Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fca8a34-0fa3-37be-afe9-7ae7eb87a62d.roa
File: 1fca8a34-0fa3-37be-afe9-7ae7eb87a62d.roa (raw, json)
Hash identifier: NwqcRcApjsY8ZoUfImWAfu8jeKeg20wR0ogty4V1h0M=
Subject key identifier: 5A:DD:4A:25:E0:C6:6E:08:FC:3D:F2:AD:11:DE:28:79:2A:BE:95:F6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584839EACA2809B58777F92A1480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fca8a34-0fa3-37be-afe9-7ae7eb87a62d.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 7018
IP address blocks: 108.165.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:ca:28:09:b5:87:77:f9:2a:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=ad6b0a74-d2bb-411e-9f42-7336dcf0702b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:da:bc:40:9e:16:81:19:52:fb:5a:5d:30:
97:c5:d5:30:f3:fc:71:14:25:e3:05:e6:ef:2a:1a:
a8:e1:20:99:31:99:b9:0d:de:ad:d2:74:36:31:dc:
2a:b9:12:03:34:3b:77:46:2c:99:4f:63:e1:12:90:
e2:d6:c0:8e:45:9f:3d:04:c5:9f:97:e5:43:74:51:
ce:63:85:d4:bd:b5:56:2a:4e:fb:61:bd:d2:61:a6:
39:dd:41:e6:6a:62:73:c8:48:32:93:87:a2:26:55:
ff:46:c0:04:b2:44:48:69:7c:bf:4c:c0:4a:26:a1:
5a:12:bc:a9:a8:02:b6:4b:27:04:58:7e:1a:52:5f:
40:d5:23:db:0b:cb:4b:4c:32:8c:e9:8a:37:f8:57:
bb:9e:3f:90:94:08:81:53:bb:16:d4:3e:6d:be:38:
2d:89:fd:80:b9:dc:33:32:60:d6:14:0b:e9:5e:23:
e4:f3:5f:8a:3f:79:ad:f8:1a:b6:96:7d:36:92:fd:
8b:8f:fb:25:57:e8:c8:2c:6d:83:3f:0f:70:ce:23:
2a:7f:0b:18:3e:f5:89:98:9a:8e:f5:73:9b:d1:22:
e3:23:26:db:79:84:a3:ec:7f:35:82:5f:26:45:a9:
fc:2c:59:1b:96:c4:2b:12:9b:6c:82:83:1e:29:14:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:4A:25:E0:C6:6E:08:FC:3D:F2:AD:11:DE:28:79:2A:BE:95:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fca8a34-0fa3-37be-afe9-7ae7eb87a62d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:d5:e4:93:0c:22:d5:3c:9e:11:a0:88:a1:68:c3:b0:33:83:
cc:75:75:fb:6f:2b:16:cc:61:f0:76:4b:12:19:f0:67:64:7b:
6c:3f:24:15:b5:92:fc:21:d7:31:40:f5:62:9d:e1:38:64:b0:
af:50:84:96:76:7d:4b:c5:38:fa:c3:95:4c:b8:c4:f5:11:38:
15:f4:92:7d:5a:bd:dc:e8:e4:31:02:47:7f:05:bd:39:25:11:
fb:5e:ae:a0:5e:a0:0e:ed:68:51:c7:8f:0f:9c:44:c4:be:35:
7f:d8:de:00:21:ab:86:c3:5b:81:8d:e1:a0:5c:a9:55:20:de:
1c:d7:21:8c:e0:94:d8:14:c2:6a:e5:ab:b9:48:ba:9e:e5:2b:
9a:07:25:07:cd:23:74:b4:d5:57:90:d2:f8:71:6a:cb:d8:a4:
6a:3d:d7:8a:71:57:1d:43:62:f6:be:69:8a:7d:6b:ff:37:ba:
18:1b:3f:6e:25:02:ef:22:bd:a6:1f:5f:fc:c2:8d:6c:b9:d4:
42:3e:02:eb:e2:8e:fd:5a:d0:9c:b4:28:73:5a:24:73:b7:f9:
b3:31:45:95:47:15:b8:fc:0a:b4:32:42:9f:be:24:e2:30:40:
98:6d:ee:ae:3d:8d:0d:aa:fa:27:4d:67:1b:88:e1:3e:ce:21:
6f:67:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:14 2025 by rpki-client