Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa
File: 4fa1c770-c015-3149-af43-e2902ca5a962.roa (raw, json)
Hash identifier: PQYsUJ3WpOxbhiNwtOGKcIceL6R73IeDml5UGmsI4Rs=
Subject key identifier: 93:9A:15:23:BC:4B:37:FD:49:92:93:21:B0:0B:D4:A4:91:B8:DB:6F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847F84F7B58213EE84FAD38E240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 13768
IP address blocks: 108.165.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:7b:58:21:3e:e8:4f:ad:38:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=cf55064e-466d-4841-b727-a89fc9525ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:a7:2a:f2:82:f0:95:3c:05:28:3d:93:a9:
d7:ad:57:60:4f:a7:6d:a0:31:f6:00:44:67:e1:30:
de:58:46:1b:3a:0f:f8:a5:3b:55:1e:5e:d7:a0:66:
52:58:66:54:02:ca:a3:cb:53:7e:40:18:3f:41:38:
c4:31:f9:0b:f3:02:36:5f:b7:f5:ce:b2:55:39:fb:
df:74:a2:00:75:cc:82:7c:0b:74:22:60:6e:71:a0:
5c:96:ec:61:04:50:ec:50:83:d4:68:8e:20:c7:88:
e8:f9:71:08:b5:e4:9b:76:92:e5:18:fe:6f:89:b8:
99:a2:c8:84:a0:4b:0c:ff:7b:b5:d8:0b:5d:9a:1d:
64:78:3c:fd:aa:ed:5f:6c:7e:01:e6:f0:44:52:21:
9f:93:18:36:9f:60:e5:37:58:2c:95:af:95:c3:b7:
fd:5e:4d:2f:bf:96:44:91:63:12:ed:9e:62:ab:1f:
0c:b5:9d:e9:ad:9a:d7:c1:5c:f9:01:88:08:da:1e:
01:25:41:a5:c5:38:ff:14:82:0d:6d:d5:35:5a:99:
2d:76:23:39:88:41:4b:da:1d:a1:d9:bf:fb:4c:d7:
d5:bc:0a:8f:38:44:d9:2a:48:b4:b5:ed:c1:e0:7c:
d0:7d:26:4c:64:c8:34:d0:d1:9c:30:5f:73:c4:24:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9A:15:23:BC:4B:37:FD:49:92:93:21:B0:0B:D4:A4:91:B8:DB:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:df:b9:b5:f0:2e:b0:c1:93:0e:00:7b:67:43:b8:0c:6a:fc:
dd:9e:cf:98:8b:55:26:f8:3e:b5:a6:aa:7f:f9:bd:d9:74:46:
b2:66:7e:a5:ce:73:14:75:4b:d5:d3:07:32:e0:74:ba:38:94:
66:e4:2a:ca:4e:2b:96:ea:64:6e:0e:2f:fe:55:ea:4d:fa:e4:
06:9b:3e:8d:c3:c4:7f:2d:b0:59:d9:60:eb:b0:ef:2a:4e:6f:
9c:be:da:a1:7e:5e:bf:94:9f:84:e9:60:ad:f0:23:b1:37:b9:
62:4d:e2:c3:87:2f:bd:e9:4f:97:5f:49:c5:b7:c9:9c:95:11:
b3:e3:68:0b:16:ef:28:fe:23:07:09:f9:2e:b6:82:4b:fa:20:
32:bd:08:6c:1d:c4:1b:6e:a1:c9:50:e9:0e:18:56:c3:e2:2d:
e2:f2:d3:f6:fe:37:1b:ad:51:c3:95:a1:4a:dc:e5:47:08:38:
83:9b:12:a2:8a:f8:ba:95:f2:d1:e4:70:6a:ae:7e:ab:ad:6d:
a3:ad:c4:3f:8f:91:d7:6a:05:28:c8:9c:30:98:4b:bc:ab:c4:
09:af:0c:68:34:76:81:f3:ae:17:b7:30:ad:7a:b8:a7:3a:fe:
81:a6:8b:79:8d:c7:5b:bf:fc:db:6f:93:6d:a7:03:bc:9f:5c:
a0:fb:0a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:27 2025 by rpki-client