Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e176478-67a9-3123-9063-63077f84b11d.roa
File: 3e176478-67a9-3123-9063-63077f84b11d.roa (raw, json)
Hash identifier: nb+vNJ4gjiwRXn9AhcNsqQ8qRFCIITH7hmRDoS+BCww=
Subject key identifier: EC:3A:84:51:E4:73:43:20:65:3D:AF:AF:C4:2D:48:C7:37:A0:E0:81
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858496FAF0BCCE535A960D59B3B80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e176478-67a9-3123-9063-63077f84b11d.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 63062
IP address blocks: 66.82.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0b:cc:e5:35:a9:60:d5:9b:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=1783ede1-5feb-4fe9-9220-594e5cea4d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:12:9f:7a:63:ec:fb:33:dd:23:00:df:1e:
e1:cb:39:c8:01:a5:1a:2c:39:a3:70:a6:d7:db:92:
ce:77:da:a6:13:15:b0:87:55:2a:ad:3b:c7:3b:42:
a7:24:11:69:c1:9d:66:3c:e3:35:bc:31:b0:5e:db:
22:41:c6:83:23:a9:5e:c0:f5:0f:3c:37:9d:bd:cb:
56:f9:f6:bf:f5:97:33:c7:d9:e1:ad:a5:ae:d1:09:
e1:e0:aa:b4:41:57:dd:f7:b4:b3:e8:a4:91:2a:a3:
ab:c8:64:29:89:7b:5f:8c:c9:96:19:ec:32:b1:f7:
d5:30:58:56:59:77:02:c4:6a:3c:51:63:11:46:a5:
71:72:ca:98:19:0f:af:01:ee:f3:99:9c:e4:34:e0:
0c:f2:17:32:61:e9:5f:e5:65:64:39:17:e0:a5:be:
72:0b:86:26:81:2a:ee:82:dd:76:a9:bb:e5:2d:30:
4f:04:26:06:41:84:02:76:35:87:07:0f:53:3d:42:
89:ce:04:f7:f8:21:8b:a6:8b:c5:19:f5:74:a1:36:
00:e9:07:ad:ef:1d:d0:34:da:e4:37:f2:29:b5:46:
22:92:a5:f9:aa:b2:f8:0e:43:93:f4:31:77:af:ed:
66:3d:b7:fb:ab:7e:8f:93:07:f2:f8:97:24:d1:dd:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:84:51:E4:73:43:20:65:3D:AF:AF:C4:2D:48:C7:37:A0:E0:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e176478-67a9-3123-9063-63077f84b11d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
66.82.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:da:ae:85:21:1b:46:35:3b:c5:07:d4:40:ec:81:90:6d:2b:
8e:f8:b2:87:2c:cb:06:f8:11:97:73:66:4f:03:a1:ab:96:71:
47:94:78:76:89:f6:6a:d5:d5:ab:c0:dc:c3:33:e2:4e:8f:60:
91:fa:ee:27:4b:ec:2e:86:af:0c:7d:f1:dc:9b:9e:18:87:ad:
d8:49:92:d0:7c:df:58:0e:b5:43:6e:42:55:a0:21:95:1f:b7:
e4:fd:9d:93:e9:b0:01:b7:af:f5:e0:46:f6:bd:28:7a:66:4f:
28:86:f4:81:a9:31:76:78:9b:fc:3b:7b:8d:82:63:74:4f:7d:
76:0f:fa:87:02:79:3a:42:79:fc:9b:72:ec:d5:bc:1d:b4:b9:
0f:eb:dd:fb:e5:89:e5:84:17:be:3c:e3:be:06:15:9a:cc:36:
00:2f:53:5c:2c:1c:8d:79:12:18:d9:e5:ee:96:aa:9d:a9:ba:
de:d9:a0:d3:ac:5f:85:a3:b8:ac:d8:b4:ca:83:37:38:64:d6:
ac:71:4e:8e:2d:3f:51:ad:6d:f4:a3:82:ad:96:04:ce:b5:2b:
09:15:95:54:73:ec:67:ec:da:9d:39:52:87:76:97:84:0a:48:
62:ca:56:52:98:f5:75:80:aa:88:6b:9b:d6:13:a2:75:6d:d5:
6c:39:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:41 2025 by rpki-client on console.sobornost.net