Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bc4c10e-8198-3423-9ef8-fe91445ec469.roa
File: 5bc4c10e-8198-3423-9ef8-fe91445ec469.roa (raw, json)
Hash identifier: FvefSbFSjol+NvxWnynqg8wnMhiozxiGuC4F/LNtBrI=
Subject key identifier: E7:2E:62:09:83:AA:79:77:D4:8E:AA:58:00:74:AD:9B:DD:F4:8B:92
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA428F141759CB071752100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bc4c10e-8198-3423-9ef8-fe91445ec469.roa
Signing time: Mon 27 Jan 2025 18:04:07 +0000
ROA not before: Mon 27 Jan 2025 18:04:07 +0000
ROA not after: Sun 27 Apr 2025 17:04:07 +0000
asID: 11798
IP address blocks: 166.0.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:28:f1:41:75:9c:b0:71:75:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:07 2025 GMT
Not After : Apr 27 17:04:07 2025 GMT
Subject: CN=d6d94d2e-20b9-415c-b22f-f03e9c3f6263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:03:c7:a7:67:57:29:7b:49:7d:22:8f:16:f0:
61:d8:9a:b1:00:d9:2f:68:d2:bf:c6:54:9f:49:0d:
c7:17:fe:69:de:ed:49:6c:37:17:6a:3a:5c:e6:61:
1d:7a:07:5b:4c:fc:25:74:2c:3b:8a:e4:2f:46:65:
23:a9:ed:7a:11:64:b5:84:23:90:af:ca:7e:fb:ad:
63:59:c0:44:96:28:34:11:27:86:32:5d:66:fc:f9:
91:f4:78:55:89:e9:7a:79:cf:23:d5:30:a7:8a:52:
ca:3e:c5:68:4e:71:4a:57:1b:2a:e9:b8:8c:5b:50:
81:98:07:b6:ef:cb:a3:cd:ab:e8:36:15:2d:ab:82:
b9:59:06:97:42:03:97:87:22:de:9d:d4:2e:c6:8d:
5e:87:06:61:43:a3:50:da:85:18:ed:d7:1f:ed:7d:
1a:22:fe:4d:34:78:6c:c3:7c:ad:ca:e0:c1:a6:45:
43:af:cf:ac:87:a5:35:a9:af:58:7f:79:6d:e1:27:
0b:88:2f:13:9e:91:38:c4:fc:31:89:5a:fa:3e:83:
69:94:22:be:2e:6e:94:c9:7f:23:2f:3a:6c:90:20:
84:dd:31:88:56:ba:82:d8:cf:ac:18:96:93:3e:a6:
5f:de:cb:ed:c8:0e:25:11:23:c0:98:c1:90:fa:cf:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2E:62:09:83:AA:79:77:D4:8E:AA:58:00:74:AD:9B:DD:F4:8B:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bc4c10e-8198-3423-9ef8-fe91445ec469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:5d:ab:40:14:44:95:8f:57:f4:67:72:9d:88:03:04:4f:ed:
a3:cb:73:b8:83:01:95:f4:97:57:1e:d4:a9:42:5c:ad:26:8c:
f2:ea:52:22:57:fc:55:0d:32:3e:0c:e0:7a:0e:2d:29:84:60:
cf:dd:e0:db:19:58:81:ea:d2:d8:87:41:2f:ad:22:b6:c2:8a:
5b:64:37:74:32:74:1e:77:48:38:96:ca:2c:4e:9e:2a:ab:89:
3c:fd:d1:60:8a:8d:9c:65:9e:af:fd:76:ed:b6:d7:d7:f2:08:
7e:80:a7:ea:d0:51:f8:68:f6:c5:83:44:18:84:0e:bc:9d:c8:
be:b2:29:19:a3:ff:d5:48:5c:ca:b9:58:53:3b:b7:ed:55:de:
7f:c8:a7:47:2f:1d:f0:b4:2f:6f:9a:e5:12:1a:b1:7e:60:0f:
9f:a8:59:d1:4d:12:5d:88:80:6e:aa:59:01:91:18:d7:df:b2:
a8:b0:8a:9a:4b:bc:5a:44:7b:cd:8a:e5:1d:31:46:c8:42:0f:
02:23:4a:23:57:09:55:70:b9:c6:82:e7:5a:63:fc:70:56:8e:
a5:2e:80:64:da:56:40:a8:58:77:66:a2:e5:45:07:60:19:c8:
14:03:12:5e:1c:cd:07:e1:d3:09:fa:52:aa:b4:c7:11:b0:79:
79:10:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:37:41 2025 by rpki-client