Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5696ef1e-bf1a-345f-8e10-db3faa25ebbd.roa
File: 5696ef1e-bf1a-345f-8e10-db3faa25ebbd.roa (raw, json)
Hash identifier: R6cydi27KdnacgAfDqD9ybqLKeLP/jFG/6so73V7cuc=
Subject key identifier: BA:71:F6:99:11:F7:F3:4A:49:CD:41:4F:74:06:5A:18:83:CA:6F:9C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847E78F60ED1D26F64812FA3300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5696ef1e-bf1a-345f-8e10-db3faa25ebbd.roa
Signing time: Sun 17 Nov 2024 02:00:28 +0000
ROA not before: Sun 17 Nov 2024 02:00:28 +0000
ROA not after: Sat 15 Feb 2025 02:00:28 +0000
asID: 62240
IP address blocks: 108.165.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e7:8f:60:ed:1d:26:f6:48:12:fa:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 17 02:00:28 2024 GMT
Not After : Feb 15 02:00:28 2025 GMT
Subject: CN=362c6e6e-a0d3-49c8-a959-88863fe45ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:14:8b:fa:19:80:52:ea:4d:a2:c7:9a:fb:
3c:48:49:5a:ce:32:81:df:cc:82:05:db:d3:cd:ef:
8a:24:d3:de:9b:0f:fb:78:df:d4:f2:2f:cf:b1:45:
9c:4f:7f:02:09:19:b0:1f:b1:91:ed:04:81:dc:f7:
0b:ca:9c:a6:2c:4a:9f:1c:e1:5d:4c:e2:36:66:74:
39:e1:4b:cd:b6:30:32:35:96:a5:3a:3f:31:4d:d0:
14:90:46:3d:61:da:83:e1:51:18:47:ef:79:58:59:
65:d8:f4:c1:b3:de:7b:9b:57:3e:c1:d9:ee:75:1d:
a2:dc:8d:cb:3e:36:7f:ca:32:77:04:9a:8c:5c:d2:
5c:ea:61:fd:01:fc:38:56:b4:f5:c8:16:fb:31:73:
fc:1c:57:5d:c6:64:40:23:ed:64:8b:84:36:c9:be:
57:5a:b5:5b:76:cd:0e:41:db:9a:e1:71:94:a6:2f:
e8:54:5e:37:ff:74:34:7a:dd:1a:36:c1:10:67:64:
61:a7:5f:72:19:64:95:4f:75:87:b1:fd:b6:9a:ea:
19:1f:d5:bf:e3:ba:66:4d:47:8b:27:35:cc:1a:50:
f4:33:5b:51:de:c1:66:95:23:c4:d2:d9:35:2a:48:
58:56:e9:90:d2:71:94:bc:1d:4c:73:ce:3b:b3:e1:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:F6:99:11:F7:F3:4A:49:CD:41:4F:74:06:5A:18:83:CA:6F:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5696ef1e-bf1a-345f-8e10-db3faa25ebbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:1f:d7:6f:d2:03:46:77:8c:ed:da:f9:f2:10:f7:7d:b9:6e:
3d:e3:99:37:e9:bf:07:5d:fc:4d:46:7f:f9:cc:91:b6:af:78:
35:ae:26:a5:3e:4f:3f:76:3e:63:0a:d0:da:a2:cb:ff:3b:89:
56:5f:97:a5:48:23:ea:06:42:36:93:92:a6:e9:59:a2:0a:3c:
b4:92:72:2e:3e:5e:b6:f0:a4:3b:2b:31:b5:aa:25:cd:a0:4f:
26:8f:2b:4d:a4:a1:61:47:a4:4f:1d:c1:e5:2a:bd:36:6f:c2:
72:25:5f:50:df:44:31:8d:16:4e:90:db:9e:04:17:f8:8f:40:
4c:7c:6e:95:3c:ff:2b:99:28:0a:89:be:f3:f8:e2:f7:60:4e:
b5:14:c1:6a:43:cd:54:04:c6:ed:16:98:fe:e8:55:86:18:d8:
56:f6:ba:92:b7:a5:ad:26:e7:55:42:40:07:66:34:d6:18:6c:
29:41:68:fc:24:f1:d4:f8:0a:ff:b4:a5:03:a3:93:f9:06:02:
df:b5:74:04:32:66:b3:9c:5c:3e:8e:f0:ac:97:30:f7:52:76:
3a:89:ae:73:77:35:d9:57:27:a8:02:ce:70:13:fb:24:6c:81:
7a:05:0f:a0:3e:67:c5:56:85:02:b0:7f:58:a2:41:74:0e:9a:
9d:3c:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:34 2025 by rpki-client