Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/0c5eaa23-353b-3a99-b28e-0c8e96aec4ed.roa
File: 0c5eaa23-353b-3a99-b28e-0c8e96aec4ed.roa (raw, json)
Hash identifier: FkQE6GcmBfAgJPVW5prOjCNmHNNFHnrNQh3m/UBlkX4=
Subject key identifier: B9:24:B9:2B:38:63:CE:D8:57:DE:CC:C5:87:5B:75:20:40:8D:C7:6B
Certificate issuer: /CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Certificate serial: 010D0C9F432858492D0110629682B03203217780
Authority key identifier: 09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/0c5eaa23-353b-3a99-b28e-0c8e96aec4ed.roa
Signing time: Thu 13 Mar 2025 15:47:21 +0000
ROA not before: Thu 13 Mar 2025 15:47:21 +0000
ROA not after: Wed 11 Jun 2025 15:47:21 +0000
asID: 13911
IP address blocks: 66.51.96.0/22 maxlen: 22
66.51.108.0/22 maxlen: 22
198.161.206.0/24 maxlen: 24
216.194.64.0/20 maxlen: 20
216.234.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2d:01:10:62:96:82:b0:32:03:21:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Validity
Not Before: Mar 13 15:47:21 2025 GMT
Not After : Jun 11 15:47:21 2025 GMT
Subject: CN=7f7f97f6-30e7-4390-b5fa-535e5d40d6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:94:06:c3:4a:ac:10:7e:8c:b2:ea:10:a1:e2:
c8:cb:59:fd:7e:1e:5f:ae:93:89:09:c7:d1:69:01:
9c:1a:e1:63:dc:d3:3c:dd:59:ec:3d:5a:09:b2:f4:
86:69:ba:6d:92:f9:84:fb:f2:f8:69:c0:b6:fb:cf:
43:75:25:22:f9:63:d6:de:f6:a9:30:34:39:1d:3f:
a5:e4:ca:99:21:66:f8:d2:c2:87:3a:e1:d2:16:6c:
0f:08:cc:71:55:75:15:c8:42:5e:0b:6d:cf:39:44:
90:10:bb:96:48:ee:7b:98:79:08:49:8c:c6:fa:2e:
19:1c:24:88:bc:6c:03:1e:07:0a:6e:b7:e2:09:f9:
14:d9:22:0e:e1:b9:fc:b3:be:ad:09:e2:7c:f4:6f:
86:8e:73:1c:47:a5:8f:77:33:cd:80:39:82:13:28:
d6:9d:33:50:25:0f:1f:b2:5c:ee:94:3d:02:17:01:
bf:6e:dd:a5:73:04:7a:bc:ca:33:42:7e:b4:6c:6f:
61:01:99:80:b9:eb:a2:12:24:65:24:e8:9c:a1:49:
ef:ad:99:46:c0:5e:37:f7:a1:82:dd:aa:8b:1d:f5:
4b:98:33:c9:44:db:36:b3:cf:c8:3b:0b:ef:07:3f:
4e:16:44:47:e6:33:d9:72:0e:ff:39:ac:3d:a4:d2:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:B9:2B:38:63:CE:D8:57:DE:CC:C5:87:5B:75:20:40:8D:C7:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/0c5eaa23-353b-3a99-b28e-0c8e96aec4ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl
X509v3 Authority Key Identifier:
keyid:09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.51.96.0/22
66.51.108.0/22
198.161.206.0/24
216.194.64.0/20
216.234.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:ef:60:87:32:eb:b4:77:f3:77:da:75:7a:bc:a4:7b:6a:78:
36:dc:eb:f9:95:73:1d:b8:c5:23:31:95:a9:22:96:00:7c:52:
53:de:0b:64:a0:9c:2d:a4:7b:0a:b2:3b:06:c2:13:bd:04:24:
4e:7d:be:5d:70:c3:c5:e0:b8:ff:e9:c2:88:fe:06:c6:24:1b:
87:41:c0:1b:a5:4c:62:a9:e9:da:0b:f0:1e:17:35:c2:91:4e:
10:62:c5:11:2b:9b:ed:65:d1:20:94:44:69:f7:af:00:b4:97:
fe:c1:bd:38:e5:68:b2:8c:89:ca:a1:42:6e:53:bc:47:01:14:
bd:d6:65:b7:02:af:7c:b1:aa:47:b4:74:3f:35:59:f4:3c:86:
b9:95:f9:37:72:b1:02:7f:c9:1c:5c:5a:1f:a2:9d:0b:54:2e:
d5:8d:ab:0c:d1:33:5c:4c:bb:28:b3:78:8f:db:91:d9:8a:60:
04:42:f5:f4:0f:7a:b8:b7:80:c0:6b:bb:e3:db:82:eb:d5:ea:
05:83:5a:0e:5e:ac:dc:ac:eb:ce:ae:ab:d6:80:d6:e7:cb:38:
59:3e:71:d0:5d:bb:65:01:66:ca:eb:d6:30:53:98:ca:6b:af:
df:c7:92:e7:af:47:9b:2e:82:6a:88:29:73:a5:50:b8:74:87:
7c:d7:75:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:02:26 2025 by rpki-client