Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ad5277f-b359-3f57-8263-674c11822f1c.roa
File: 7ad5277f-b359-3f57-8263-674c11822f1c.roa (raw, json)
Hash identifier: 0w2KZY2fMpX9uq1ZWwYAj7okao2sbfBvbM91hnZBluM=
Subject key identifier: B2:35:D6:ED:97:5E:4B:D4:38:4A:52:C5:E6:0F:80:20:78:8D:47:52
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848388561F5CB9D0BE6B5F79950
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ad5277f-b359-3f57-8263-674c11822f1c.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 5065
IP address blocks: 108.165.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:61:f5:cb:9d:0b:e6:b5:f7:99:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=8501d904-75a7-448d-b50c-615898bb605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:5f:0c:2c:03:23:16:bf:90:2e:68:83:05:
63:ad:37:ae:85:5c:a5:5e:21:8a:7b:3f:b6:0d:5e:
03:51:93:73:2f:ac:ca:45:99:cb:40:f4:43:b9:95:
7b:be:3e:16:5d:21:76:0a:cb:18:4d:b3:32:02:d8:
58:bb:d0:c0:5d:f1:16:de:2b:64:28:88:24:0f:20:
28:a4:4d:7b:c4:a4:7b:93:d8:57:19:9e:85:80:c7:
26:07:ef:6f:e6:35:db:8c:f5:a8:23:19:12:3f:18:
57:05:ea:a6:5d:e1:4b:f9:3f:90:c0:90:7d:34:7d:
f8:7d:14:45:3b:63:0e:7d:58:07:90:f4:93:23:2b:
b5:1e:c2:8e:66:fc:9a:0f:97:a5:43:cd:f0:a6:5d:
df:3b:fd:55:39:f1:3c:0c:52:05:82:13:24:91:7d:
6a:f5:94:59:80:62:01:34:50:7e:1e:37:49:65:41:
65:fd:bd:e1:54:17:46:13:89:68:a8:13:8e:eb:2d:
42:4e:16:a3:c5:e2:52:af:02:b1:89:53:6e:21:b5:
94:13:67:53:0e:ad:5a:0a:ff:e3:20:54:fe:43:ce:
99:13:6a:6f:05:29:fb:b2:39:b5:9b:f0:01:0a:24:
ec:dd:e6:12:17:72:77:20:eb:00:da:fc:ca:2f:23:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:35:D6:ED:97:5E:4B:D4:38:4A:52:C5:E6:0F:80:20:78:8D:47:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ad5277f-b359-3f57-8263-674c11822f1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:d9:d7:4e:81:09:fd:7a:77:a2:a2:33:9f:b4:75:2c:23:61:
5f:28:5d:69:ab:e9:4a:b0:9d:ed:a5:e6:6a:9d:9e:ff:85:2a:
a9:2a:60:ee:18:17:0a:c2:9c:e9:f6:ac:47:33:11:de:1d:a2:
96:a8:8a:21:b9:5f:af:84:03:cc:09:c8:33:3f:cf:3a:47:ae:
97:59:1f:11:9c:6f:db:4a:26:2c:63:be:38:e8:d4:7c:88:6e:
55:51:ec:f9:7a:45:1d:56:45:48:0d:6d:4d:3b:3c:72:42:c7:
b3:5e:bc:02:27:ab:d1:54:7d:5b:ee:cc:20:c4:4f:1f:27:c0:
3d:e0:d3:b6:cc:ca:a5:35:96:de:8c:b9:fb:dd:6c:d4:58:2c:
f5:bb:48:ee:37:10:d6:87:d6:92:00:38:7d:d1:d1:fa:9e:38:
8e:5b:c0:a9:4e:f5:73:2a:91:e6:14:10:9d:45:f0:0b:fb:3e:
fa:34:74:d3:e9:d2:c6:26:5e:ba:83:41:fc:b0:bf:49:ba:7f:
f7:46:ae:67:af:ed:ed:7d:3d:d1:90:ce:63:e0:3c:79:e2:a3:
9c:fb:c3:04:66:3b:ce:53:37:6b:22:54:a4:0a:d3:f6:fd:f2:
6d:8c:25:8c:6f:96:6d:99:e4:b0:82:50:8c:b9:c3:0e:a2:30:
e3:ca:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:07 2025 by rpki-client