Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4e8be70f-34e3-3e40-bb17-8a4e340a4460.roa
File: 4e8be70f-34e3-3e40-bb17-8a4e340a4460.roa (raw, json)
Hash identifier: HerXcYsD/KwUkSGMuv9QqeiDNtoz2pf3fLZJyK6lexo=
Subject key identifier: E6:57:14:3E:0B:47:59:9F:5D:0B:BA:C4:9A:58:B6:4F:1F:F5:EA:A1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847FB1A2646431D0EB98D186A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4e8be70f-34e3-3e40-bb17-8a4e340a4460.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 61317
IP address blocks: 166.0.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:26:46:43:1d:0e:b9:8d:18:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=314f89bc-fb13-4b14-957e-102fe3bec000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:b9:46:b9:1d:ee:3b:fa:fd:4c:83:0f:37:
7f:6b:42:9b:68:81:b0:ac:6a:8c:63:86:e4:0c:f6:
93:c0:55:d5:08:99:2e:6d:c5:04:71:cc:70:4d:ab:
93:a5:05:0c:17:08:c1:e4:23:74:8a:b6:8c:3b:82:
c7:76:89:51:89:0f:8a:7d:ef:58:83:c9:4e:58:b6:
df:a6:47:e8:f4:83:83:b5:b7:fe:65:c5:ae:94:82:
52:58:24:6b:b9:13:89:bb:2a:2f:62:5b:66:1d:e9:
d8:79:6d:d2:81:bd:b1:11:d0:6d:df:67:bd:cc:34:
3f:e6:be:e1:de:15:bb:58:3e:81:73:48:be:f7:cd:
57:7c:86:de:11:60:c5:5e:af:e6:a0:d4:aa:9b:e4:
28:b4:fa:42:2b:69:5a:d6:4f:8b:06:e7:1e:70:aa:
9e:e0:79:3f:94:78:50:ac:42:af:cf:29:ff:ff:c7:
34:9c:10:a7:0f:bb:f5:59:74:fb:3b:d6:39:cc:b3:
7b:b4:dc:57:96:68:96:f6:3d:cb:79:ec:20:7e:5a:
ee:44:7c:b4:9c:e0:93:b5:6d:42:08:bb:59:14:dc:
97:69:2b:e3:9b:cb:8f:63:88:df:fe:7e:08:33:75:
3b:a2:78:71:c0:05:1e:43:4c:24:9e:9a:ba:50:48:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:14:3E:0B:47:59:9F:5D:0B:BA:C4:9A:58:B6:4F:1F:F5:EA:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4e8be70f-34e3-3e40-bb17-8a4e340a4460.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:4e:f7:e5:05:ed:c5:28:31:d0:ab:c4:7c:5a:de:3e:b2:f1:
92:b3:1f:d5:24:0f:8e:10:d7:02:c0:58:f8:c5:9b:69:bd:48:
3a:cd:a7:41:31:71:0b:a5:77:ed:43:90:4d:d7:0a:85:c2:5c:
a4:b8:8d:9f:98:e8:f7:e3:7d:37:a9:e0:1e:7f:74:f6:77:34:
26:ec:9e:ab:07:ea:43:e0:9c:e9:ea:a7:eb:38:b5:7e:d5:9f:
f1:05:78:85:43:eb:5d:d7:76:2e:b8:c3:93:3d:fb:ca:e0:d6:
2e:7d:81:75:e2:30:9c:5c:9b:82:5c:66:d8:34:13:ba:40:f4:
e6:42:02:00:42:cb:ea:20:90:b4:d3:8f:80:21:09:a9:16:cd:
25:eb:72:0c:5c:cc:d2:89:29:7a:84:f8:f5:b5:df:30:a5:68:
8e:59:37:eb:27:a9:ff:7c:f6:70:73:56:ad:d8:f7:da:50:f2:
0a:19:72:59:28:c2:65:0e:ff:48:bb:d9:65:f0:9a:4f:71:16:
f6:26:6e:c8:15:01:99:2f:ac:97:71:b5:a1:69:04:0a:74:f7:
b9:e7:cf:a1:75:62:a2:29:26:48:e7:54:32:82:9e:b6:b4:3f:
fd:33:09:55:12:3a:ae:50:6e:18:cf:41:4d:6a:39:a2:ec:0c:
14:8e:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:34 2025 by rpki-client