Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ab3bc6-1d39-30e4-b41c-322544b0befd.roa
File: 32ab3bc6-1d39-30e4-b41c-322544b0befd.roa (raw, json)
Hash identifier: gbEFGt2Vc68Ojflzdiq39a7kditjxbuYxzRrLbDnmcY=
Subject key identifier: DF:52:EC:86:D8:D8:91:DA:66:CB:A0:56:A1:D9:F3:4E:9B:4D:E1:31
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848116FF8A6E04929B0BB46A340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ab3bc6-1d39-30e4-b41c-322544b0befd.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 58061
IP address blocks: 166.1.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f8:a6:e0:49:29:b0:bb:46:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=cdf09e33-2638-4e16-b42a-a4fec66362ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:5e:90:64:a4:c5:96:27:1d:48:83:d6:5b:
35:af:a1:40:b9:46:6e:29:a9:4d:07:0a:a2:a4:92:
54:1c:23:4a:34:da:a8:eb:4c:d4:4f:06:d5:2e:52:
fa:eb:21:20:a4:ac:1c:f3:68:41:71:a5:e2:e6:7d:
64:3f:d1:40:c7:26:69:49:d1:8e:79:0f:2f:ae:1c:
a2:ab:c3:cd:43:b7:ec:35:05:a0:03:2a:e3:d3:95:
89:ca:59:aa:66:ac:eb:eb:78:3d:f7:41:4e:08:86:
5b:79:42:3c:44:34:0e:13:4a:28:27:33:5c:ad:42:
69:8e:a5:59:1d:74:b8:1d:5e:eb:b1:23:c6:3e:71:
9d:87:bb:d8:a7:5a:83:3c:76:b6:18:1f:fa:67:ba:
e6:a4:7f:db:a8:2a:25:0c:28:37:59:6b:d8:38:66:
62:88:fb:2f:61:85:60:51:8f:dd:b6:3c:34:bd:bf:
c2:b3:c9:9e:53:34:8e:6b:57:ee:fb:b5:22:b1:07:
1d:55:37:5c:b6:f1:e4:9c:85:7d:db:53:83:c2:1f:
88:7a:f4:cd:3c:6b:f0:88:8c:32:9e:35:26:17:3b:
54:12:52:5e:fb:85:eb:13:58:19:94:34:bd:4c:ee:
f1:55:a2:72:44:32:f3:11:27:e8:12:99:ce:f7:05:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:EC:86:D8:D8:91:DA:66:CB:A0:56:A1:D9:F3:4E:9B:4D:E1:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ab3bc6-1d39-30e4-b41c-322544b0befd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:36:cd:ca:b5:c6:08:d5:54:dc:47:af:1d:58:1a:eb:9a:3f:
a6:6a:9c:14:ee:08:4a:44:5e:8b:ae:1d:99:7e:95:b5:69:99:
62:fb:28:bc:b8:a6:39:84:e8:18:a7:3a:b8:5b:2b:9c:6b:82:
07:53:37:b6:c6:94:a1:91:70:cf:05:2a:2c:21:13:78:72:a6:
5a:64:aa:1c:53:49:29:59:f6:9b:0b:d5:9a:95:5a:92:9d:e0:
c5:0f:4f:eb:14:f7:fa:68:9a:07:43:38:d4:d4:06:1b:e0:ba:
d7:6b:d2:37:27:46:94:f4:29:05:bf:b3:94:79:27:4a:51:e0:
7a:76:49:10:25:17:9e:b2:2a:99:14:47:67:54:a9:37:69:cb:
3b:da:36:bd:6e:c7:a5:6e:28:76:25:d0:39:c5:63:4b:47:41:
b8:ad:99:9d:43:78:b8:ce:e6:c3:0b:4b:46:14:e6:98:be:2d:
07:50:b0:b1:4e:1c:7a:f1:23:aa:62:3e:00:51:e5:94:61:ac:
12:48:59:90:50:19:22:61:16:7b:ad:6b:2d:b1:44:fc:c3:3c:
cc:d0:58:81:20:f6:7d:14:f5:09:00:4b:45:a8:85:8d:c7:b6:
83:95:ee:dc:b2:2c:7f:e4:a2:1a:9b:20:d7:d7:6b:6f:83:c4:
cc:84:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:15 2025 by rpki-client