3-1b7eb54a1153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:13:21:07:9a:7e:06:3d:96:1f:5f:fd:1e:
5b:a0:26:c7:c3:53:6d:bb:be:36:50:e4:a8:79:d7:
8d:89:62:e2:2a:f0:42:7c:11:3a:b1:43:c0:f4:fa:
f1:f1:1f:6c:76:9e:42:02:ae:73:8d:01:e1:92:68:
e2:79:f6:a5:36:05:45:44:6d:99:f7:26:63:36:03:
7a:22:b5:7b:8f:f8:7d:a5:86:3a:cf:07:a4:4c:4c:
cf:b6:e7:8b:cf:3d:c1:29:62:d2:e6:45:f4:74:f8:
3d:70:36:84:89:89:4f:70:16:16:83:a9:b1:8b:5c:
92:8d:ed:ff:ca:4f:0b:98:55:d2:d1:2d:5c:a6:bf:
8d:60:a1:3b:ab:04:9f:75:7c:71:a5:ae:07:a1:98:
08:cb:88:0a:e9:6a:bc:84:b0:e3:7a:4d:93:e6:00:
40:09:ef:a7:ad:56:f3:16:dd:53:13:db:d3:cc:54:
2d:41:4b:7d:29:a3:de:ac:b8:a9:55:5b:66:5d:2e:
39:9e:f0:5d:f0:92:76:61:1a:f7:71:34:ab:7b:4b:
78:fc:19:8c:e9:48:bf:55:22:d0:3f:e6:87:db:da:
aa:c6:fe:e2:4c:a1:9c:57:8c:6c:68:fa:39:04:a8:
25:cd:b1:5c:08:3c:ae:51:5d:fa:1b:c1:d8:8a:47:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:10:AB:0E:85:D7:80:38:A6:37:A0:5B:F4:7E:F2:56:DF:CC:4C:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
X509v3 Authority Key Identifier:
keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
sbgp-ipAddrBlock: critical
IPv4:
66.43.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:42:89:a8:fb:3e:89:25:02:47:a5:46:f0:32:fa:e8:1c:68:
22:3c:7c:4f:44:3d:5d:a1:2e:a8:cd:b0:a8:e8:31:9d:4e:41:
6b:bd:a4:ad:75:c3:27:cb:ab:d0:9e:52:04:bd:c3:23:48:b6:
ab:9a:25:89:cf:fd:7e:68:8a:c7:a1:14:4a:20:2b:74:f8:20:
fd:02:de:de:47:fe:76:a4:3f:55:ba:a0:19:45:7d:49:1e:b8:
fa:42:1f:09:a8:b9:05:fc:ec:95:9c:48:85:54:35:4b:5a:76:
a1:d3:61:f9:a8:24:70:49:5d:1f:59:b6:e4:6f:de:df:68:25:
2b:6d:ad:f3:e1:64:33:f9:5d:ef:d3:42:60:64:0e:3b:3f:25:
6e:8a:63:e6:77:dd:4d:41:de:31:71:34:ce:49:8e:39:58:fc:
cf:64:44:a5:c9:fc:7b:84:6a:56:4a:a6:35:46:1f:d6:5c:8c:
d7:65:27:d1:da:91:cc:c2:2a:71:96:94:b1:f8:f7:71:23:92:
d3:ce:24:b4:bc:13:ac:f2:9e:dd:d0:fd:2b:90:e5:80:a8:ed:
67:6d:3f:7e:fd:3d:c9:ad:d0:f0:a2:9c:1a:4b:95:b6:9a:8c:
0f:da:3b:e7:cd:fa:04:c6:65:56:52:fc:07:dd:90:10:96:9d:
60:3a:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:07 2025 by rpki-client