Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e231580-a569-3310-aa69-89a0d3845bec.roa
File: 1e231580-a569-3310-aa69-89a0d3845bec.roa (raw, json)
Hash identifier: Cu/vxja/3DH7xCQibuztzBel/77yfIuhlnfuAzSrB3o=
Subject key identifier: A6:47:C6:AA:F9:94:EB:69:AC:70:85:F9:0A:CE:C8:17:68:29:69:55
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584812D53B6A5CCA0AAB5AB66DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e231580-a569-3310-aa69-89a0d3845bec.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 151487
IP address blocks: 166.0.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:3b:6a:5c:ca:0a:ab:5a:b6:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=34c31ccf-78aa-4ecf-a88c-e77296a55946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:99:19:3d:ef:64:da:67:1d:e3:f8:b7:cd:
54:6e:4e:36:27:7b:76:ec:d8:17:40:a2:94:d3:00:
99:a0:64:cd:b6:7b:01:09:35:d9:ad:bb:ca:fc:67:
23:99:f3:de:53:f3:db:79:44:86:23:7f:4a:cb:23:
e4:38:2e:3b:12:3f:e8:f8:96:64:21:e3:25:1c:2b:
b6:1d:24:d5:d3:e5:6c:50:58:28:96:85:ed:a0:d3:
da:94:38:fe:d8:9c:86:d7:5c:62:55:f4:64:b6:3f:
1d:57:4a:ea:81:a8:2b:fa:bf:3d:79:1a:44:e6:34:
90:e8:a2:26:32:0b:3a:20:cb:b2:9b:aa:82:76:79:
96:61:23:68:c4:0c:77:32:54:2b:44:78:cc:96:dc:
5f:72:3a:ad:d9:e3:95:e3:be:17:fe:7b:65:00:4d:
61:73:4d:3a:82:e7:d5:3f:6f:5b:a4:a8:64:4d:8e:
50:a4:22:2f:75:16:b1:86:0f:b0:52:6d:45:55:ae:
85:af:81:85:98:b1:52:e5:19:25:b7:65:53:fd:69:
40:d4:d7:f0:58:c3:00:1b:38:b9:ad:3f:62:49:75:
a5:b2:be:ed:02:f4:d6:ca:fc:d0:03:66:10:a3:0d:
c9:d5:1b:35:6f:31:61:2b:05:52:8d:75:1c:68:0b:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:47:C6:AA:F9:94:EB:69:AC:70:85:F9:0A:CE:C8:17:68:29:69:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e231580-a569-3310-aa69-89a0d3845bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:76:a1:75:d0:d9:a1:15:6b:4f:dc:2d:ac:7a:cb:5c:4f:db:
71:02:c9:1a:06:7f:59:40:c0:98:03:66:a6:59:b5:6c:11:71:
73:b9:70:33:e9:c4:79:51:f0:29:51:78:5e:6a:6c:5c:74:a9:
de:ee:88:22:04:ea:b0:90:b5:b3:6a:ff:46:5c:24:f5:aa:cb:
9b:8f:da:24:db:91:a5:0b:91:89:78:a5:9b:70:8a:53:ca:69:
2a:b9:6e:f8:fe:90:11:f3:1b:ff:9a:af:14:d6:98:cb:13:07:
5d:2b:4b:19:fc:2d:70:ef:5c:11:03:47:57:ac:33:9a:31:2e:
ad:ad:de:ff:0f:60:5e:26:05:df:df:85:cb:a0:3e:38:1f:02:
e2:34:09:a8:43:20:ce:f2:5f:4b:ea:9c:91:1f:ae:dc:5d:a8:
16:24:20:51:f8:3d:7e:12:87:62:16:62:d2:0f:9c:b2:3a:1c:
de:65:f4:6f:d3:f2:c3:6d:a9:fd:9c:6e:70:f3:96:04:7d:82:
14:ed:6e:b4:8a:fc:a0:11:1e:d0:6c:0c:a7:2a:fb:95:01:4f:
0c:14:54:7c:73:7e:28:bc:10:ae:b6:2a:f5:b7:3f:c7:5f:6e:
6b:6b:e9:48:76:cc:ca:c5:ba:80:4a:44:fe:88:1a:ad:d8:a4:
04:53:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:03:45 2025 by rpki-client