Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ccf11ec-64a1-37a1-821d-81f29ce3e525.roa
File: 4ccf11ec-64a1-37a1-821d-81f29ce3e525.roa (raw, json)
Hash identifier: T9Gf4alr1fNPudeGBauJIJvIvAyauFs+oXcdh1+IyyM=
Subject key identifier: C6:57:F6:DF:AE:24:5C:6E:FA:4F:37:1F:03:21:59:F6:25:17:04:ED
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA426789EEF8118A9BC0800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ccf11ec-64a1-37a1-821d-81f29ce3e525.roa
Signing time: Mon 27 Jan 2025 18:04:05 +0000
ROA not before: Mon 27 Jan 2025 18:04:05 +0000
ROA not after: Sun 27 Apr 2025 17:04:05 +0000
asID: 11798
IP address blocks: 108.165.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:26:78:9e:ef:81:18:a9:bc:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:05 2025 GMT
Not After : Apr 27 17:04:05 2025 GMT
Subject: CN=7847cb5a-1980-4f8a-8ea2-97809ecec8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:b3:45:f3:b0:24:ea:30:64:6a:58:ea:d4:
9d:51:bb:33:79:3b:0f:b1:12:f4:89:d3:42:2d:6e:
dc:5c:60:7e:b3:e9:c4:60:08:50:93:96:16:88:d8:
f7:0a:7f:20:7f:2c:17:e4:18:3b:b1:19:1d:40:e1:
93:b7:09:2d:e5:6d:9e:5e:23:0f:1f:4f:64:6a:34:
f7:ea:27:2c:39:b1:d4:42:c8:3b:e1:62:f9:cf:83:
f2:94:e1:dd:fc:4c:80:e2:12:20:bf:e9:01:26:ab:
f6:34:7f:d8:0f:af:1c:f1:4c:17:f1:07:3f:09:06:
cb:4d:c3:a8:fe:17:cc:1c:72:ad:d9:c5:97:ca:23:
30:cb:22:a7:cc:6c:c0:42:36:8f:81:b3:ff:8d:22:
86:81:09:17:46:10:64:d8:c4:51:18:a1:69:69:91:
85:a3:b1:39:52:03:34:27:4d:10:67:8b:e6:ca:78:
71:ce:71:02:04:92:ae:11:eb:41:fc:bc:05:5b:9f:
72:5b:4e:84:80:9f:04:5b:03:0a:a7:81:f6:2e:f9:
21:d8:c9:79:3b:04:38:92:f0:a2:f0:82:c9:3a:99:
b0:53:a4:cb:e8:57:ca:f3:3e:bf:20:90:0c:18:e0:
63:80:f4:72:25:6a:01:17:55:a5:9e:7a:21:3f:0a:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:57:F6:DF:AE:24:5C:6E:FA:4F:37:1F:03:21:59:F6:25:17:04:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ccf11ec-64a1-37a1-821d-81f29ce3e525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:e5:0c:1a:01:dc:cd:bf:4c:27:24:a6:bd:60:ae:56:3c:7d:
7a:31:b2:00:06:fe:c4:14:56:e8:25:6c:e3:57:9a:1a:fa:9d:
4d:a7:97:b7:df:bc:cc:34:fd:bf:de:dc:3d:99:8b:f6:ec:1d:
14:9e:7a:db:00:b0:87:47:38:87:8b:9c:92:56:1f:ac:3b:a8:
9c:3a:de:b2:99:b1:90:bb:a5:d4:49:5e:de:6e:d6:2f:b9:ec:
9a:ec:70:22:2a:d7:af:5c:67:e3:0c:0b:9a:12:1f:da:36:85:
bf:0e:b6:50:c4:f9:37:8b:5b:fa:ed:26:b4:aa:d3:5c:ae:3c:
90:04:1d:80:f4:39:84:21:1f:5b:f3:4a:c1:aa:c0:11:d0:90:
50:e4:e3:76:34:bb:3d:9b:51:c7:77:21:54:fe:fa:af:1f:e5:
8a:42:03:42:09:8e:97:9b:bc:d7:87:80:50:a4:26:36:c3:ef:
5c:86:b3:09:19:f5:2c:53:3a:69:73:8f:0f:b0:eb:63:68:57:
66:7a:2d:c8:a8:07:5c:de:83:01:46:fb:56:99:97:7f:88:85:
13:7a:b1:9c:06:93:d6:0f:e6:ce:c7:2f:76:46:dd:43:0e:57:
8d:1c:c8:f9:d0:f6:91:7d:e3:e0:13:0e:48:54:9d:16:6a:13:
f7:e7:8a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:59:51 2025 by rpki-client