Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3616736e-3d12-3b34-9b78-3767d404f5da.roa
File: 3616736e-3d12-3b34-9b78-3767d404f5da.roa (raw, json)
Hash identifier: 2pK7957DCJJA8tdJd0v8DzIxk6WpTzglEDdTd3OtkbA=
Subject key identifier: 77:8C:1F:4B:F2:90:2A:12:8C:ED:8F:B9:1C:99:CE:1B:DF:94:01:47
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA4265223AE664FA55EEB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3616736e-3d12-3b34-9b78-3767d404f5da.roa
Signing time: Mon 27 Jan 2025 18:04:05 +0000
ROA not before: Mon 27 Jan 2025 18:04:05 +0000
ROA not after: Sun 27 Apr 2025 17:04:05 +0000
asID: 11798
IP address blocks: 108.165.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:26:52:23:ae:66:4f:a5:5e:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:05 2025 GMT
Not After : Apr 27 17:04:05 2025 GMT
Subject: CN=a7142db7-6e29-48c7-bcac-6781bcc85cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:0b:6a:cd:2d:48:ee:77:b2:21:52:8a:5a:
18:22:6b:7d:cc:06:35:53:89:13:98:1e:b5:8d:63:
3c:f3:b1:59:bf:18:0e:e4:83:75:ae:bd:e8:0d:d9:
7f:93:b2:83:a1:49:77:0f:df:e0:28:48:4b:dc:7b:
b8:29:9d:24:6f:dc:b3:32:7a:32:6a:75:78:c9:49:
fc:f7:5e:36:5d:db:a5:28:2e:6e:ce:66:06:d5:09:
cd:36:d8:55:3b:76:ee:ee:05:d1:9a:f7:ef:a6:4e:
a0:df:29:3d:97:85:b1:4a:17:a5:fe:35:7c:84:86:
3a:27:bb:91:a2:cf:e1:e9:69:20:c3:e9:e4:d5:23:
cf:e2:d1:63:99:18:56:e6:3f:6d:29:35:d0:5b:bd:
b0:c1:3d:03:c5:73:5c:8e:58:3b:cc:2d:6b:cf:34:
bb:3c:0a:b9:85:a3:ec:77:f8:52:d9:02:66:14:a1:
aa:96:c9:cb:d4:d0:77:9f:ea:a8:12:e6:45:9f:d9:
39:00:90:39:23:99:38:57:51:d4:b9:9d:cc:b2:76:
54:24:7b:5b:07:bf:a1:12:48:38:e1:69:12:a9:78:
e4:75:74:e4:db:5d:9e:e1:0b:c6:a6:c9:72:b1:0c:
f9:4e:21:a4:10:df:2d:f0:96:43:71:33:72:95:e7:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8C:1F:4B:F2:90:2A:12:8C:ED:8F:B9:1C:99:CE:1B:DF:94:01:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3616736e-3d12-3b34-9b78-3767d404f5da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:79:05:f1:20:a2:dd:5f:bf:5a:20:69:a9:5c:80:70:0a:35:
3c:55:5e:6e:91:a7:48:5e:81:2f:42:4b:3c:91:75:e6:86:56:
61:d6:27:4a:10:64:32:56:48:21:98:f6:82:9f:cb:f4:40:8d:
8e:43:7e:2f:68:38:cb:ff:ce:c4:84:81:6d:0b:ab:aa:6b:9f:
21:36:0a:aa:d6:79:c2:a7:bc:ba:f1:13:1b:3a:b5:3d:8c:bc:
85:f0:ea:2a:e6:2b:ed:45:34:7b:6a:51:10:58:ac:fd:13:9a:
22:3a:dd:05:f6:f1:da:12:85:39:16:02:c8:a6:70:67:90:81:
87:ae:46:4d:a3:f8:ba:c1:fe:f6:d6:06:34:b4:1c:d1:46:dd:
9f:35:72:a0:97:ef:f9:ec:75:c0:10:03:7a:49:e9:bd:4e:d8:
14:91:d6:56:95:d2:95:06:3e:99:29:fd:6f:47:4b:a1:83:bb:
29:fc:0c:ec:95:07:a8:68:c4:96:28:13:4a:af:c4:43:53:c0:
b2:e6:3a:26:2a:16:71:59:e0:9a:6f:49:a6:de:88:fd:4c:07:
d1:17:c2:93:1d:b9:ab:cb:e0:f9:cc:e7:2b:fd:b3:29:3a:c8:
65:b1:aa:ff:2e:bc:97:e5:37:48:56:35:ad:9e:58:68:c9:7a:
33:8e:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:34 2025 by rpki-client