Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aad17b8-991a-3330-8668-fb4cb79ab027.roa
File: 4aad17b8-991a-3330-8668-fb4cb79ab027.roa (raw, json)
Hash identifier: t4C0q+2Lz45pWh6+VcXJhJfw0s2j23JDoQFuBnhI1BQ=
Subject key identifier: 4E:1B:45:0B:E3:64:F9:E2:FA:BF:DF:E5:3F:02:16:A9:DF:F0:7F:88
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847F2BA3C76C7ACB382EBE21600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aad17b8-991a-3330-8668-fb4cb79ab027.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 51847
IP address blocks: 166.0.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:3c:76:c7:ac:b3:82:eb:e2:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=b680d537-db29-4a1f-9417-341d3ea7223e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:d3:64:3f:4d:78:e3:5e:49:14:1e:f8:f7:
54:89:c8:7b:af:f5:d0:1a:e2:b7:e6:48:2b:fa:d3:
a1:16:22:90:bb:f0:74:b5:bc:ca:ff:29:7b:7c:10:
ec:28:86:cc:40:ea:88:8a:d6:46:01:2b:69:8e:ca:
24:1b:90:71:37:8b:10:4f:a5:e2:99:d4:83:37:c4:
6c:02:91:02:b0:79:23:a6:eb:3f:55:e0:1f:c5:33:
17:f5:eb:fe:05:0c:80:38:27:10:e1:fa:dc:37:f9:
85:c1:09:12:aa:1f:2b:bc:08:9c:d8:f4:a4:f4:b8:
41:07:88:d7:bb:4f:73:10:95:02:67:9a:54:b5:fe:
47:c4:bf:87:37:92:a2:20:d7:89:65:7c:59:cc:93:
21:ec:bc:69:eb:13:32:81:43:20:ab:46:f0:07:19:
67:c4:8d:28:09:9c:ca:a8:a3:cc:2e:dc:67:11:16:
a4:ef:54:64:db:7b:59:dd:53:59:76:98:61:42:f0:
58:48:f7:f1:ed:99:8f:1a:dd:4d:d5:0a:19:fd:95:
e0:10:51:43:ba:ae:df:be:5a:34:ff:d1:30:f1:48:
c2:d2:b9:6e:d7:fd:1f:07:62:58:eb:e6:f8:3f:37:
93:b2:36:ab:2b:e5:72:a1:b7:f9:ec:7a:05:88:15:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1B:45:0B:E3:64:F9:E2:FA:BF:DF:E5:3F:02:16:A9:DF:F0:7F:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aad17b8-991a-3330-8668-fb4cb79ab027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:4b:c7:b5:7a:b4:a4:57:4c:bc:d6:cc:b5:8f:92:1d:f3:09:
32:05:ca:73:7c:cc:43:bd:cc:b7:ef:2d:47:d0:76:11:e1:5e:
d0:e2:02:23:ff:99:38:89:10:4e:94:d5:70:1c:f0:fa:a4:30:
35:95:74:4a:6c:c5:b2:1f:9c:a8:af:92:95:51:20:4c:20:a2:
b4:f6:09:53:ab:79:45:16:59:52:61:b9:aa:9f:3f:90:63:9e:
de:93:60:09:78:29:fb:cb:27:1d:bd:ea:cd:43:dd:2e:a2:86:
6e:d2:6b:7f:62:7e:5f:10:17:1d:08:ea:c7:b7:a5:31:45:0b:
08:96:91:d3:0e:c7:cc:8d:4b:bd:4e:66:a6:08:55:1a:84:f3:
d2:7d:86:3c:f2:6f:7e:30:42:6d:9c:f3:58:b3:e9:17:18:5a:
86:4f:78:fc:30:9e:1f:fb:32:63:d1:83:6c:84:37:88:1a:66:
f1:16:a0:53:8b:79:46:26:1a:d1:aa:01:84:cc:bc:40:79:75:
c8:04:30:87:e8:64:06:51:55:49:b9:31:b8:97:a2:34:ec:e3:
4f:39:55:b9:15:50:1b:f8:70:fc:88:91:34:91:ec:dd:e8:f7:
fa:c9:fb:91:69:ce:78:1f:42:de:0d:1c:fa:dc:dd:a1:af:67:
24:c8:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:59 2025 by rpki-client