Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f383e6c-4dfd-3604-96b2-cf7e4f184733.roa
File: 2f383e6c-4dfd-3604-96b2-cf7e4f184733.roa (raw, json)
Hash identifier: 6Rex5K/O+4p/KfA/GuIWBkY8hM4saBn4WbRtvdQwcVE=
Subject key identifier: E0:7E:F2:37:04:CC:EE:C7:37:72:5C:C3:75:9F:A0:47:90:DE:27:D0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA427FE65DF07274352FE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f383e6c-4dfd-3604-96b2-cf7e4f184733.roa
Signing time: Mon 27 Jan 2025 18:04:06 +0000
ROA not before: Mon 27 Jan 2025 18:04:06 +0000
ROA not after: Sun 27 Apr 2025 17:04:06 +0000
asID: 11798
IP address blocks: 166.0.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:27:fe:65:df:07:27:43:52:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:06 2025 GMT
Not After : Apr 27 17:04:06 2025 GMT
Subject: CN=fd566402-d336-430f-a130-f8a65674cc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cc:f9:b3:41:f6:02:bc:43:46:53:fb:8d:44:
9e:54:f8:cc:bf:1c:a8:93:90:26:31:ca:b2:b2:2f:
1e:70:0f:cf:90:61:03:b9:5a:95:d8:95:96:a8:d2:
67:82:ce:53:80:b3:df:9f:ca:42:8b:71:26:a1:a1:
3d:76:78:35:dd:64:14:60:62:62:a0:1e:56:90:1e:
49:e2:99:2a:a3:44:4b:82:92:fc:6e:3b:cc:6e:bc:
de:2a:8e:b4:e0:7a:5e:bb:b4:c5:a1:87:ca:ea:b3:
f6:e5:39:c6:13:40:1e:63:7a:89:93:56:34:31:1b:
f2:aa:9f:2e:ab:ce:5e:fb:ac:c7:1e:cb:6e:e8:d1:
97:1c:0c:97:99:0a:42:20:43:89:54:97:6e:9f:38:
ec:eb:de:5b:dd:66:83:5e:2a:7f:6b:55:9b:99:c6:
16:44:bd:9c:39:da:65:2d:4b:e2:02:6b:dc:15:3c:
45:4a:b7:05:8e:89:cb:3d:0e:8b:4b:e2:d3:9a:e3:
57:6a:51:1a:9a:62:3e:fe:e8:57:59:71:82:ec:46:
31:a9:83:7f:a3:30:95:b0:6d:f1:54:56:cd:e0:bd:
73:83:8a:17:0e:99:5c:b9:2d:32:1c:b2:ec:35:ba:
e1:8f:38:3d:97:3d:02:81:0b:a2:5f:f2:09:38:15:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7E:F2:37:04:CC:EE:C7:37:72:5C:C3:75:9F:A0:47:90:DE:27:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f383e6c-4dfd-3604-96b2-cf7e4f184733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:93:c4:e6:d5:04:07:0d:ed:8f:16:17:0b:24:7d:ff:71:a2:
46:4d:c5:18:b6:e6:62:f9:6a:08:44:92:00:43:77:4b:22:23:
36:43:8f:72:e3:ad:91:d2:e0:64:09:b6:c4:ad:d4:f5:7f:d0:
bc:38:cf:29:3e:a5:8f:0a:36:76:80:01:57:60:a8:83:fa:4d:
d5:6a:b5:ff:d0:8d:bf:35:c7:f6:00:47:47:90:f4:77:f6:32:
dd:66:14:90:e7:ee:78:f9:e6:2b:de:bc:9e:ab:ec:6b:af:0c:
b9:10:53:58:37:a0:ef:4e:a9:d5:7a:e7:f5:ed:0b:4a:85:e4:
43:87:c7:5e:e3:39:bd:0c:ad:b4:06:f8:b5:a0:13:cc:95:f4:
9b:25:0c:6a:52:d2:08:bf:61:4c:0f:cd:ad:b6:47:22:1f:9b:
3a:c3:33:a2:58:88:78:9a:fb:2f:34:68:bf:6e:cd:f1:a2:ca:
ec:e2:d4:a2:10:25:83:c7:b8:ac:0d:6d:21:6d:4d:04:90:b9:
e0:b5:9d:90:3b:44:7b:31:68:c2:7f:94:8a:17:ff:69:2a:50:
80:06:2f:ed:09:45:0b:c3:7a:e1:23:ed:63:62:47:9f:57:77:
97:05:52:fc:6d:4c:69:0e:64:83:b0:af:5f:6d:c6:46:b6:9a:
f0:9a:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:02:15 2025 by rpki-client