Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/828a680c-bf48-3eca-abbe-98136f2c8d1b.roa
File: 828a680c-bf48-3eca-abbe-98136f2c8d1b.roa (raw, json)
Hash identifier: GYsRC9D1UOf5pBUhostNn09Yq9F+s2C0N6e/YBBryEg=
Subject key identifier: 81:67:FA:D7:B4:CE:25:04:18:19:4A:C1:F7:1D:37:80:0E:AF:A0:D3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA428CD7B0260F628E8B000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/828a680c-bf48-3eca-abbe-98136f2c8d1b.roa
Signing time: Mon 27 Jan 2025 18:04:07 +0000
ROA not before: Mon 27 Jan 2025 18:04:07 +0000
ROA not after: Sun 27 Apr 2025 17:04:07 +0000
asID: 11798
IP address blocks: 166.0.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:28:cd:7b:02:60:f6:28:e8:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:07 2025 GMT
Not After : Apr 27 17:04:07 2025 GMT
Subject: CN=365ebfe7-7e5f-4ebd-9ad4-14faae612352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5a:65:cc:2f:30:24:16:a6:98:fb:70:77:7e:
c5:dd:bb:aa:66:b7:cd:05:1f:64:d3:2c:52:35:bd:
59:e3:64:b3:6a:ff:97:19:db:65:74:67:62:4f:d3:
8d:ad:be:96:fb:13:be:00:2c:e9:5b:67:ee:4b:8c:
99:d5:a5:b2:19:79:93:d0:2c:d6:10:de:74:cb:3a:
3a:8e:13:12:8c:00:16:2b:6c:97:23:8b:66:b3:6f:
ed:ac:7b:17:6e:9e:4a:6d:2b:86:86:5b:1b:9a:45:
a5:96:97:df:c9:8c:61:40:00:ef:76:a8:03:a0:a1:
db:cc:2b:ea:b2:d5:97:8c:1c:2d:78:85:cc:a6:39:
3a:87:38:28:e9:b0:f0:fc:1f:11:1e:39:b5:62:db:
9e:d8:05:d0:c8:61:22:e9:3a:00:e1:10:2d:cf:59:
56:2a:f7:e4:dc:e4:72:ac:2e:5f:e5:a9:00:57:19:
9b:7e:47:ee:84:6b:40:ad:37:91:8a:af:2f:a3:14:
43:4b:85:2c:2b:fa:45:9e:de:2d:66:97:c1:12:cc:
36:c0:af:26:e3:3a:e2:d2:d0:3b:d2:75:bb:c4:d1:
7b:67:f6:4f:d0:1e:56:27:54:b2:ba:e8:c7:33:1f:
bc:70:b9:0f:e6:59:47:0a:31:6d:43:1d:3d:69:60:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:FA:D7:B4:CE:25:04:18:19:4A:C1:F7:1D:37:80:0E:AF:A0:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/828a680c-bf48-3eca-abbe-98136f2c8d1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:96:7b:76:06:96:ef:55:9f:95:5c:01:2b:dc:3b:6c:4a:39:
63:6a:95:3a:79:a6:6a:6d:c3:95:90:3b:55:99:70:cc:c1:09:
6a:4a:f5:ed:53:6e:de:f7:5c:f0:b7:39:6d:a7:5b:dc:1b:76:
07:5c:d9:27:b8:73:86:63:73:ae:91:2c:23:13:7c:db:80:37:
8e:1c:e4:0e:17:4e:5c:38:ef:5d:63:ab:84:cf:ac:d7:2f:d6:
dc:52:06:ef:f1:69:3e:7f:0d:d8:af:62:95:50:f1:9c:36:9d:
b3:8c:1b:00:78:65:1f:dc:75:90:4b:41:ff:41:70:3d:6f:2d:
e5:1a:1b:2c:aa:8e:f5:99:23:43:76:0b:5d:1b:7a:2a:e5:0f:
ba:3f:8c:36:36:23:40:21:91:0f:6d:80:7a:fa:16:5f:5f:03:
80:1c:05:4a:7e:bd:3a:d0:b4:ee:4f:72:fb:8b:6d:fe:b4:e6:
28:6c:cc:6a:61:cd:a8:80:99:cb:47:fe:5e:16:33:01:16:c1:
8d:f7:88:29:af:33:84:e0:c3:13:92:33:e3:4d:4d:e4:56:f5:
0c:5e:2f:02:bb:76:5c:a2:df:c2:03:e9:0c:e6:e9:97:2b:bf:
e5:1c:2d:cb:1e:61:78:30:50:4f:e2:5c:67:f0:6b:fd:6b:b7:
6f:13:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:04:50 2025 by rpki-client