Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2c53b348-0209-3f66-866a-b32152c4895b.roa
File: 2c53b348-0209-3f66-866a-b32152c4895b.roa (raw, json)
Hash identifier: aaJiY/u5+y5/XGy7AidtADnfT+hoi5t4sndCmRvwLyM=
Subject key identifier: 9A:3C:98:1E:31:3A:4F:A1:B0:E3:14:32:8D:42:13:1C:F0:81:B8:AE
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F4328584886B080C7365F8A9DE436ACC0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2c53b348-0209-3f66-866a-b32152c4895b.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 14711
IP address blocks: 66.103.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:80:c7:36:5f:8a:9d:e4:36:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=cb13750a-df60-469b-b2c0-a19914d452a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:0b:11:96:6c:85:3a:db:4a:3f:91:e9:b9:
b4:c6:11:b9:99:be:e0:ab:f7:c0:7d:1a:db:7d:74:
dd:f5:52:73:c7:72:32:2e:fa:d8:96:4f:59:fa:fb:
53:48:7b:d7:f4:00:50:23:b4:fc:f6:04:3b:90:60:
5e:5e:44:60:45:3b:19:0f:56:e7:be:be:d5:cb:ed:
d3:df:b0:15:1a:ad:d7:ab:e8:d8:4a:31:88:3a:8f:
6c:27:9c:09:a5:1a:09:76:25:c1:04:c7:fb:1f:22:
c0:7b:bc:f5:25:1b:99:f7:07:44:1e:bc:48:ec:38:
5e:d8:f1:ef:90:af:5a:b7:ce:1f:e6:ab:f9:af:59:
94:8d:d4:b6:20:33:ab:f3:3e:b7:7c:e9:d9:5f:f5:
de:9d:a0:1d:32:0c:c6:15:86:a7:1e:6f:4c:26:1f:
80:dd:c6:4d:15:88:fe:e0:86:d1:c6:63:80:59:23:
1a:bd:94:9b:94:26:38:f7:71:65:10:9a:d5:55:08:
b6:3c:51:1c:91:7c:9e:a6:4d:70:15:a4:3f:c8:2f:
e9:33:80:0d:40:9c:35:fd:0e:82:5d:da:db:14:e3:
2e:58:d5:2a:e8:a0:d3:ae:b6:2d:00:16:0e:cf:88:
54:5f:d1:83:19:52:d5:77:ec:f1:97:3c:c9:68:90:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3C:98:1E:31:3A:4F:A1:B0:E3:14:32:8D:42:13:1C:F0:81:B8:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2c53b348-0209-3f66-866a-b32152c4895b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
66.103.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:f9:6f:cd:71:e1:1e:d5:e0:87:13:ca:52:10:a1:92:c7:8d:
84:0f:db:0c:9d:48:fb:57:29:db:f9:f1:7e:9a:8b:7c:71:0c:
2b:66:66:ae:c8:07:01:a7:32:18:6d:29:f4:04:15:ca:75:5d:
26:47:e8:a9:51:d6:29:91:b4:c7:a8:b4:fd:ce:f0:fb:9a:31:
d4:aa:7a:51:b7:aa:9f:84:33:ca:48:8f:d6:8a:98:bd:5e:23:
cd:5e:b3:10:ab:c7:d4:7c:f8:24:ea:53:91:af:8e:76:00:bb:
49:0c:63:23:d2:60:a7:35:39:43:89:f7:d0:6d:e1:e1:9a:91:
bd:d2:90:63:5e:26:6b:ba:20:41:18:be:61:ff:ca:9b:36:38:
38:de:ec:b8:02:a4:82:e3:5b:f6:ae:f6:1f:07:cf:6d:53:d5:
14:a8:ae:a5:54:af:36:e7:b9:70:93:d2:cb:38:fd:e5:3b:64:
79:81:5e:32:ef:3b:94:05:cc:e5:08:8e:b5:db:8e:08:8a:fa:
f6:1c:7c:4f:cf:b8:e9:d1:43:5c:24:22:23:cd:a8:6f:db:8f:
1a:00:7e:33:9a:f3:a7:df:1d:90:b7:47:c1:e9:2a:2f:02:6b:
1d:cf:5e:a1:d5:ed:29:18:70:ef:4f:3f:ea:97:08:df:84:ed:
ad:f0:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:33 2025 by rpki-client