Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2292e3c2-b70f-3f59-9c5e-fb46d9af10f6.roa
File: 2292e3c2-b70f-3f59-9c5e-fb46d9af10f6.roa (raw, json)
Hash identifier: d+xiTlbtXScFr20Lq/zzEydy6ASgDMZEONvdpz1UboQ=
Subject key identifier: 0B:63:B4:7D:67:C4:DF:63:21:07:47:8C:B1:C5:0A:0D:34:C3:39:EE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858486D9048BD22EE6887D97A07C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2292e3c2-b70f-3f59-9c5e-fb46d9af10f6.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 36352
IP address blocks: 108.165.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:48:bd:22:ee:68:87:d9:7a:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=110b1c48-d88c-47cb-bd75-d835f4430fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:5f:64:ac:da:4f:52:55:5b:7d:26:03:c0:
2e:15:bf:79:7a:72:84:25:51:f6:53:ac:bb:36:45:
8c:15:cb:c5:c3:04:e2:6d:3d:7e:45:47:51:e6:7c:
df:4b:ea:df:45:79:1d:db:2a:f4:cb:54:08:b7:29:
b8:12:2b:36:27:0a:ba:67:98:19:8c:eb:09:97:ee:
36:f1:9f:d7:71:60:f8:0a:69:01:84:22:4d:ff:39:
8c:95:9e:2d:61:15:71:24:c0:9b:69:2f:37:83:fe:
14:de:62:81:00:ad:0a:fb:57:37:95:01:dd:4c:63:
e4:e4:68:f2:4f:ea:d9:da:b8:05:92:36:c6:1b:51:
60:3f:c7:43:1d:f4:e7:08:da:58:be:98:e0:a3:d5:
4a:97:61:16:42:15:33:c3:83:1f:b4:e6:21:5f:96:
80:d4:56:fa:b2:98:76:74:72:15:12:d0:43:75:33:
d7:ff:86:fe:48:2e:27:8c:ac:83:a5:0b:86:e4:6e:
72:60:7d:f2:63:27:af:9d:05:eb:70:e5:03:04:9f:
e4:78:1d:98:46:8f:f7:89:63:90:46:6a:62:0b:8b:
5d:d5:44:f8:16:ab:7c:8a:e0:a4:6c:0c:a2:6c:7b:
be:fc:ab:0c:d0:98:d6:5d:df:ef:56:08:75:87:8a:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:63:B4:7D:67:C4:DF:63:21:07:47:8C:B1:C5:0A:0D:34:C3:39:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2292e3c2-b70f-3f59-9c5e-fb46d9af10f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:48:e6:1f:91:9d:96:2b:46:47:f2:19:c5:b9:1f:72:07:f8:
a8:e1:68:de:2a:c3:91:6f:9e:3a:09:6f:81:d3:a3:64:82:13:
65:13:dc:0d:d3:79:14:41:3f:85:61:79:73:b0:42:ec:c3:9e:
93:f2:57:ba:9c:f7:d5:71:2d:1b:91:44:ca:9c:92:4b:a8:95:
1e:7f:0e:0c:ec:b4:af:a9:ef:0c:96:ef:1c:83:41:d8:11:82:
05:ed:1c:b9:fa:5e:84:a6:cd:c5:29:d0:91:da:1b:4c:c8:df:
5a:45:4f:25:27:41:85:76:34:d8:be:0c:04:6b:10:c6:cd:55:
1a:52:d3:a4:86:52:1e:09:9d:eb:11:ed:92:e9:70:9f:c7:ee:
a4:ef:39:d9:29:3e:ba:d3:3e:a2:0d:ee:8f:7c:bf:98:45:2e:
76:3b:2e:d7:70:b4:14:aa:5d:36:a9:6c:af:b7:1d:ed:a9:d0:
d5:ff:7c:f4:b0:b1:fe:b2:06:bb:73:f2:ec:c7:2c:3f:27:8d:
ec:63:d2:56:9f:7f:15:7b:2e:25:d9:f9:9b:9c:3f:50:68:83:
b5:0b:dd:2c:a4:29:84:71:20:34:3b:13:c0:c9:a1:db:b8:bf:
c8:15:a1:48:ef:28:59:51:7b:dc:1e:cd:ca:b0:fe:c4:dc:e4:
ad:b1:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:07:08 2025 by rpki-client