Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fdc6be7-c44e-3ccc-ac9d-41e9e7ddfe0e.roa
File: 6fdc6be7-c44e-3ccc-ac9d-41e9e7ddfe0e.roa (raw, json)
Hash identifier: tFPrmhVFqoT5NDirgs5+KSKXUC1GeiwE6WMpeIVY64o=
Subject key identifier: E7:4B:16:56:8F:5B:D2:03:D3:70:7A:46:AC:77:80:0D:78:B8:32:75
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584834558146523C213B59CB75A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fdc6be7-c44e-3ccc-ac9d-41e9e7ddfe0e.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 44477
IP address blocks: 166.1.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:81:46:52:3c:21:3b:59:cb:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=7092de73-bd32-4448-bd02-3b32fb519f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:54:d3:9c:7c:7d:7f:21:ca:b1:bb:bd:37:
e6:ae:4e:3e:a6:d5:cf:b3:fe:ef:84:91:a0:d2:b8:
12:fe:9f:b8:3e:be:72:53:9e:14:f4:3e:4f:9f:62:
04:5f:3a:15:eb:89:bd:1d:aa:f9:9c:dd:d0:3c:44:
31:06:14:a6:3c:e4:80:4d:f4:11:a3:3f:92:50:fd:
00:ed:d0:ff:ac:36:4a:2e:3f:16:a4:ac:97:e8:7e:
b7:1d:58:ad:62:9e:b5:38:ae:65:61:77:1d:71:e8:
3e:fa:8e:3f:25:93:80:2a:23:dc:15:aa:96:3c:a1:
ff:23:d9:e7:74:99:fd:54:70:bb:cc:19:02:78:41:
fb:fa:2c:f9:a2:5d:dd:2c:1c:a5:7e:a4:92:9c:87:
1c:da:93:04:ed:ed:6e:57:86:5c:eb:69:89:25:7c:
0b:97:6e:f9:99:0c:74:61:ed:9b:18:90:4f:b6:7a:
5f:b3:68:4f:ca:46:62:cc:a8:38:a8:04:70:8e:06:
7d:6e:fe:90:f8:b9:bf:5d:41:d3:c4:9c:0a:d5:65:
c8:07:69:19:a8:87:99:68:c3:b0:69:7f:d7:3e:a5:
95:dc:15:f8:f5:c0:9e:f6:ad:74:cf:45:4c:aa:a9:
a8:c9:cc:31:03:d4:2c:ba:3c:8d:45:e5:79:da:44:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4B:16:56:8F:5B:D2:03:D3:70:7A:46:AC:77:80:0D:78:B8:32:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fdc6be7-c44e-3ccc-ac9d-41e9e7ddfe0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:5a:93:d6:d5:48:48:65:9d:fc:40:56:bb:8d:26:16:38:0f:
ac:31:0f:59:bd:ee:e3:58:0c:a4:80:f2:9a:62:f0:82:f7:ff:
0d:c4:5f:14:08:c7:84:b5:4d:67:59:e1:c2:80:d6:b9:6c:61:
8c:fa:6d:f9:da:01:bf:7e:ca:c8:67:13:e1:36:6d:97:77:ed:
d1:4d:40:5f:65:f3:61:42:ed:b7:a8:20:b6:5f:d6:73:f5:a5:
ed:94:99:47:b4:d0:d3:46:65:7b:fb:2a:2f:01:37:9b:79:64:
56:2d:eb:74:f1:5e:13:f2:2d:7b:d0:51:a9:96:19:9a:49:c6:
fb:75:97:f9:fd:f0:72:3a:3c:c0:ce:a9:e9:68:67:b9:aa:3f:
1c:d8:ab:bb:39:1e:6f:7d:37:a5:7e:fb:90:d3:29:38:b9:5a:
88:3a:30:73:79:86:ae:8e:85:3f:7b:b1:0c:22:92:53:6e:d0:
bd:1e:55:2d:87:db:ff:bc:96:01:5e:f4:5d:4d:76:c8:ad:c7:
a5:f5:7c:10:27:ce:cb:e8:9a:ad:e7:79:0b:11:73:c3:5c:60:
6a:ca:db:61:e5:1e:ce:71:fa:7e:d8:c7:27:d6:fa:aa:72:a8:
84:35:7f:ce:52:49:f2:e1:c9:82:7d:26:00:ae:68:20:bf:2c:
d8:8f:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:50 2025 by rpki-client