Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/2351f1c3-3ea2-31c8-9278-f1506cde9650.roa
File: 2351f1c3-3ea2-31c8-9278-f1506cde9650.roa (raw, json)
Hash identifier: aN8jYTu0lVT0YaZNnLrWQ6IbYCRjARTdvDbGQnbUcLA=
Subject key identifier: 07:5B:D8:11:8B:28:5E:A7:CB:8D:F1:80:21:92:A6:3C:1E:DC:A2:B8
Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial: 010D0C9F43285848EC968C1AEA1384E379D9F000
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/2351f1c3-3ea2-31c8-9278-f1506cde9650.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 4809
IP address blocks: 66.102.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:8c:1a:ea:13:84:e3:79:d9:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=7f20a958-56d8-42ee-86f2-916c518dccd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c6:22:67:a0:e8:14:c0:c1:39:e4:19:ad:f4:
23:33:99:de:2c:75:ed:8b:1d:c0:34:bb:c2:87:78:
e7:00:a9:11:00:88:14:d7:e5:d7:07:b2:7c:a0:8d:
bf:68:79:f6:dc:c0:70:80:aa:5b:ad:03:c0:cd:bb:
05:23:2a:82:ba:52:ca:99:0b:13:01:cb:9b:a5:91:
7d:2d:63:f2:62:4f:31:ab:36:87:0d:5e:e8:f8:fd:
56:a4:38:6b:31:bf:a3:f0:d5:16:db:ff:d1:08:0f:
b5:2a:87:1e:b0:05:2d:d0:3a:39:08:19:b6:08:5e:
ae:a1:37:19:ce:88:49:bf:4a:b4:15:ad:8d:b8:5a:
ad:5a:c2:60:91:37:8b:47:ad:8f:b0:9d:f4:62:e0:
a6:86:bf:7b:fc:4d:a4:4a:94:e5:a2:aa:d0:7d:d2:
84:14:7e:18:25:37:29:e0:e2:27:0c:52:12:1c:aa:
5f:c0:9b:8d:98:3d:22:21:d2:90:1e:30:b0:1a:a5:
bb:6c:b8:f1:bb:0b:c1:2d:30:61:00:be:4f:69:f4:
e1:b4:6b:6a:a3:ff:e9:e1:dc:a2:5e:aa:71:5e:65:
68:ac:bf:85:b9:b7:b2:de:66:62:5e:b2:f5:74:ed:
65:63:82:1d:1d:19:9a:91:c2:ef:fb:b0:8d:d4:be:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:D8:11:8B:28:5E:A7:CB:8D:F1:80:21:92:A6:3C:1E:DC:A2:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/2351f1c3-3ea2-31c8-9278-f1506cde9650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
X509v3 Authority Key Identifier:
keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e7:e0:3e:6a:12:4a:cc:69:42:55:ca:e3:e0:e3:54:8a:d8:08:
ae:17:20:4d:2e:62:74:fd:9a:38:09:1d:00:fc:3c:b5:ce:18:
e5:d9:54:d6:a4:6d:4f:a7:da:79:e7:f4:78:6e:49:96:89:74:
ce:46:bd:e7:eb:34:ef:eb:e4:d0:ff:ff:e9:4a:dd:ce:04:dc:
af:c4:dc:08:f0:67:be:0b:e9:0c:bb:10:7d:a4:f1:92:db:c6:
1f:62:e8:2d:b4:7a:7e:9d:38:27:62:84:ac:03:ff:29:ee:b6:
a2:96:d9:8f:e5:17:68:cb:60:a2:35:2d:7f:6d:7c:d8:a7:b8:
73:ea:c5:88:6a:de:43:ff:60:91:7e:10:d3:48:6b:c7:83:0f:
cc:54:aa:14:ff:b9:39:b1:a4:a7:02:95:be:d6:19:55:a1:34:
a7:20:ed:f3:4f:8e:0b:86:a4:b7:db:b8:15:f9:0e:dc:d0:76:
af:b5:8d:0f:27:fe:20:00:c0:13:fc:8e:6d:0f:fd:e5:60:77:
0c:0a:d5:9c:33:32:e1:41:e5:2e:68:ba:35:dc:be:1b:3c:d1:
1c:26:08:d8:f3:a5:f8:97:70:5b:91:a6:c0:34:aa:71:ee:93:
5e:86:3f:4c:99:69:b3:ad:cc:d5:60:c5:0a:7e:b7:7f:f3:f5:
68:d6:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:47 2025 by rpki-client