Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4a9ab2d6-8287-3b42-a93c-ecbc4b838cde.roa
File: 4a9ab2d6-8287-3b42-a93c-ecbc4b838cde.roa (raw, json)
Hash identifier: K+sn7ynBIyHQATYROIcM2k6w7GBQwMRphSeYHjzQWxE=
Subject key identifier: 63:70:05:4D:34:D3:29:E3:9E:19:F6:4F:A3:BE:72:C5:1F:2D:E0:C2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848ADC605474798AC1192565A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4a9ab2d6-8287-3b42-a93c-ecbc4b838cde.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 399646
IP address blocks: 108.165.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:05:47:47:98:ac:11:92:56:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=36340ce3-bc17-4c50-9dbf-76b0d84c90a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:b9:23:b5:5f:ac:26:dd:84:c9:c5:fc:fe:
86:05:8c:d9:0e:f9:d5:af:dd:57:d0:9b:98:30:18:
c3:7a:0d:d7:fd:9c:34:8e:7e:c5:ce:93:7d:49:06:
cd:8c:ac:47:85:0f:ef:5e:38:d6:ad:12:c4:b2:48:
43:cc:cd:b0:8e:61:80:d0:5a:e6:66:83:5f:aa:20:
ed:a1:9a:0f:f1:f9:de:62:25:2c:57:9a:e5:7b:bd:
b6:b4:86:d3:7e:35:07:fe:f9:7a:d4:db:2a:ca:d7:
71:e4:32:cf:62:7d:6e:a1:c8:5e:9b:a9:49:90:98:
a4:5a:48:d6:d1:f8:ec:e8:73:b5:d7:74:07:44:61:
61:60:49:11:1b:b9:4a:3a:27:d8:18:fd:5d:c6:c2:
b6:37:01:1a:37:19:67:9e:d2:35:f2:8b:cc:14:b4:
63:b7:cd:09:75:05:41:c4:27:90:18:a1:6b:4c:e9:
6a:5e:3f:f6:43:5f:d6:e7:ff:fa:4f:b2:cd:c6:fa:
5b:46:da:15:33:a4:df:b0:ea:38:b4:f8:07:a3:c7:
00:2a:c9:e1:ee:f9:6f:d1:5f:7c:30:22:c5:73:dd:
81:e3:53:23:91:66:f8:7a:2d:8c:8f:5e:e8:17:02:
bf:03:40:80:44:b6:60:08:c3:29:0a:36:18:e1:f2:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:70:05:4D:34:D3:29:E3:9E:19:F6:4F:A3:BE:72:C5:1F:2D:E0:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4a9ab2d6-8287-3b42-a93c-ecbc4b838cde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:66:90:00:53:e0:79:1a:e0:a3:4a:75:b7:69:bf:54:5e:79:
0a:06:35:df:75:5a:66:2a:e0:9a:6d:f9:6d:5c:9c:b7:70:42:
73:cf:21:ef:93:e6:fd:64:9b:e1:30:72:0e:e0:f0:f3:2f:87:
e1:87:dd:37:fc:55:78:7d:8c:78:59:29:70:11:df:23:27:89:
37:00:9d:f1:00:77:85:ad:56:f4:69:dc:47:7d:ac:ba:d0:30:
33:ea:0b:94:b6:68:80:c1:94:24:a6:39:1a:d9:58:3a:75:b9:
9c:63:2d:e5:53:ab:75:6f:d9:35:ca:bd:f0:23:ba:d4:58:a7:
e8:f5:a2:4f:f4:32:0d:1f:b3:c9:02:a8:02:69:d1:6c:71:29:
db:d8:8e:fc:6b:c3:58:75:a9:77:77:21:3a:7c:37:18:19:47:
e4:5e:2a:ce:35:c6:b8:13:9a:7b:84:df:1e:ae:7a:ea:0b:ef:
6a:61:51:45:35:28:c4:1b:16:da:c8:6a:37:12:94:52:ab:6a:
97:d1:6b:ef:90:55:ed:a4:fa:6c:f6:ec:ff:45:a4:cb:1d:b5:
a7:0d:e6:c2:88:91:5e:f5:fb:0b:35:b6:6f:f9:d4:13:f8:94:
9e:13:12:fa:fd:89:2a:e6:db:3b:41:fa:b2:6b:60:63:b1:c8:
53:6d:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:59:42 2025 by rpki-client