Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/de1106a5-7c8a-30c0-a638-03a316d3736c.roa
File: de1106a5-7c8a-30c0-a638-03a316d3736c.roa (raw, json)
Hash identifier: Z+eEPQb8IEFet2BYnSp9FtVeWNFVbHrcEUnmAnnuG4k=
Subject key identifier: CB:24:9F:0F:DF:1B:F5:93:9F:A0:71:87:75:A5:F6:7B:62:FB:38:50
Certificate issuer: /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial: 010D0C9F432858486D90464ECE156860A6E44280
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/de1106a5-7c8a-30c0-a638-03a316d3736c.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 205220
IP address blocks: 66.245.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:46:4e:ce:15:68:60:a6:e4:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=1f096c58-ec72-4c95-99d7-634dd69e1fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:88:12:7b:21:2b:52:d1:7e:b7:31:69:5c:ab:
ca:04:54:b1:8f:3c:f5:16:b0:5f:0e:4d:ad:f5:08:
01:2f:a2:11:52:a3:7b:b8:f9:ed:14:61:c7:87:78:
2d:c9:2a:84:8d:e3:75:99:d7:28:75:35:38:1a:64:
4c:68:d1:dc:70:b6:80:f1:88:b1:a5:46:9c:5b:0a:
22:6b:bd:dd:69:1f:da:92:23:ce:08:95:4d:c8:e8:
cf:40:d7:61:83:f2:5e:99:48:e6:2b:d6:77:da:72:
58:71:0f:cd:66:91:45:b3:02:15:bd:74:43:46:f5:
8d:f2:fc:a0:60:4d:01:ed:13:ed:ca:3a:2e:04:68:
4c:ef:d8:c3:98:f4:84:48:b9:a6:0b:25:f3:db:81:
3f:21:95:f5:a9:e5:5c:3b:74:5b:22:c3:72:70:6e:
82:a7:63:18:3b:30:b4:37:7f:00:8b:54:bd:e1:11:
b6:2f:cb:03:6f:03:1b:a5:3d:e2:c0:93:5b:5d:95:
b1:67:44:79:4e:04:a4:d3:ed:b1:12:30:d3:07:ce:
97:34:61:34:c4:17:c7:ad:0b:51:67:cf:24:81:62:
5d:57:2c:3a:fb:b4:c6:36:51:d3:7c:bc:a6:45:75:
60:4d:bf:05:fb:b2:e6:09:ff:f0:04:43:97:2c:29:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:9F:0F:DF:1B:F5:93:9F:A0:71:87:75:A5:F6:7B:62:FB:38:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/de1106a5-7c8a-30c0-a638-03a316d3736c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl
X509v3 Authority Key Identifier:
keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
sbgp-ipAddrBlock: critical
IPv4:
66.245.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:5d:20:16:33:16:bd:02:00:6f:4c:86:54:8a:31:f7:a7:3e:
04:31:5a:7d:fa:29:97:9a:36:aa:e5:47:a8:34:dc:24:b3:b8:
2c:94:bd:24:9e:a2:bf:8d:d8:02:f0:5d:86:fe:bf:b3:c2:57:
d4:ff:01:9c:1c:38:05:11:08:6f:66:8f:8a:87:a2:4b:3f:c3:
bf:d0:0f:49:b1:cf:42:01:ec:12:87:dd:6b:b7:ca:5f:e4:b5:
c9:33:4c:bc:f1:75:9b:3a:e1:3f:03:b7:b0:7d:a0:bb:52:08:
bf:78:52:6d:1b:04:97:13:47:b5:3c:c2:a7:bd:ef:d4:af:0e:
b3:a8:9d:ee:88:bb:e2:19:d9:38:0c:d0:af:b1:a4:07:24:42:
97:06:26:67:49:f6:e6:19:11:9d:a1:77:95:9b:ab:6a:ba:1d:
04:13:aa:83:5f:28:a6:59:83:45:d0:0d:13:1b:5e:50:6a:af:
ef:ab:75:17:fa:82:89:6f:21:bd:a2:46:e7:c0:c4:b8:ae:b9:
fe:69:05:56:1c:16:f9:f5:88:ea:47:ff:f3:8c:e4:9e:95:14:
77:25:49:ae:ad:fc:5d:dc:c9:1f:73:7b:a0:4d:01:ea:21:6d:
46:d0:76:00:56:2f:65:86:7b:d2:94:11:94:7b:e3:34:0b:15:
62:6a:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:44 2025 by rpki-client