Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9614e18a-7639-3f88-839c-f57a0e07aec5.roa
File: 9614e18a-7639-3f88-839c-f57a0e07aec5.roa (raw, json)
Hash identifier: V9l/YrAzxB3lbPYOghLs289vyEcrbv+OdIM6z6nhc5I=
Subject key identifier: C0:AE:E5:3E:00:65:43:69:8F:A9:F3:11:9C:34:25:0C:AE:FB:6C:B5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848705AFA0AFC8BAACB9A134800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9614e18a-7639-3f88-839c-f57a0e07aec5.roa
Signing time: Sun 05 Jan 2025 02:00:39 +0000
ROA not before: Sun 05 Jan 2025 02:00:39 +0000
ROA not after: Sat 05 Apr 2025 01:00:39 +0000
asID: 8881
IP address blocks: 166.0.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:5a:fa:0a:fc:8b:aa:cb:9a:13:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 5 02:00:39 2025 GMT
Not After : Apr 5 01:00:39 2025 GMT
Subject: CN=f66b2391-1e7a-497c-911c-b801ef523a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:28:40:15:20:0c:7a:7b:a9:c6:09:15:87:
a4:19:c4:05:50:ab:60:11:d9:59:b5:e3:4a:61:0f:
92:a8:70:47:3e:3a:28:7a:a2:ac:ef:e5:b7:8c:c2:
f0:cf:e1:fd:cb:30:2c:be:4f:51:ed:d0:f4:ea:21:
4b:d2:fa:cd:e2:a4:97:62:46:bb:d8:b2:b3:ea:fa:
e8:22:d5:45:ec:d4:88:68:aa:cd:74:68:43:7a:78:
83:ee:74:0c:9b:c3:61:83:1e:9f:b4:a6:b6:0b:23:
10:e2:8b:32:8a:c3:a6:60:8e:80:c7:9b:e3:6f:59:
a5:9b:c4:66:07:c4:0e:af:b4:32:8e:97:e2:45:45:
02:0b:5f:08:2d:4d:56:b1:b4:6a:da:16:f1:ed:d6:
ff:c4:e5:73:34:9d:c6:23:92:31:75:20:12:c7:44:
82:96:09:f7:a9:b0:e6:a9:6e:71:28:4e:cc:e6:a6:
3b:e3:47:7b:cd:ba:90:8c:e4:d7:63:ed:f9:fd:e3:
a7:39:44:2b:71:e7:4e:fa:79:0c:2d:08:92:8f:76:
db:49:9d:15:e3:94:a6:c0:69:93:91:fe:0d:ef:53:
35:82:75:2a:3e:5a:86:36:77:f0:53:f6:b4:96:fb:
12:9c:1e:0f:7e:ee:fb:89:61:85:64:41:70:5c:44:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:E5:3E:00:65:43:69:8F:A9:F3:11:9C:34:25:0C:AE:FB:6C:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9614e18a-7639-3f88-839c-f57a0e07aec5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:d5:46:db:db:8e:13:91:43:00:de:13:4d:86:8b:d8:56:8b:
73:4d:48:35:09:fc:5a:6a:dc:06:ea:90:cb:b3:8a:41:41:1e:
2b:2b:cb:a3:4c:3a:90:33:81:71:1a:3b:c0:36:da:02:43:15:
73:47:b1:3e:5e:2f:59:42:73:8d:7e:3e:d5:36:3d:69:42:66:
da:72:75:45:74:2a:e4:46:54:ad:b7:63:ac:50:8c:76:04:1a:
09:90:c9:23:2c:5d:e7:b8:01:42:ed:46:f5:43:e8:2f:3b:ee:
38:b5:54:8d:1f:5e:ae:8e:bf:45:29:56:a5:52:62:6f:a6:ab:
24:16:d8:96:22:a1:f4:75:fc:9e:15:1e:c5:87:44:14:af:05:
c8:89:eb:fb:7f:03:9e:04:b9:6a:70:8a:eb:6e:15:05:44:21:
00:67:e7:f1:2d:52:07:7c:be:44:68:53:c4:2d:84:98:0e:32:
12:86:a0:df:66:a1:c2:59:13:ec:dd:cf:3f:4a:93:ec:73:ac:
c6:1a:95:01:42:7c:74:5a:d3:00:ce:0d:13:dd:18:0c:c5:a3:
97:f3:e1:6e:61:ac:45:d7:1a:3a:7c:06:ea:c7:37:3d:fc:be:
75:ee:df:46:35:d4:aa:a4:3e:24:af:f4:ff:dd:29:78:20:10:
d4:c1:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:11:34 2025 by rpki-client