Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89d48c4a-13ca-3a65-a8c5-f025ddfec088.roa
File: 89d48c4a-13ca-3a65-a8c5-f025ddfec088.roa (raw, json)
Hash identifier: WAVOcDyzFXsRJDWDGUrfO5gfz3RX/8ikcexHQE9qxJI=
Subject key identifier: D9:56:6C:11:F4:BD:BD:C4:D8:B4:E5:AB:CB:3B:BC:B2:78:B7:B3:92
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F802DCDDE9ED53F630BD5A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89d48c4a-13ca-3a65-a8c5-f025ddfec088.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2d:cd:de:9e:d5:3f:63:0b:d5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=ed88fc86-abf6-4a2c-9aae-f414832a1361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:72:fc:65:6d:31:82:d1:83:ce:82:26:2f:
15:e8:87:ec:c3:50:9b:cb:ff:bd:3a:94:c5:18:14:
5b:51:b5:68:c0:b1:da:2f:16:e2:3e:c5:22:cc:1f:
0e:ba:eb:12:49:69:96:1f:5d:25:b0:a2:52:ce:1e:
a3:1e:88:57:3d:9c:04:fb:c2:0d:80:74:37:77:68:
28:e8:4c:66:7f:d4:ed:6f:9b:dd:98:e4:8d:c1:7f:
f6:86:f7:c9:51:a0:eb:a1:3a:8e:d8:35:ed:78:e3:
44:2d:70:72:ba:54:a1:76:41:59:46:d4:d1:dc:dd:
51:9a:b0:9d:28:fd:a0:97:90:2f:77:d1:76:85:43:
1c:3b:f4:68:0c:0e:7a:fe:b9:f7:6a:08:b1:d4:5d:
e3:cb:ea:17:c5:92:eb:5c:f0:fb:31:4a:80:1d:97:
24:b9:bd:1e:62:fc:1d:e7:f2:15:4a:e6:e9:3b:83:
58:98:c0:e0:87:80:64:56:05:13:ba:92:10:72:b4:
e4:e1:5c:99:7c:ae:ee:98:16:2f:6b:d3:28:00:40:
e3:62:52:82:5f:e5:b4:c1:1f:04:10:25:76:74:cc:
1b:d3:d7:ff:ae:e4:ea:b8:99:e5:a5:02:0e:51:90:
33:01:1e:2c:82:29:73:c4:73:68:9b:23:66:9b:71:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:6C:11:F4:BD:BD:C4:D8:B4:E5:AB:CB:3B:BC:B2:78:B7:B3:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89d48c4a-13ca-3a65-a8c5-f025ddfec088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:93:13:75:a1:c3:1b:f6:fe:06:8a:2d:7c:35:9e:4e:d3:ec:
9f:66:bd:aa:a5:ca:aa:99:8c:01:ea:d0:85:12:72:41:a8:ef:
23:72:4c:40:83:af:58:16:e5:8c:8f:0c:92:39:81:36:c2:bb:
b5:7d:7f:95:d8:2f:9e:94:ba:4b:3e:07:10:d8:d8:b2:9c:a0:
36:82:2b:52:e8:cb:35:38:e1:92:e6:57:b2:37:5b:16:ff:dd:
d0:e1:5c:17:d5:9c:fe:9c:d1:13:55:ca:3d:27:54:6d:5f:2a:
d5:88:a0:10:54:f2:09:5c:b6:34:cf:7e:e2:a9:ef:69:6d:eb:
3e:f2:0c:b3:fd:bd:ff:76:0d:c2:bf:bc:b3:f2:50:f0:39:4c:
57:36:8a:00:d8:6c:36:ae:92:22:8a:ce:f6:a3:de:e2:1a:f7:
97:20:51:37:43:94:4a:5b:52:47:99:ef:4f:ec:15:08:4b:77:
86:bc:f2:eb:38:ef:b9:da:61:22:02:a5:90:39:45:d9:31:53:
5a:0d:83:c8:38:f8:2b:1a:3f:71:c3:77:d6:e1:c8:f1:fe:ba:
13:07:fb:83:cd:91:49:31:a5:ac:3a:5b:38:ce:7c:f1:96:d6:
76:5b:81:fe:cd:26:ca:46:9e:41:41:f2:63:3f:eb:24:6d:59:
d0:cc:65:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:08 2025 by rpki-client