Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1291f011-cb2b-3284-9e7d-9bd5e3e47cdd.roa
File: 1291f011-cb2b-3284-9e7d-9bd5e3e47cdd.roa (raw, json)
Hash identifier: +OVRuXxTGE2rWaH39Joo/EXS/zEhuVRRgPa/k7cOOPk=
Subject key identifier: 7B:23:59:3B:28:A5:55:B5:C1:CB:1B:08:E7:46:01:87:EF:A1:4A:28
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848345581569C460B6CAAA62180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1291f011-cb2b-3284-9e7d-9bd5e3e47cdd.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 44477
IP address blocks: 166.1.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:81:56:9c:46:0b:6c:aa:a6:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=48806162-334a-4533-9758-f3b3097b60ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:79:7b:77:4c:44:98:bb:cb:41:88:60:ad:
ae:cb:7e:e2:dc:27:18:64:4d:f3:a4:58:ce:17:66:
a5:df:19:bb:12:80:7e:d7:17:9a:1e:aa:f0:83:0c:
13:bb:9c:fe:be:89:06:79:b3:80:9e:5d:04:36:10:
9b:af:6f:e8:cf:de:65:61:fe:c0:be:26:48:fb:43:
3e:b7:bd:1e:3b:ea:90:da:8b:36:3a:39:29:12:7a:
3c:b9:9d:ab:de:19:ef:cb:6b:d1:d0:71:f0:95:f0:
79:69:21:c9:37:c6:f1:6c:66:e9:18:9d:5c:ab:2b:
28:ab:4e:e3:6e:f6:0e:fa:cb:e8:b4:8f:ba:a4:63:
8f:b3:1b:9e:dc:3e:a1:9a:f5:51:ff:4e:80:46:5e:
88:a6:4f:66:ab:fb:17:c5:47:41:15:c6:1d:ef:96:
b8:b8:d6:77:2b:05:e6:d1:da:82:f2:01:b7:1f:2c:
cc:0d:90:f1:03:fb:eb:60:64:73:90:89:fa:bc:59:
e7:ae:b9:06:7e:77:ee:0a:e0:f2:d6:23:45:d9:32:
48:d4:f6:54:07:b8:de:ea:a1:7f:9a:61:54:7f:d4:
bd:a5:72:54:03:99:a5:b9:5b:a2:5e:f7:22:23:ff:
44:ab:5f:df:90:f2:25:eb:54:b5:06:a2:09:c1:bd:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:59:3B:28:A5:55:B5:C1:CB:1B:08:E7:46:01:87:EF:A1:4A:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1291f011-cb2b-3284-9e7d-9bd5e3e47cdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:a2:b3:21:1b:00:4c:22:ff:52:be:f1:38:de:00:a0:ca:a8:
2a:ab:eb:c1:31:59:d6:94:df:36:8f:89:32:be:bc:f6:d5:cd:
fc:d0:fa:ae:f7:10:ac:4b:32:9f:a1:89:91:e8:27:45:02:e5:
4f:19:f0:3c:1b:e0:5b:ed:7a:a5:1c:38:fe:04:ca:aa:1b:6c:
2e:1e:cf:41:bc:d9:6d:e5:0e:c5:ea:6b:6a:41:98:bd:4a:df:
6d:f2:2f:8f:5a:67:8e:f5:0b:e2:13:01:f8:b3:d6:92:4d:ca:
39:89:71:0a:06:c6:a8:ba:53:90:cc:9a:f9:51:28:0a:93:05:
dc:51:67:83:56:36:14:71:16:3a:76:ef:38:d9:e5:08:fe:04:
c1:ce:78:34:33:5d:19:55:2a:3a:84:9c:85:ea:a2:ee:83:7c:
30:dc:1e:26:61:a7:da:c9:e8:1d:f4:da:1b:f0:a3:90:11:2b:
cf:6c:4a:80:28:26:7b:fd:92:b2:35:aa:35:7d:74:4d:96:b5:
30:9e:68:2e:9e:fc:b1:fd:29:f4:a7:6d:90:c9:c4:0b:b2:ab:
6f:28:1f:0d:cc:58:70:3b:16:a6:fa:cf:4a:d2:44:2e:44:5a:
f3:25:ad:4d:af:21:fb:04:93:39:8c:67:cb:ce:ad:4d:8d:51:
d9:3c:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:12 2025 by rpki-client