Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa
File: 88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa (raw, json)
Hash identifier: nD3OvB5YEd7rcRGm5yAyhv1Q3e25IdXea+sJFz1mR58=
Subject key identifier: 4F:7A:50:4B:F1:5C:67:51:F7:ED:E9:62:55:CD:D1:E6:62:36:91:1C
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F43285848F65BE207FB9A2E128D9B02C0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 12129
IP address blocks: 66.103.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e2:07:fb:9a:2e:12:8d:9b:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=3a77465d-5aa3-4b79-a013-44dba5af0c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:8c:54:9f:fa:56:ca:89:cf:db:da:be:7d:
a0:3f:08:92:da:76:95:c2:b0:ae:bc:03:d5:01:ba:
72:91:70:4f:5e:61:61:d8:27:aa:d1:15:b7:7f:66:
84:0f:0c:4b:12:4a:f1:9a:ee:ad:a2:65:20:35:b8:
46:1b:79:fc:be:50:1d:f9:bd:c6:70:77:15:15:c5:
f4:4d:16:42:47:f5:7d:71:54:58:e0:eb:79:a5:70:
02:88:4b:bc:54:59:9c:f2:55:8f:c4:42:05:87:d3:
24:97:b8:f6:2e:36:7c:02:f1:f5:39:01:9d:d0:ec:
c5:aa:74:bf:16:1a:68:07:cc:e8:85:7f:28:2a:80:
14:eb:85:67:72:9a:c0:e4:e4:87:7c:24:f5:c5:38:
05:24:d8:be:c0:bb:24:f8:31:57:65:f4:e2:38:fc:
c1:40:49:7c:2e:38:69:3f:cb:b5:7b:53:11:2b:2b:
ed:39:02:00:71:c0:17:18:cd:35:9f:7c:d4:12:da:
ec:56:91:95:a2:02:49:35:2a:d1:30:ea:84:3c:86:
24:99:87:87:16:f2:04:2d:89:8e:fb:4f:bd:f3:24:
98:31:50:0d:09:01:d0:96:0a:eb:03:86:18:1b:24:
fc:12:40:41:e6:d1:1f:03:43:a8:ff:28:7f:d2:12:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7A:50:4B:F1:5C:67:51:F7:ED:E9:62:55:CD:D1:E6:62:36:91:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
66.103.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:b3:20:0c:6e:cf:1d:fe:70:23:f6:37:e7:76:cc:52:c9:55:
7a:4c:4c:6a:bd:0d:07:22:de:0b:d0:50:57:5a:2f:12:97:c7:
d5:26:c6:66:7f:4d:36:7d:d9:29:62:c0:8a:42:14:09:0a:11:
26:be:4b:9f:d8:88:79:1e:17:5e:79:9f:c5:69:b8:2a:4b:ce:
13:37:7e:1b:91:7c:9c:56:e2:2b:1e:5f:03:2a:ee:bf:06:a5:
32:6c:0d:eb:97:8a:75:99:fd:53:63:0c:2e:1d:f6:0c:1b:6e:
a3:36:77:56:7b:47:31:fe:7d:5c:9e:b1:08:5f:cf:56:72:94:
1e:25:43:3f:67:92:9b:69:1c:de:43:b7:72:44:51:cb:68:68:
ec:49:5a:b4:77:96:75:ed:8f:14:cb:0e:8d:8f:26:59:21:be:
ea:30:40:b7:a7:4e:2d:5e:41:7b:35:46:1d:b6:bb:fe:9a:c5:
c7:67:46:6c:c0:7f:73:37:7e:03:8e:d3:5d:f5:12:6a:91:3f:
35:46:c1:af:2a:6f:42:d9:ce:72:8d:e4:c9:21:a1:7c:ae:d7:
b8:82:98:0a:c5:07:c9:45:a9:a3:c5:99:6c:53:12:98:6b:47:
c9:19:78:28:de:58:2c:c4:10:bb:10:b0:54:ae:82:ec:e5:f3:
f9:d7:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:37:07 2025 by rpki-client