Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e6b7ff3-6162-34c9-b8bb-51a8a9e4d6f2.roa
File: 1e6b7ff3-6162-34c9-b8bb-51a8a9e4d6f2.roa (raw, json)
Hash identifier: PRJgNhgvFs7mIyMm+LZi43uz2nG903BhsNVCqQ0BvyI=
Subject key identifier: A5:7D:FC:3A:73:27:41:C8:B0:48:6E:F5:94:B8:FC:A7:59:10:97:20
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858484945707890E72DE346C829B8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e6b7ff3-6162-34c9-b8bb-51a8a9e4d6f2.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 137409
IP address blocks: 166.0.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:70:78:90:e7:2d:e3:46:c8:29:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=e9f5d28e-207c-44ff-b1b6-03c7bbc285ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c4:76:fc:93:9e:cb:cc:16:e0:31:74:70:60:
ae:3b:95:dc:38:98:22:8b:d4:5f:6e:01:8a:05:af:
1f:02:06:38:5c:76:a0:5d:42:07:67:a0:ac:71:87:
2a:f8:cd:a5:21:ba:86:56:fd:c7:89:95:95:70:17:
c5:3d:e2:40:3e:02:25:79:d1:f0:3e:9e:cb:69:8b:
9a:73:12:8b:60:4b:28:a5:10:82:2f:1a:52:d2:cd:
4e:37:98:4b:7d:a4:3a:e7:3f:8e:46:7d:13:e7:eb:
f8:37:d2:b7:7a:74:50:d8:10:49:1c:02:42:b3:77:
21:14:d8:d1:72:e9:41:3b:dc:c2:5f:c2:24:c1:0b:
9a:2d:53:be:92:45:60:b6:db:0a:b4:9a:9f:b7:7b:
4a:0a:60:54:05:ac:71:3a:3a:93:ac:0f:d0:d0:04:
6a:d6:cc:6f:e6:b7:60:6f:6d:b0:cc:1b:f1:e2:28:
9d:45:7d:00:ba:0c:ba:f4:34:65:97:1c:40:b3:fd:
a5:0f:a1:6e:2c:7a:c9:45:fd:24:f1:4c:a6:be:78:
e9:52:65:e5:19:22:93:f4:c5:4e:6e:96:90:fc:5e:
b8:5c:2b:b4:26:5b:ff:87:c3:18:97:98:f7:5e:19:
16:38:c9:17:fc:4b:0c:9b:42:c2:85:1b:4d:8f:fa:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:FC:3A:73:27:41:C8:B0:48:6E:F5:94:B8:FC:A7:59:10:97:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e6b7ff3-6162-34c9-b8bb-51a8a9e4d6f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:de:5c:38:2c:31:bd:f7:e7:45:3a:d7:fe:10:53:02:53:70:
a3:43:7a:64:de:34:98:4e:5b:a1:b9:8a:a6:99:23:4c:84:8c:
e4:7b:3a:00:94:e3:35:90:ab:3a:53:de:e6:5e:2a:33:a1:4f:
98:d2:53:cc:ec:be:05:ef:3d:98:63:0d:cd:2d:f0:fa:fd:86:
71:e3:c1:17:dd:2a:dd:d3:fb:bc:82:eb:b3:2a:e5:fd:17:13:
05:cf:84:d5:4d:d2:36:ba:8b:e6:d8:33:ae:16:70:50:6b:4f:
4c:d9:98:9b:3a:fc:67:57:3d:1c:b9:bc:e4:14:42:0c:63:6e:
cc:a3:46:bb:22:f8:28:14:69:59:b3:95:bc:c5:7c:cc:1f:eb:
5f:05:2b:55:54:3f:c8:2b:6c:d8:c8:62:3e:a5:d4:4a:3e:9d:
c1:34:b2:c5:81:23:97:0a:51:c8:c5:d0:73:33:d6:c4:ab:6d:
41:9a:ec:86:88:4b:8d:62:fe:3a:ed:cb:b5:a6:75:19:a4:68:
30:71:09:05:70:6e:f9:4f:24:06:a0:94:03:60:9b:6a:d3:29:
0d:3a:4d:8f:e0:c2:44:10:21:77:2f:22:1a:78:93:e3:41:38:
80:5d:cb:10:07:c3:fc:97:25:83:08:04:26:dd:0d:35:65:af:
4a:08:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:38 2025 by rpki-client