Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/564286dc-ad84-381a-8a6d-6da940e47725.roa
File: 564286dc-ad84-381a-8a6d-6da940e47725.roa (raw, json)
Hash identifier: k1p3wTU53Yo4d+ppk7ibiROPVvAgn+pv8YOuMTiltNA=
Subject key identifier: 15:84:CA:BF:B1:FF:E5:9C:84:09:CF:E0:A3:BA:8B:8C:D9:A4:44:4A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFC9DD05C7FA1667B7A6F380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/564286dc-ad84-381a-8a6d-6da940e47725.roa
Signing time: Mon 27 Jan 2025 19:20:05 +0000
ROA not before: Mon 27 Jan 2025 19:20:05 +0000
ROA not after: Sun 27 Apr 2025 18:20:05 +0000
asID: 11798
IP address blocks: 166.0.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:c9:dd:05:c7:fa:16:67:b7:a6:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 19:20:05 2025 GMT
Not After : Apr 27 18:20:05 2025 GMT
Subject: CN=33d87ab0-7812-4224-b95b-333b6d2c4c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:fe:f2:3f:c5:5d:24:07:09:4d:e6:95:e5:
44:bd:e6:3f:03:c2:38:1e:9d:16:d0:c0:66:4d:a2:
7f:83:44:25:85:14:a7:b6:30:32:3b:c5:82:60:e3:
59:59:99:ad:aa:43:9d:96:02:91:a1:16:d4:33:bf:
44:49:8f:7d:4c:65:ba:93:09:ca:db:85:2f:4c:6c:
37:b3:93:1c:db:a4:40:c4:f2:67:07:a9:44:d0:11:
1c:01:3d:73:fd:02:da:9f:fb:47:e5:37:16:51:e9:
d1:09:70:b0:50:cd:d4:75:35:56:01:f1:85:53:cf:
e5:70:ca:53:2f:a5:27:6f:3d:1a:1c:0d:f6:82:76:
92:33:02:a1:73:5f:f3:dc:83:0b:a8:db:eb:22:5e:
be:19:50:b3:de:1b:af:9c:6c:13:e9:4b:9c:a9:b5:
4f:ec:b2:aa:b0:7b:be:97:17:c5:af:e0:1d:d0:ca:
e7:36:b2:58:53:18:61:eb:85:67:85:31:6f:da:83:
c4:15:62:02:97:6e:48:f5:56:47:c3:cc:c7:bd:0c:
b1:76:83:86:17:ee:72:3b:4d:1b:5e:c5:e0:40:fa:
35:ad:ec:56:1e:6e:c1:26:86:fe:2b:97:a1:b2:74:
bc:50:c5:e4:9a:31:2e:2d:4f:92:7e:40:77:2c:15:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:84:CA:BF:B1:FF:E5:9C:84:09:CF:E0:A3:BA:8B:8C:D9:A4:44:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/564286dc-ad84-381a-8a6d-6da940e47725.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:32:fc:42:e7:cb:e2:ca:be:d4:bd:77:1b:47:3a:43:53:3d:
8b:d6:c2:96:08:2c:98:51:22:3f:2a:58:22:81:44:bf:93:98:
24:50:18:47:fb:a2:10:a8:6e:46:50:90:b6:c0:02:50:6b:e5:
bb:11:32:a3:28:bb:25:d3:05:aa:f2:87:f9:5b:77:11:0a:34:
07:7b:d8:b1:12:5d:d2:ae:04:2c:b0:03:df:27:d0:4f:74:f9:
85:f2:f7:75:7f:b9:ea:69:de:82:72:20:9b:de:a7:81:f0:48:
a7:48:48:aa:56:b2:b6:4a:a7:54:42:58:32:9e:7c:df:cb:3d:
8f:27:d5:1b:f6:32:4c:02:eb:cf:ef:c4:dc:c7:0e:8e:5e:e9:
0d:00:07:fe:11:a2:30:64:46:43:f9:27:35:18:30:5d:72:f6:
4c:e6:2c:e5:ab:34:41:d8:d7:50:1b:d2:e4:67:c0:a6:38:42:
f5:a5:b7:f7:cc:45:63:6b:98:f5:e6:54:c3:af:4e:57:ac:7e:
a7:aa:fb:53:dc:7e:f5:b8:4a:1e:ca:bf:b9:ba:9c:41:36:46:
24:b6:8f:3c:ad:eb:88:fd:2b:54:2c:a6:ae:e5:9f:32:ba:34:
bb:55:7b:6b:22:bc:99:61:0a:86:5a:40:5a:49:46:de:cd:74:
9b:a1:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:37 2025 by rpki-client