Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
File: df833a82-7a66-3fb2-86c2-e24767894bdc.roa (raw, json)
Hash identifier: oEhWWruWCSYmG7tlZrtW1kzCnCNb3RvPyjPYwSc+Mmg=
Subject key identifier: 7C:E6:24:63:00:28:02:CF:FE:D1:46:51:70:EE:DC:1A:39:58:40:6E
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848EF6146963288F385E655A000
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 66.255.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:46:96:32:88:f3:85:e6:55:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=14bab3f3-783e-43ee-8129-f5883d7bdfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:6a:50:dd:0f:e5:f9:56:37:8f:08:2d:ef:
a0:13:fb:56:aa:48:a1:4d:58:c5:bb:4a:01:99:57:
49:6b:0a:03:0f:a9:c9:30:0b:6a:99:bc:2c:ac:8f:
ad:4a:09:66:1d:d7:23:ab:c5:6e:35:34:2b:46:cc:
9f:ad:8a:09:76:92:ba:ff:05:ab:9d:06:f6:9e:9c:
e6:58:ec:d2:a5:ec:93:5f:ea:63:09:31:a6:d5:d7:
b3:8d:bd:5b:69:3e:62:03:4a:c2:59:d7:6a:b9:10:
70:94:c1:80:df:4e:40:ba:7f:a5:91:87:74:38:3f:
f0:72:0e:fa:85:bf:ad:75:9b:63:1e:4c:8d:d9:13:
c8:80:ea:67:11:a7:49:61:4e:2c:11:8c:e5:b4:a5:
6f:3c:b7:77:32:f3:c6:47:df:99:d1:c8:f3:0f:60:
63:74:34:0c:79:0c:7d:6c:c0:9d:ad:d3:81:72:98:
80:ff:3b:f1:ab:a2:7d:04:d9:65:51:77:2c:a7:92:
25:16:bc:23:3f:6a:85:cb:ff:c7:2b:b4:b0:99:82:
33:53:77:01:ab:46:12:be:21:4f:d6:6a:8c:6e:34:
83:2c:4a:33:77:ae:7b:a1:cf:8d:12:76:69:b4:c3:
6b:23:e9:de:1d:f6:3a:7d:e9:b3:4b:74:b8:3d:37:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E6:24:63:00:28:02:CF:FE:D1:46:51:70:EE:DC:1A:39:58:40:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
66.255.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:98:0d:8c:06:4d:d7:b6:65:24:26:6a:73:4a:f7:03:fe:a7:
25:ce:35:18:a0:01:9c:95:ca:67:e2:58:a0:b5:44:81:df:ec:
ba:96:2a:63:bc:50:89:17:a4:04:8d:0c:42:fc:a4:26:a6:5d:
a8:6f:5c:84:5e:4d:93:8b:1e:86:d8:18:60:e8:7a:a7:2a:53:
91:7d:49:45:a0:c2:e2:59:fb:00:28:e0:d1:76:a0:04:6f:c4:
72:8d:f0:13:4d:27:8c:3b:d1:7f:59:f2:d5:bc:7d:01:90:a7:
39:f9:3d:b9:c2:37:83:a9:a2:35:d2:70:5b:3e:2a:c1:98:1e:
bf:8b:47:0a:fb:71:fc:c7:a9:83:3c:10:51:f6:fa:65:c7:6f:
eb:b7:35:36:2c:fd:24:a2:73:1d:7c:c2:a7:99:bb:f2:08:7c:
1a:7a:f4:0f:31:2e:ed:67:55:1a:87:c1:ff:ba:63:a8:f2:dd:
0f:1a:b5:29:24:be:4e:02:25:0a:05:2a:70:41:7f:f1:80:46:
24:87:39:f4:30:dc:c5:86:7a:b2:f5:d4:b9:cc:70:c4:c4:6b:
d3:6e:7e:8a:45:0b:54:5b:0c:53:e8:6f:1b:be:72:0f:fb:a3:
05:34:2e:84:78:2c:c8:07:13:df:3d:1e:5f:db:b1:bb:9e:b0:
a5:49:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:33 2025 by rpki-client on console.sobornost.net