Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5624a310-a9f6-380d-943b-dc175560815d.roa
File: 5624a310-a9f6-380d-943b-dc175560815d.roa (raw, json)
Hash identifier: xZLGYMb2IPgBA1tnqFDg0i8SHdUKNrcKBUHH2FaOeEw=
Subject key identifier: CB:F0:CC:04:88:EE:2C:1C:03:21:49:FD:BC:B1:C5:9C:B2:25:B3:93
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858482A8FE474344B030AE7432CA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5624a310-a9f6-380d-943b-dc175560815d.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 834
IP address blocks: 108.165.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e4:74:34:4b:03:0a:e7:43:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=15df47b3-0b9b-4527-ae77-96509865124f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:56:05:ef:0d:b7:3c:28:32:22:da:16:cd:
52:c1:7c:b8:a2:15:3c:21:f8:14:ac:7a:45:91:41:
d1:65:51:8b:15:4b:fc:be:13:84:ba:17:01:d5:a3:
07:dd:05:d4:f4:84:a8:5d:cf:2a:66:7b:89:77:f6:
31:f7:66:0a:d9:f8:02:b8:70:3e:ca:36:79:a3:8b:
c7:0d:0b:f2:48:52:24:4f:98:7b:c1:44:ca:59:b9:
a3:cd:f3:38:5a:6e:4d:3d:81:08:0b:32:84:f2:a5:
d0:aa:81:fb:f2:e8:20:a8:73:b4:38:4f:70:46:a5:
c1:cf:fa:45:ac:12:4b:d6:af:96:a5:1f:4f:84:f6:
5a:ff:80:dd:76:6a:1b:d0:91:22:cf:04:b7:30:87:
c0:c2:7a:d9:e1:bc:8f:49:a6:01:61:5a:10:00:8c:
8a:ce:38:37:b8:80:4b:a5:dc:da:18:b7:9c:7f:76:
00:11:d4:96:d6:54:a5:af:c3:08:e0:cb:73:21:d8:
4e:2f:b6:e1:af:75:4a:37:43:d0:5a:56:a5:fd:e2:
d6:4a:c8:0d:2f:58:f5:49:de:76:fc:b6:12:8d:72:
bd:43:0c:8f:03:27:98:98:a7:b7:fc:39:47:70:be:
80:16:9e:54:98:38:72:54:ae:9a:42:4a:46:d3:db:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F0:CC:04:88:EE:2C:1C:03:21:49:FD:BC:B1:C5:9C:B2:25:B3:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5624a310-a9f6-380d-943b-dc175560815d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:59:ce:12:c1:52:79:13:bd:9e:9e:72:3d:cf:3e:03:17:a5:
b1:28:da:25:f9:f0:22:9e:b6:66:c7:62:1b:46:cf:2c:39:97:
7f:e0:da:4c:3b:65:d3:ab:cf:85:9a:92:f8:33:ab:3b:44:56:
3e:4d:e8:73:76:88:2b:e7:22:dd:b9:1d:84:4f:8f:d8:1e:2d:
28:8c:62:3a:62:84:b7:4b:73:81:16:32:0b:e2:38:9a:77:37:
e8:e7:47:14:fc:f3:ee:0d:f1:ee:37:87:c9:e2:44:9b:85:c8:
5d:37:b7:a9:b1:68:cf:d8:7e:fd:91:98:99:d2:d4:9c:26:59:
c7:47:d3:ff:78:e6:53:00:4b:ac:39:39:13:9d:ca:78:47:44:
a1:7a:55:64:22:e3:d1:0d:32:46:90:30:8d:25:d3:5c:f7:8d:
17:db:d3:7c:f9:81:fb:47:52:1a:be:58:9f:d8:1f:f7:8e:bd:
97:ee:5d:13:ae:c1:4f:75:2d:9b:84:d6:ff:d2:c7:23:ed:51:
c1:0d:60:35:2c:ac:dc:7c:a6:a7:08:e8:e7:c6:e6:30:79:36:
38:f4:18:95:52:7d:23:84:c6:81:53:ec:ef:c4:22:37:6f:79:
f9:63:2b:24:18:f4:af:c5:40:5e:50:6e:45:b3:34:9a:5d:a6:
3d:22:bc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:32 2025 by rpki-client