Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa
File: 4d500dd3-2d39-3070-8ae4-006b17215c32.roa (raw, json)
Hash identifier: L986W5RQCCKlUHkVE3DWbgGfeZbzmBVnHsVcKlnHKF0=
Subject key identifier: F9:2E:C5:46:40:A5:77:86:7A:B0:50:63:C3:04:C3:F9:D3:21:AA:94
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848239551100452760541CEAA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 30633
IP address blocks: 108.165.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:51:10:04:52:76:05:41:ce:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=38498047-a210-4a26-8b02-01f3c3847897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a6:64:94:e9:65:fc:d5:a1:ed:97:8b:8b:94:
40:d9:ad:e7:3d:2d:60:11:8b:21:cd:25:68:53:75:
b5:de:46:e0:d3:c8:84:93:48:c9:4e:f7:c7:65:88:
61:0e:c5:fd:43:3e:e0:70:93:41:03:a0:b3:b7:8b:
71:fb:f5:8b:ae:f8:bb:5d:08:fe:b0:03:7e:22:20:
e3:99:ae:5c:49:42:23:1c:26:33:e8:d6:0b:b4:36:
a1:0a:e9:49:5c:23:80:55:ea:ef:c6:ab:c5:f2:bb:
ba:5b:3e:f3:ae:ff:a1:7e:b5:c7:85:f3:c0:ab:48:
b3:d5:ef:17:52:00:9e:6a:2f:39:f2:4f:56:f4:76:
d9:58:04:70:2e:a4:46:b0:04:f4:e1:4c:04:eb:31:
43:1a:f3:ab:0d:26:e5:5c:83:86:0e:64:2e:30:ec:
7d:ea:17:a3:92:8b:43:5d:6f:29:5b:fb:af:2f:a4:
15:6d:6c:d5:df:83:d8:d9:f3:d4:d6:72:5a:c3:df:
ac:42:ba:cc:e5:c3:4b:21:5a:76:b2:0b:f3:fe:5e:
39:f1:1f:99:cf:b7:7e:c3:26:76:49:d6:52:50:02:
83:20:fa:9d:9e:ce:a6:26:80:90:b8:2c:34:af:39:
3a:4f:dc:aa:d6:ac:37:25:aa:49:68:9b:e8:96:95:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:C5:46:40:A5:77:86:7A:B0:50:63:C3:04:C3:F9:D3:21:AA:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:af:a0:c9:c2:bb:92:45:f3:ec:fc:28:1e:3d:3f:53:59:9b:
da:f6:ff:f1:74:b4:d0:e9:76:2d:e2:d3:3b:a6:33:54:c6:f3:
f3:ea:22:1a:e7:24:01:9f:54:48:a1:5f:97:bb:3b:76:5f:04:
b6:5b:45:39:7e:da:a7:22:54:b0:08:9c:85:1c:32:68:ba:c0:
7d:e0:96:df:08:29:55:da:b5:0a:eb:96:f5:58:d4:6b:c2:d3:
ad:8a:2f:20:9e:45:89:26:31:ed:f2:9f:a9:77:79:66:a1:b8:
26:2f:b6:6d:8d:fe:a2:ea:34:cd:bb:2b:c2:17:f7:5e:76:c1:
c3:d5:6f:3d:fb:01:8f:1e:42:b1:f2:e0:92:75:d4:a3:30:ca:
76:29:e4:18:82:a3:ba:b0:6e:85:54:b8:93:e1:ad:14:c0:ec:
18:75:26:6a:dd:19:34:98:64:da:91:14:9d:a8:4a:28:02:df:
d8:3d:43:91:8f:68:4f:c3:51:24:b1:8a:fb:e2:3f:00:ab:29:
fe:43:e2:8d:89:cb:c7:3b:52:3c:06:0d:b5:23:c9:22:9c:39:
37:b2:5a:55:02:c3:68:95:ae:f8:76:d2:a6:7e:6d:36:f1:de:
d9:5f:8e:61:04:5a:40:be:8d:fa:c3:82:be:88:f2:fd:d3:1f:
db:c0:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:18:33 2025 by rpki-client