Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cd8ba19-7837-3319-b613-a9d17c17b070.roa
File: 4cd8ba19-7837-3319-b613-a9d17c17b070.roa (raw, json)
Hash identifier: vTQDqaMzjFoJEanPza/vhMkWpx8yzGTwRXj/9MKx1eQ=
Subject key identifier: 1C:73:42:C5:DC:FE:AF:78:AA:DF:E1:83:67:2A:99:11:2A:15:A1:66
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858487E50703B1A84758B0EDA6600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cd8ba19-7837-3319-b613-a9d17c17b070.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 134465
IP address blocks: 166.0.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:70:3b:1a:84:75:8b:0e:da:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=33be957b-e916-44e8-9d38-6289b7dc17a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:42:7f:fb:df:df:c0:48:0c:8c:b5:a1:82:
c3:c4:ad:d3:6b:d5:32:1c:d5:29:55:52:b3:8a:b4:
b8:6b:aa:5a:5c:cd:85:79:63:61:14:d2:79:29:b9:
a1:31:3d:8a:57:72:6a:3d:e1:5e:a9:fa:bd:5b:cc:
cc:a9:a6:bd:6d:1b:79:2d:04:89:d6:7c:83:36:17:
63:26:bd:cf:49:0a:49:9e:f8:2c:5d:5b:8d:c3:cc:
3c:ef:6d:26:10:2f:0f:85:34:aa:06:b6:88:07:a4:
4e:0c:26:75:00:f9:b5:ae:fd:bd:e5:bc:f5:29:98:
e1:79:dc:90:ab:71:c4:08:f2:9b:de:73:be:13:ec:
1d:ac:8d:09:46:40:d2:90:2e:67:f9:13:02:45:93:
0e:93:b2:9f:3b:d8:80:41:59:af:76:95:94:9c:40:
71:10:df:ee:dd:98:9f:61:51:be:cd:94:e1:06:b2:
e9:51:8b:3f:21:bc:51:ea:ef:c5:1c:b7:96:4d:06:
d6:a3:fd:22:25:bf:eb:bb:8d:c3:2c:4f:d3:d8:a8:
04:b7:c2:a1:f7:21:7c:f4:f8:8e:84:f2:b0:07:fe:
3b:37:a5:b3:02:ab:27:40:36:ef:64:6a:0c:f2:7c:
c3:1e:51:ef:43:25:b9:f9:c3:5f:95:4a:77:83:1f:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:42:C5:DC:FE:AF:78:AA:DF:E1:83:67:2A:99:11:2A:15:A1:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cd8ba19-7837-3319-b613-a9d17c17b070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ab:b0:35:61:9e:d6:f6:8d:d2:86:73:7d:f0:e0:f3:5c:b5:
6f:07:c5:6a:fc:e4:2e:7d:12:c4:e6:09:a4:79:55:55:62:28:
46:7f:08:93:00:90:eb:ae:49:81:98:8f:c8:ac:55:fa:9d:e7:
8b:8c:1f:d8:f2:87:43:e6:a1:de:b5:c5:40:0e:9b:bb:13:6a:
8c:9b:8f:c2:6b:28:ce:9f:10:8b:a5:dd:e8:fd:ea:89:5f:b4:
83:bc:76:a5:0a:90:3b:25:f8:f5:f2:b5:04:01:d6:fa:62:17:
8e:3d:0f:ea:f2:87:5d:fa:73:8e:30:4e:46:ec:08:72:0d:a6:
2e:39:a7:9a:58:59:a2:c3:a4:88:1b:73:9e:e9:6c:23:5b:e1:
a3:02:6c:8b:83:e2:d2:1c:6c:56:30:b6:7a:5f:03:44:d2:72:
5a:30:3e:28:3a:64:66:1b:87:f0:f8:59:f8:b7:8b:0f:c2:32:
45:7d:44:d5:b8:81:8b:16:d1:1f:6d:b3:83:50:bb:68:5e:9b:
58:ad:43:f3:ab:02:f2:b6:aa:4b:dd:f6:ca:34:70:4f:32:8f:
52:73:93:06:a5:1d:88:be:33:26:e9:67:91:d2:8a:8b:21:66:
0a:6a:cf:98:05:57:a2:c0:ee:c8:3b:e3:5b:92:65:6d:6a:d6:
eb:a2:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:21 2025 by rpki-client