Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa
File: 2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa (raw, json)
Hash identifier: 9yrzibhGK9pUfOUuOOGS+V0Ix00gGlQqwKuTJ08ar4Q=
Subject key identifier: 59:12:73:7E:1E:21:75:3C:46:CE:84:92:60:78:74:2A:15:03:B5:05
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F432858497AD9A975C85A9A0230975100
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa
Signing time: Thu 10 Apr 2025 13:00:59 +0000
ROA not before: Thu 10 Apr 2025 13:00:59 +0000
ROA not after: Wed 09 Jul 2025 13:00:59 +0000
asID: 215081
IP address blocks: 66.118.236.0/24 maxlen: 24
66.118.238.0/24 maxlen: 24
104.249.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:d9:a9:75:c8:5a:9a:02:30:97:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Apr 10 13:00:59 2025 GMT
Not After : Jul 9 13:00:59 2025 GMT
Subject: CN=7b9f33af-557b-49c8-a9e8-0c06670c405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:cc:ed:41:e1:99:8a:ab:fd:b3:53:9d:94:
10:5f:92:77:f5:49:1c:e7:e6:f5:bf:93:d2:9e:40:
f3:25:f4:41:d2:a1:ab:1b:d1:f7:ad:11:7e:10:0d:
2d:a9:6c:6d:f9:0c:cf:02:db:b2:1d:c2:89:3d:c4:
10:41:8f:85:a4:73:2d:b6:b2:f3:35:29:41:70:a9:
91:a5:df:3d:99:c0:be:af:9c:1d:c2:66:9e:c3:b5:
54:ac:cb:c2:70:18:4b:79:62:97:48:da:6f:2f:53:
9a:09:c7:8c:fb:bd:5b:43:da:65:1d:4a:ed:e7:d7:
55:e8:37:87:18:23:f7:54:54:1e:bd:be:e2:66:32:
9b:4a:1b:82:f6:74:fc:23:5f:5b:0d:40:1c:8a:f0:
b0:e8:4b:15:92:fa:cc:0f:8f:80:72:38:2d:86:ea:
c4:c6:5d:1a:fd:03:84:18:cf:e9:47:b5:09:a9:a2:
29:b2:ff:f1:fe:8b:35:fc:5e:a8:b2:2c:a7:61:25:
e9:55:c5:b9:a9:bc:f9:f0:0e:b9:3f:93:d1:81:20:
f0:63:47:c6:00:92:3e:03:fa:1a:1f:28:bc:73:a3:
cd:ec:72:b6:8a:37:6c:f9:b8:82:26:d7:1c:98:a1:
7b:b3:b9:41:53:ed:78:61:83:b0:ef:b7:0a:99:52:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:73:7E:1E:21:75:3C:46:CE:84:92:60:78:74:2A:15:03:B5:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.236.0/24
66.118.238.0/24
104.249.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:1a:7f:ea:52:88:57:23:3e:8f:10:a9:4f:7c:95:3d:03:05:
94:f7:db:62:d4:f7:01:e7:5b:36:80:bc:c3:4e:ef:b1:c3:14:
8a:84:45:4c:54:f5:ed:1d:f0:f2:bf:d7:8d:c2:35:da:ff:9a:
ed:fd:32:39:56:cf:40:09:ad:45:a9:50:01:05:a9:7d:fe:a6:
02:aa:b9:f1:07:5a:66:07:6c:7a:6e:80:67:e7:c3:eb:9b:93:
d4:67:e1:08:c8:8f:0a:91:1b:bb:ff:05:49:e3:83:5b:de:5f:
c8:83:a2:16:68:8d:94:c2:2f:07:9c:78:4a:cf:6a:bd:7a:66:
fd:b0:81:dd:11:f7:bb:7e:17:11:4e:5a:b8:66:e4:7e:b3:cb:
e1:bb:09:a9:2d:22:b1:d0:d6:3d:f7:5d:04:41:fb:cc:0e:76:
e3:2d:71:52:74:13:ee:a4:0b:36:88:fd:19:65:b8:7f:20:7d:
0a:f6:b4:54:11:c3:bd:47:2a:0d:1b:23:4e:ec:9b:b3:56:de:
b8:8c:ee:3d:27:6a:b1:aa:15:e7:0a:1d:9d:cb:69:31:e8:f7:
c9:6e:2b:78:e6:79:75:4a:5b:3c:61:ee:0f:34:99:fb:09:5a:
a0:e7:2d:81:a7:ac:aa:52:35:0c:d7:3c:42:21:92:92:18:59:
7c:66:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:16 2025 by rpki-client on console.sobornost.net