Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87f9dcc7-c3ed-36c9-a953-0ee4a5eaa2b1.roa
File: 87f9dcc7-c3ed-36c9-a953-0ee4a5eaa2b1.roa (raw, json)
Hash identifier: HXP5/7eeM8/3j0yYhTacdCmrjOM+3PMJfS3G7HaVScY=
Subject key identifier: D2:D4:4E:1B:5F:1C:B6:E5:6F:EA:BA:2C:42:2E:BB:B4:6B:42:47:3A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847FDE4D734A9C31202A755DC50
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87f9dcc7-c3ed-36c9-a953-0ee4a5eaa2b1.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 57731
IP address blocks: 166.0.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:d7:34:a9:c3:12:02:a7:55:dc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=1349d20b-9fe2-4052-8928-abe4e1720366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:52:8c:2d:91:36:70:b9:62:e1:af:ce:63:
7d:26:dc:19:2e:26:e6:b0:27:b1:b1:bd:f6:0c:8c:
20:84:2a:e5:a8:dc:43:65:be:56:b5:56:fb:a5:d3:
24:74:fe:1e:16:ff:4d:6e:c1:82:c3:84:32:42:95:
27:e1:34:9d:16:af:f2:ff:c3:ac:0f:99:5c:db:2e:
5c:d9:16:49:ba:e7:1c:1c:d7:ad:4b:4e:8e:d2:23:
fe:81:3e:2d:6c:3f:0a:14:7d:6d:48:6d:51:fb:b2:
0c:4a:d7:f4:37:8f:25:30:99:57:9d:3a:86:bd:08:
58:98:c7:20:8f:ab:c2:f1:7f:c5:8a:dd:2d:ce:14:
91:a1:e0:ae:a8:1e:ef:5d:40:c0:81:d3:f0:d5:86:
6a:38:9a:6e:96:fa:31:26:47:aa:73:f9:d3:cb:5b:
48:39:f6:c4:6c:a5:94:af:19:f4:d5:d4:0f:8e:76:
d9:cf:5e:cd:58:e7:a4:fd:8f:9c:1a:e8:ab:ed:6c:
bb:e8:ea:bb:76:1c:67:8c:0b:03:18:6d:ce:67:67:
3f:34:5f:5e:aa:76:a1:74:ba:bd:8f:37:d9:f7:58:
08:33:cd:2c:9e:69:0f:d1:20:f5:bd:eb:7f:7d:11:
4b:47:78:6a:7f:0c:4c:f4:83:6d:1a:58:92:3f:9b:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:4E:1B:5F:1C:B6:E5:6F:EA:BA:2C:42:2E:BB:B4:6B:42:47:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87f9dcc7-c3ed-36c9-a953-0ee4a5eaa2b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b9:a7:fd:97:af:26:23:d8:2f:c1:ac:9d:72:2f:10:79:30:
f1:a8:c1:91:ac:32:c1:2d:8a:30:88:26:f2:79:21:b2:2a:b9:
f4:a3:9b:85:b3:8d:a7:7e:57:c5:85:f6:b2:a7:b9:3e:b5:9e:
f1:d1:e6:80:1a:86:f8:e3:f1:6c:e4:2e:5e:c9:a8:c5:cc:64:
1d:f2:16:be:6f:e7:62:b8:ef:e0:03:98:44:fe:af:df:7e:f4:
da:dd:82:f0:41:9d:46:96:ca:21:bd:4b:10:2b:ea:30:8c:10:
c0:28:bd:e0:7d:88:85:6c:60:d1:ec:63:79:f7:5f:56:1e:7d:
f2:eb:c4:bd:33:90:29:cc:f8:7c:81:01:eb:9a:fa:72:4c:c1:
5b:57:ba:c1:37:3f:4b:d4:39:bd:fc:02:bf:45:42:d8:2a:83:
d8:1f:63:bb:03:50:5d:dc:9b:e2:8c:8d:b3:d3:43:ed:32:43:
a8:77:ba:1c:cf:34:78:17:8b:88:f6:23:c7:53:f7:0d:d7:06:
da:d1:a8:cc:5a:26:61:aa:4e:48:51:81:49:dc:55:eb:65:ec:
b7:3e:de:de:5c:89:51:94:9d:bd:60:b8:5c:79:b0:39:77:66:
9f:32:fe:b2:a2:3e:22:71:67:89:8e:33:ef:98:46:0c:e6:75:
11:c4:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:03:57 2025 by rpki-client