Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6b860283-eb1d-319f-8313-14a444b667b8.roa
File: 6b860283-eb1d-319f-8313-14a444b667b8.roa (raw, json)
Hash identifier: 0aSPOKc+n5j9OoyECT9CB0PQsb8Msv5PxnJq7A8r4a8=
Subject key identifier: 71:D1:88:DC:D3:19:BB:61:3B:33:61:3C:D1:44:89:2C:20:EE:45:0C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858487755DA713AFB9E00EC49B8C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6b860283-eb1d-319f-8313-14a444b667b8.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 23005
IP address blocks: 166.0.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:da:71:3a:fb:9e:00:ec:49:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=322fd004-d772-4331-8365-5df3cb343304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:a7:60:58:a5:eb:da:f9:49:2b:68:ae:db:
fe:f2:bf:78:81:e4:d8:d8:b1:05:23:aa:f7:93:10:
6b:9a:3a:09:17:99:e5:fb:31:da:c4:39:8e:b4:05:
b7:e4:c4:79:b2:0e:e8:e5:3d:d5:6d:0a:3f:1c:2b:
85:4d:49:b9:71:7a:b6:ac:70:6f:4e:90:df:b4:56:
11:b9:7d:ef:ce:dc:73:f5:9a:2a:78:24:06:f7:6d:
c5:8c:17:9e:a5:b5:5f:31:64:8b:54:20:4e:4b:cb:
3c:5c:bb:4b:71:c0:1a:db:4a:53:7a:b3:c5:1c:35:
dc:85:d8:14:f2:7c:ae:ba:29:fe:57:1c:0b:d9:26:
ba:38:87:31:55:63:f9:ad:06:8a:a6:d9:84:b4:4e:
4f:ec:59:31:00:7d:62:c1:c5:08:2c:50:70:3a:03:
c8:0f:54:c0:c2:f4:1a:14:72:f0:4f:95:f7:26:c2:
68:2d:25:ad:c4:3a:b4:ec:cd:e9:48:95:04:ce:32:
de:1f:09:7e:fc:f6:8f:a1:cb:be:3d:f7:cd:0e:b6:
60:af:41:e7:98:16:3f:b5:1b:f1:b6:30:1c:6b:c8:
cd:07:8d:dc:ce:a5:7c:60:04:c9:04:49:4f:82:dc:
8e:ca:5c:c0:2c:ba:0b:97:69:31:90:14:7c:21:ae:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:88:DC:D3:19:BB:61:3B:33:61:3C:D1:44:89:2C:20:EE:45:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6b860283-eb1d-319f-8313-14a444b667b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:7a:ca:3f:fa:04:2a:04:b0:2a:87:d2:38:1d:44:45:e6:14:
a9:c0:af:b5:ee:5d:cf:3d:57:49:8a:1e:98:42:68:4b:75:fc:
ab:64:3e:3f:b5:b2:ef:a6:73:a6:7b:66:57:43:10:5c:1c:9d:
8e:ac:56:17:81:4b:ea:11:11:f5:03:3c:09:80:68:3a:87:ca:
52:e3:13:89:e6:9e:8e:08:05:e7:a8:b9:4a:ee:16:a5:da:22:
80:65:16:ee:bd:ec:51:97:e1:d2:ee:9d:5f:c3:52:a7:2c:90:
42:f1:70:1d:93:1f:e4:6d:3c:d9:60:75:13:f2:79:a4:d6:76:
90:dc:a7:9e:c8:7d:d6:d7:a5:4b:34:f5:c5:6b:54:da:6c:e9:
cf:87:2a:93:2a:c6:15:f4:ec:89:8b:bd:1d:03:4c:11:0a:2c:
66:53:37:08:12:82:d1:82:cf:eb:b8:97:d1:7e:7b:ce:f8:24:
01:07:10:b1:16:0e:26:11:96:80:01:de:f3:18:dc:99:c5:62:
22:c8:fa:8e:e7:24:9d:bb:2b:d5:f8:c0:46:29:99:1b:08:c8:
38:35:0c:80:35:bc:89:2f:84:53:cb:34:a9:1d:3f:2c:18:a9:
2c:7b:8a:1c:dc:16:11:20:16:40:1a:cd:4c:ad:6e:21:76:75:
77:1c:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:33:03 2025 by rpki-client