Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21bbc83a-8179-3ba4-a861-9804353243fc.roa
File: 21bbc83a-8179-3ba4-a861-9804353243fc.roa (raw, json)
Hash identifier: //blOThE0y46SltbmCIH6kcMy8ZcYY91XCB48qIO+7s=
Subject key identifier: 90:DC:C9:97:79:AC:7A:7B:57:38:A0:55:C8:5C:2F:8F:C0:5F:FE:4E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A4D3302C384183E2F523EA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21bbc83a-8179-3ba4-a861-9804353243fc.roa
Signing time: Thu 23 Jan 2025 21:04:58 +0000
ROA not before: Thu 23 Jan 2025 21:04:58 +0000
ROA not after: Wed 23 Apr 2025 20:04:58 +0000
asID: 11798
IP address blocks: 166.1.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:d3:30:2c:38:41:83:e2:f5:23:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 23 21:04:58 2025 GMT
Not After : Apr 23 20:04:58 2025 GMT
Subject: CN=b71f612d-b53c-4a2e-83c8-5344529eaf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:83:9b:7e:a4:f1:e6:b7:ec:77:63:dd:0d:
0b:2b:d8:9a:5e:b6:27:d2:df:5a:7c:29:17:b2:c5:
78:9b:09:04:0c:bc:4f:89:e6:30:2c:22:c2:7d:73:
14:e1:85:85:29:95:78:12:a2:dd:25:c8:b6:d2:1e:
67:13:17:64:9d:7f:2a:e6:76:11:d8:3d:c5:7b:09:
bd:da:cd:b5:a5:ff:0d:1b:35:e6:28:70:55:8a:2d:
0d:b7:3d:d5:94:da:7e:7a:27:8d:ec:e2:48:50:ed:
cb:67:9b:dd:46:19:d0:f4:cf:5a:0e:ff:03:d8:db:
ed:48:ad:19:03:a4:fd:56:42:9f:6e:c2:0e:78:95:
5a:0c:9a:db:c3:a0:8f:91:ab:b3:52:2a:76:00:55:
19:a3:f2:fb:8b:a3:b0:07:cc:30:fd:dc:a9:b5:0a:
2f:7f:9f:51:f0:2a:81:53:10:04:40:a9:ec:dc:27:
0a:dc:a2:1a:7d:62:08:00:cd:a8:0c:3b:17:fa:17:
92:5c:df:87:31:2f:3c:ce:4d:1b:12:6d:03:df:dd:
e9:55:aa:64:85:7d:8b:92:68:ea:45:ea:03:ff:94:
7a:49:df:4f:e0:88:6a:84:0f:b0:08:67:6c:38:c3:
26:07:0e:36:3c:1c:a3:e0:60:0a:3f:32:2d:4b:58:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:C9:97:79:AC:7A:7B:57:38:A0:55:C8:5C:2F:8F:C0:5F:FE:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21bbc83a-8179-3ba4-a861-9804353243fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:0e:d5:32:80:72:b3:b8:d5:51:48:ec:03:d3:1c:35:bf:88:
55:fa:2c:f7:7c:6e:0c:c1:16:d8:8e:5f:5c:33:c0:24:a1:ab:
bd:ba:de:68:2e:a4:b2:7a:e0:b6:e3:80:df:8a:41:01:16:1a:
c8:ce:5c:f7:23:46:8a:79:4d:25:bf:b5:66:99:37:0b:4e:1e:
72:3c:3c:b6:f3:f1:71:6b:4a:6d:35:e3:99:27:26:77:46:d5:
c7:f2:ba:f8:bd:62:6f:42:de:ee:8b:6b:49:15:39:f9:4c:20:
f0:bc:33:b4:98:09:53:8b:87:35:f5:8c:ee:ea:7b:79:8c:76:
ed:f2:09:ae:ca:5a:12:e7:83:29:ac:a6:0a:0b:d5:72:4d:cf:
25:35:3b:76:98:fe:82:ca:8d:56:78:6c:fb:ea:bb:f9:dc:af:
c2:80:00:2f:4f:4d:ff:0a:5a:d1:bb:2d:2c:52:db:e6:6e:47:
e8:c4:90:51:d8:e9:23:1d:61:1f:e1:0f:67:8e:f8:20:db:a2:
b9:8a:3b:43:c6:5f:77:77:d5:45:e3:c1:fa:2b:fc:e4:af:fb:
6e:1d:cf:b3:e9:0c:58:49:d9:d3:3f:50:96:65:85:65:41:76:
90:74:3c:11:ac:c3:03:3e:aa:62:78:85:d4:46:53:fd:8a:ca:
1b:c1:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:33:41 2025 by rpki-client