Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5c0dd09c-77cb-353f-9dfb-10f5c91bb809.roa
File: 5c0dd09c-77cb-353f-9dfb-10f5c91bb809.roa (raw, json)
Hash identifier: TCyCnm6HK/KvHFOB81GfOiZiG41WQRVmDQK00An+AQo=
Subject key identifier: 56:26:72:2F:DB:38:12:CA:0A:D3:85:48:E6:9F:1F:97:AA:95:72:D4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584869DE1F5EF3701B993D359D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5c0dd09c-77cb-353f-9dfb-10f5c91bb809.roa
Signing time: Thu 02 Jan 2025 18:14:19 +0000
ROA not before: Thu 02 Jan 2025 18:14:19 +0000
ROA not after: Wed 02 Apr 2025 17:14:19 +0000
asID: 10103
IP address blocks: 108.165.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:de:1f:5e:f3:70:1b:99:3d:35:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 2 18:14:19 2025 GMT
Not After : Apr 2 17:14:19 2025 GMT
Subject: CN=18eb67f7-f113-4e54-869e-376d2baf97f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:08:80:99:e3:2b:82:e2:a0:80:30:41:2e:
89:76:bb:9c:88:f7:16:3f:be:d3:c6:e2:bd:b4:4a:
62:0c:c0:50:eb:49:6c:d6:e0:f6:28:8e:5c:01:c3:
17:68:6a:8b:76:13:ed:fb:73:52:d9:ba:10:24:56:
6b:2d:b4:8d:5a:55:61:7b:13:fd:a8:33:0a:3c:9a:
a6:db:dd:17:25:9c:99:09:75:9a:d5:ca:98:64:5a:
45:fe:85:85:77:57:9a:2c:ae:3b:fa:a9:ff:39:5e:
46:02:09:6f:00:d2:f9:a7:cf:59:0a:4d:34:53:5c:
9f:02:08:be:af:a8:e9:bf:01:40:8f:2c:df:b4:9c:
40:c9:78:ef:9b:bb:3a:ad:00:fa:c2:7f:14:d3:02:
05:49:45:d3:e7:bb:98:8a:4f:72:ac:e8:7a:38:ff:
55:b5:c9:ae:dc:5f:8a:de:5b:e6:a6:9f:9a:67:8e:
db:42:2e:d8:fd:24:d4:c2:10:ed:ed:80:78:4e:74:
d5:2c:11:74:5a:48:b3:ac:fa:5d:cf:8d:9e:c6:c4:
37:af:50:0a:26:8b:2f:4f:34:3e:b5:97:00:0a:f6:
02:36:5e:a7:0a:8c:13:a3:44:72:3b:e2:b7:1e:d4:
91:c0:08:ec:65:f6:26:ca:fa:03:6e:35:64:7c:03:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:26:72:2F:DB:38:12:CA:0A:D3:85:48:E6:9F:1F:97:AA:95:72:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5c0dd09c-77cb-353f-9dfb-10f5c91bb809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c4:f4:e1:52:47:d8:f0:64:82:6a:71:c0:f9:04:ff:81:c6:
a1:32:95:8a:c1:4f:d3:f1:cc:55:37:1f:d1:e6:41:a6:d4:6a:
a5:3a:0d:1e:1e:ff:4e:7f:76:ae:85:b5:51:be:28:0a:53:9c:
53:8c:4b:81:22:02:1f:b9:7e:b7:96:20:15:99:49:0f:e4:40:
f1:2c:57:e6:14:a0:a3:34:d3:65:19:0e:61:c7:47:11:99:bf:
40:31:07:c2:55:f2:b1:bf:0e:39:d8:5d:a1:71:64:70:19:bc:
ed:c6:ac:14:1f:9f:52:fb:35:a6:df:48:ca:7c:47:7c:31:10:
7a:99:01:64:db:12:30:e7:80:49:f3:d8:62:2c:ea:01:cc:21:
84:a3:ed:91:c6:df:57:e7:28:ea:6a:e8:31:04:e0:45:91:b3:
87:ff:f3:96:ce:fa:6e:21:b4:c9:b2:b7:a5:3a:cb:c8:2c:5a:
17:aa:0f:57:3c:cb:9a:ba:bd:8e:4c:25:9f:74:f9:cd:86:cf:
23:51:99:c6:cf:ea:06:ee:d5:c0:91:3e:07:40:de:84:7c:8a:
7b:f4:9b:15:e6:86:1e:07:36:69:3a:6b:fd:e4:86:f0:54:fb:
28:91:f8:b9:36:a3:46:1e:a6:fe:33:48:33:e4:7b:c5:23:22:
5b:e5:e5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:11:01 2025 by rpki-client