Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b0bdc67-eacb-3d4c-bb44-97a9733c1be4.roa
File: 2b0bdc67-eacb-3d4c-bb44-97a9733c1be4.roa (raw, json)
Hash identifier: J35Er0mn5n9kc81dhbQAutzOsKY9PWeZOh1JHJAVhSg=
Subject key identifier: CB:AC:CC:EB:B3:17:4C:85:F7:5A:6D:CF:93:6A:7A:49:E1:BB:24:AF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858487325A7E3939095E6DECBDCC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b0bdc67-eacb-3d4c-bb44-97a9733c1be4.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 9009
IP address blocks: 166.0.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:a7:e3:93:90:95:e6:de:cb:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=9a495a3e-d4a1-4f7d-9040-d930f6bfde16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:0e:f0:ec:d2:b5:29:e6:41:73:c0:5c:16:
88:c9:17:81:f0:f8:c1:f8:1a:4f:05:d3:c6:6e:84:
b2:52:69:29:fe:8d:2b:f7:16:37:52:95:94:45:03:
41:3c:65:0a:5d:e2:c8:7a:15:fb:05:9b:2b:18:0a:
f7:65:56:48:89:d9:66:69:b7:c8:e1:85:16:f5:39:
ad:de:45:e6:dc:4e:0e:0a:73:0f:1a:23:b2:8f:93:
48:c1:d5:ba:4c:dd:ce:c8:34:5c:2b:8a:5b:40:80:
ed:d2:05:8a:3c:04:35:5d:f4:c5:6e:8d:eb:8f:4e:
9c:bf:dc:60:4c:ad:69:63:be:0d:62:a3:a4:5d:69:
af:9b:6b:ec:e7:cd:d2:0c:b7:d5:f1:dc:12:43:9f:
9c:cc:0f:6a:c6:64:d6:42:bd:18:31:ed:f9:cf:70:
aa:93:a7:4c:bb:ca:f7:84:a8:d9:78:0b:1c:32:c8:
df:cb:95:94:ee:c2:1e:6d:23:84:9a:5a:12:0f:a9:
2d:c5:c3:28:8f:2e:b5:af:e5:a1:f3:e4:a0:2e:2b:
4e:8b:70:a9:25:06:e6:4a:9e:03:ba:2f:0f:30:5c:
7d:de:94:5f:22:ef:dd:43:f6:d7:33:99:f4:0e:35:
a3:cf:e7:58:a8:69:5b:97:02:06:12:b1:3e:50:38:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:CC:EB:B3:17:4C:85:F7:5A:6D:CF:93:6A:7A:49:E1:BB:24:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b0bdc67-eacb-3d4c-bb44-97a9733c1be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:13:a0:51:64:5b:20:f4:40:ff:76:70:91:83:b2:d6:a8:d4:
e0:4d:55:97:bf:5a:2e:f9:a7:25:48:d2:a4:29:47:9a:8d:57:
26:e2:f2:05:c7:97:23:ce:06:0a:f2:b8:92:33:42:16:af:44:
24:96:81:fe:f2:72:cb:46:f8:f8:40:a2:04:90:49:19:bb:55:
f6:b3:6d:cf:09:37:bc:c4:1f:2a:b1:c7:09:75:91:7d:aa:fe:
62:60:dd:83:ca:ae:6c:ac:d7:60:c6:59:a3:51:e0:f0:31:ba:
ac:13:69:db:2d:a2:26:c4:3d:75:99:d4:f0:54:7c:d6:94:e0:
37:a7:2b:14:14:da:5d:2d:d4:67:85:0c:0e:5f:ae:74:84:c6:
e9:1a:74:59:4f:59:1c:11:5e:9f:08:53:4e:45:f5:35:1b:71:
f2:5d:45:5d:7b:ae:f0:fa:65:27:3f:b7:48:86:e6:49:4d:47:
0a:2f:cc:09:6f:e1:63:ad:04:d7:7e:e0:11:80:ff:74:4d:20:
69:63:d9:a5:9d:97:03:08:3a:8d:79:c2:64:10:19:ba:65:ee:
1e:6d:91:d7:7a:cd:d5:4f:c1:ff:18:0d:87:43:fe:6a:e8:f3:
92:c4:c3:85:57:70:44:e2:c5:18:c6:f8:f2:5a:09:fd:91:61:
c0:d7:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:35:19 2025 by rpki-client