Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/30f7f049-41bc-3ad7-b135-d4f051ee4c8f.roa
File: 30f7f049-41bc-3ad7-b135-d4f051ee4c8f.roa (raw, json)
Hash identifier: y3n1MLsDvTHtOa2d/IJVMX/fUjFoiHUq4TqXX7H2hC4=
Subject key identifier: 5E:85:3E:3B:B6:A1:24:33:02:53:FC:1E:8C:C4:25:08:1B:C8:40:1D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848116FF98F7500D38AD0B8A400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/30f7f049-41bc-3ad7-b135-d4f051ee4c8f.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 58061
IP address blocks: 166.1.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f9:8f:75:00:d3:8a:d0:b8:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=b089982a-cfe7-4a58-962b-5e83c36debdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:16:a2:2a:62:16:f0:32:12:a2:08:c3:32:
b0:33:ea:61:67:22:45:65:2a:e6:6c:41:70:e9:75:
a0:88:ca:47:67:30:c6:a3:36:c2:4f:5f:51:8e:75:
a2:7e:3b:5a:bf:46:d9:73:18:ae:98:59:64:d1:05:
ad:dc:a4:a0:a6:37:05:8d:6a:24:c4:40:2b:63:14:
4c:9a:8f:6c:56:38:23:dc:7c:8e:8f:a9:ca:db:ae:
27:09:bb:e4:47:a7:9c:c9:d0:cf:24:97:ba:03:6e:
61:96:20:53:c8:23:32:5d:49:5a:61:c7:f2:2f:65:
3c:83:ec:2c:76:5a:5c:70:ea:ae:09:53:2e:9d:e0:
6d:b8:22:52:e0:32:40:84:e5:38:50:af:ed:dc:a3:
c7:c7:6a:b0:43:68:bb:6e:1f:7f:93:93:ab:5b:b0:
32:02:22:f0:39:f1:d6:0f:78:52:08:fe:84:08:ec:
35:a8:36:dd:e1:ed:ce:c0:92:cd:7d:8f:c8:6a:98:
c2:4e:ea:42:5e:9c:22:23:7e:30:41:2d:54:42:b9:
4b:8d:41:27:9b:45:5d:fa:22:06:08:fd:ec:12:5d:
13:b9:2a:76:dd:8d:da:01:11:9f:f2:5a:6d:8a:74:
62:9a:a0:8c:67:58:cc:ac:2d:b2:ed:39:88:85:f7:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:3E:3B:B6:A1:24:33:02:53:FC:1E:8C:C4:25:08:1B:C8:40:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/30f7f049-41bc-3ad7-b135-d4f051ee4c8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:53:5f:69:6e:ce:71:81:b2:69:19:4a:27:16:01:82:92:b5:
3e:58:1a:1f:14:71:70:5e:b6:f7:44:cb:81:f1:f7:42:76:57:
ca:66:aa:47:7b:74:e7:5a:7b:22:45:78:8c:49:88:b3:1e:8a:
08:07:b3:75:ff:15:ca:32:df:88:02:5b:ea:a3:93:a8:4c:d2:
0b:ee:fc:b9:b3:57:95:76:89:5d:bd:f4:1d:78:e7:fd:df:de:
29:37:4a:2d:87:62:d7:44:81:98:ef:ec:06:8d:ca:b6:f1:b8:
bc:94:3e:f5:03:de:0a:ae:17:6c:be:8a:75:75:de:d0:e2:88:
6b:3b:e0:e7:32:89:13:90:45:90:2e:f3:b8:14:1c:08:a5:2e:
b2:ef:85:33:8c:68:87:41:b4:65:a7:55:1f:fb:5e:32:a1:35:
df:89:5f:1d:ae:29:be:7c:89:7f:e1:50:34:e9:c7:b8:ab:04:
4a:e1:f1:d6:c3:e5:b8:04:ab:fc:e7:62:3b:7d:ee:3e:18:d1:
89:24:2e:82:99:51:66:ac:25:e3:d1:98:63:79:fe:3b:e5:55:
69:c6:46:41:9c:a1:4d:61:8a:43:7e:c8:9d:11:7c:27:05:2e:
f4:9b:1b:c7:2b:1e:b5:20:44:72:1c:6f:59:5e:6a:a1:73:90:
d2:2d:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:35 2025 by rpki-client