Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66993864-6aa5-3b9a-a35d-af889ce92b4b.roa
File: 66993864-6aa5-3b9a-a35d-af889ce92b4b.roa (raw, json)
Hash identifier: 8bF356rRRoQDQilkZPCgWZZULMj8mjRGkNyiAfCYc/Q=
Subject key identifier: D6:DC:F7:0E:97:02:68:F4:D5:10:79:61:35:BB:2E:79:A1:06:F6:E0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489075FD65964DDD91A3168840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66993864-6aa5-3b9a-a35d-af889ce92b4b.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 61317
IP address blocks: 108.165.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:fd:65:96:4d:dd:91:a3:16:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=a0210a51-1bd2-412f-b945-8abb5d42bb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:79:f0:78:6d:5b:61:d2:dd:93:5d:69:12:
ba:97:b3:be:ab:97:91:f6:de:9b:ee:1a:65:36:3d:
ac:fd:13:ca:24:08:b0:d6:31:1c:58:17:2f:68:67:
d2:30:b1:85:b7:34:9e:71:09:33:6f:40:22:66:37:
51:88:e6:47:03:cd:3a:a5:a5:61:3f:61:c1:75:69:
36:45:12:44:8b:ed:69:55:05:96:8c:21:3d:34:56:
61:3a:48:cd:1d:9e:c5:f4:57:2a:64:8e:1a:c1:7a:
a6:29:7c:ec:b0:31:6c:0d:7a:c7:89:08:30:1d:66:
b4:40:3c:a6:23:d5:81:87:34:67:b2:a1:76:c2:88:
88:11:8e:f6:5b:a2:4a:c4:84:64:0d:70:f6:1d:f6:
f2:0a:7a:9b:31:b6:87:81:99:b0:94:c9:c1:52:0f:
4e:e5:73:46:0d:fa:6b:37:49:72:a7:b6:b6:22:2e:
c6:de:9f:42:44:10:84:fc:c2:21:cd:27:f1:07:29:
5a:9e:98:0a:f8:d2:54:8b:43:0c:11:fc:e6:34:7d:
26:65:8f:fe:72:01:78:a5:13:8a:95:01:05:38:75:
2b:6d:95:4c:85:66:ce:5e:71:74:ac:b1:47:20:87:
ee:5c:83:fb:85:04:96:2d:d4:c9:e3:11:8c:1b:56:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DC:F7:0E:97:02:68:F4:D5:10:79:61:35:BB:2E:79:A1:06:F6:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66993864-6aa5-3b9a-a35d-af889ce92b4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:9f:cc:8f:2d:05:1e:3f:bf:7f:73:2c:00:dc:0c:74:b6:75:
b7:21:e9:98:ec:89:de:47:88:e3:c6:98:0b:a3:b1:a2:31:c8:
46:85:5c:c0:15:98:f5:24:01:01:d4:5f:7c:59:91:2c:5e:ae:
90:65:d1:33:6c:ac:1f:34:9c:c5:b4:94:23:b4:7e:d9:99:ca:
13:ef:9e:6c:22:2b:fa:05:83:dc:cb:e4:9b:0e:43:15:25:24:
9d:ae:ed:8b:33:3c:f4:e1:f4:24:7b:ba:56:15:af:54:48:68:
0e:7b:6f:c4:cf:5e:43:db:82:77:d0:e3:ed:3e:03:af:f4:80:
86:85:ad:cd:08:27:c4:18:f3:cc:5a:85:d3:3c:2c:53:95:e0:
d3:19:2e:eb:4d:a2:f2:d4:f7:2a:12:5a:17:c7:c2:85:0b:77:
9d:1f:5d:bd:4c:14:8e:94:b8:b4:c4:fc:b9:5f:0a:ca:3c:ed:
97:33:be:aa:96:84:04:56:0d:9d:b4:68:86:36:07:69:4d:bb:
20:13:11:22:0e:57:c8:e9:8d:bb:39:c7:db:ea:9f:29:a9:de:
a0:04:bc:9c:d9:02:12:9a:b0:64:bb:0c:eb:92:c8:75:3a:10:
a7:eb:c3:48:4b:d8:16:5e:6f:43:4c:01:b7:84:6e:4b:9a:02:
62:10:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:35 2025 by rpki-client