Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8cae73cb-fe10-3578-a3a5-57754eddc775.roa
File: 8cae73cb-fe10-3578-a3a5-57754eddc775.roa (raw, json)
Hash identifier: 5jGVkaJ4HIAwGZJuWPJ4g3JXjomSDlGneRXnGEX28DA=
Subject key identifier: 12:1B:B9:F2:C3:29:40:02:78:8D:F0:26:27:D7:E8:AD:94:80:6C:39
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F802F695C97383BAD9C5780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8cae73cb-fe10-3578-a3a5-57754eddc775.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2f:69:5c:97:38:3b:ad:9c:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=c897e726-41c3-43f2-bb5f-62f7ebdffe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:22:f4:52:98:eb:42:20:de:4b:cf:e3:ca:
e9:89:ad:62:a4:81:2f:61:40:98:be:60:2a:56:0c:
65:21:73:78:e5:e9:6f:22:4e:23:3c:b0:a2:78:05:
4f:d4:32:a5:8b:d7:54:02:77:8e:cd:67:76:99:8b:
62:f8:77:b8:f8:78:6d:3c:d4:35:c4:c0:d8:a8:73:
92:2c:58:fb:98:be:07:89:0f:d0:9c:42:ef:db:7a:
4a:9b:d7:a9:f8:78:1f:d6:cd:95:29:63:9d:37:03:
d8:3c:86:25:3e:5f:33:7d:e7:17:8f:cd:e9:de:a7:
de:17:59:df:ce:72:b7:38:12:c8:4f:fa:ac:51:60:
13:09:df:9a:73:a5:20:c0:79:18:bc:13:ae:bf:1e:
ab:fa:0d:69:4b:ea:6a:60:8e:65:82:83:9e:b3:e2:
85:02:e9:81:3f:e8:c4:8c:9c:b7:0b:0c:f7:2e:1b:
bf:a6:67:2b:ed:82:39:b6:bd:b7:63:82:b0:3f:e7:
94:43:27:3d:e1:69:73:80:37:75:a0:bf:38:c2:ef:
06:94:b8:68:0b:49:df:0c:f4:c6:96:8f:ef:a1:ef:
90:59:2d:76:c5:d9:bb:92:f5:27:ef:41:0f:03:e8:
69:4a:31:b4:16:8f:ef:67:c7:81:1f:b4:9e:3c:3a:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1B:B9:F2:C3:29:40:02:78:8D:F0:26:27:D7:E8:AD:94:80:6C:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8cae73cb-fe10-3578-a3a5-57754eddc775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ef:cc:f5:71:c5:66:2d:81:b8:a5:b9:c6:b9:92:14:2f:23:
f5:2c:36:28:d3:19:0f:98:78:aa:85:3a:f8:33:36:13:fe:24:
3f:61:91:34:66:ae:6f:49:1d:c6:66:34:25:70:4a:12:19:c2:
d3:b3:31:e5:9d:c2:8d:85:32:66:e6:b8:72:3a:4d:53:6f:1f:
09:13:f6:52:64:69:a5:5c:ce:6f:63:dd:55:05:bd:59:06:59:
d4:74:d7:6a:4d:7b:48:03:35:e5:c9:af:65:83:ab:c6:26:41:
9f:ed:e0:eb:a3:fb:26:25:96:b8:ab:c4:1e:be:01:8a:c3:90:
fd:76:1c:f8:28:08:8e:59:59:43:5b:4b:5e:50:df:7e:1c:d6:
20:a9:a2:b5:1c:03:3e:e7:c8:f6:fc:18:20:ee:d2:55:43:53:
52:04:d0:d6:63:e8:ac:6b:e5:59:2a:32:b5:86:b9:9e:65:57:
01:6d:bf:d7:c0:c9:b1:96:f8:ef:bc:59:c4:24:f7:61:9c:ef:
27:5e:a9:21:0f:cc:08:cd:e4:0b:ee:b8:76:5f:4e:93:2c:f2:
54:7f:7f:e0:b9:e3:00:72:5e:f9:1a:fb:b6:22:a0:ff:3e:e9:
ac:86:81:72:15:47:7b:5f:50:58:ac:52:92:cc:c0:49:d7:13:
dc:27:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:58 2025 by rpki-client