Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa
File: 76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa (raw, json)
Hash identifier: 8tijHlSPNFvpQac3FZoKx/4H2Lluuc/EZ30nvWQf+m8=
Subject key identifier: 3C:39:90:26:4A:1F:08:07:DC:B8:B5:15:B1:E0:9F:FD:EA:A0:B6:83
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858486C2B1E5D0E6FB3A2DA7A1B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 35830
IP address blocks: 166.1.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:1e:5d:0e:6f:b3:a2:da:7a:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=b29a1899-13e2-454b-b387-62d1cfc4f941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:fd:e6:0d:40:18:87:e9:24:ff:77:48:02:
f5:66:84:87:df:46:2f:07:4a:c0:4c:d8:c3:04:64:
38:7d:06:3b:8b:a6:b5:4f:df:78:ca:a9:12:91:e0:
d7:32:b7:b2:fc:05:67:75:29:ed:89:c2:87:ee:de:
68:68:1b:4e:ba:90:1f:e5:09:09:da:17:e0:0b:4f:
90:d1:3c:9d:15:2c:fe:82:f2:15:75:1c:ea:c4:49:
9a:a9:de:95:20:8c:26:7f:75:61:26:03:7d:67:2f:
8b:d8:e4:a9:04:fc:97:f5:2a:61:18:1b:9a:16:7e:
09:ff:21:11:30:f2:d2:05:d0:46:da:b9:a2:84:05:
9f:b3:a4:f1:af:0b:85:27:8a:8d:13:c6:66:fb:3a:
24:bd:28:c8:6b:a1:41:03:dc:af:e8:12:3f:66:49:
10:cc:46:3c:d6:54:93:a8:08:9e:fe:57:6b:fb:da:
b4:46:2b:27:3a:2a:c7:3c:8f:ce:b1:15:8b:71:63:
88:20:a2:58:8d:3f:e9:c9:87:84:c2:18:f2:b9:c8:
c2:8d:6e:82:c5:65:a5:65:c1:04:51:90:cd:99:93:
03:48:73:8c:27:be:09:13:7e:14:49:d3:1e:5b:e0:
f8:81:0d:12:8d:08:9a:8f:10:0c:57:7d:38:0c:51:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:39:90:26:4A:1F:08:07:DC:B8:B5:15:B1:E0:9F:FD:EA:A0:B6:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ed:00:80:4e:33:76:ac:85:f2:a1:b5:b0:7e:75:68:c1:36:
09:a1:79:81:2e:c8:72:f8:95:e6:3f:1f:78:fd:d9:0b:4e:11:
3c:cf:53:ab:da:a6:30:f6:fe:ae:93:b8:3e:1c:aa:cb:cf:cc:
23:1a:c7:81:32:0a:c5:38:59:a7:db:b4:f0:20:de:bd:35:e1:
88:3e:98:3e:58:fe:39:31:e1:a9:e9:93:b5:b2:50:f5:f6:cd:
46:14:bd:f9:91:40:b5:74:b8:fd:e7:ec:7c:6b:d5:72:a2:fa:
c4:f6:42:2a:44:2a:8b:df:bf:cd:f1:f8:a7:9a:79:71:52:51:
ea:c9:c0:74:61:6c:b1:80:e1:a8:54:bc:86:d5:35:23:28:d6:
e6:ec:ee:8d:fd:4f:72:9d:6e:c4:33:b1:21:b0:09:e6:64:fa:
68:39:ee:42:4c:bf:8c:de:a5:8c:94:9c:a7:7c:90:68:22:9a:
e7:37:09:88:65:96:7c:d2:6d:f0:f7:aa:e2:ac:0e:da:1f:2d:
9d:10:7f:c6:c2:f0:e5:39:40:62:c8:98:68:fd:0e:91:13:2b:
d8:ea:24:ca:72:77:80:b1:24:af:cb:c8:f0:95:ab:ba:d9:47:
84:e7:11:79:43:bd:de:5e:86:9b:73:e7:f2:ac:cd:66:a2:af:
f7:b4:96:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:37 2025 by rpki-client