Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a09d3249-02ae-3cbe-9b06-4a93a959f64d.roa
File: a09d3249-02ae-3cbe-9b06-4a93a959f64d.roa (raw, json)
Hash identifier: P8Icilln8tIkJNtWEHEOpLbhueAXPneShAw1vsKuP9U=
Subject key identifier: F7:16:7A:68:CE:A2:91:65:FA:E2:C4:47:10:F1:05:59:30:93:E0:9D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA4269FA147D86718563C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a09d3249-02ae-3cbe-9b06-4a93a959f64d.roa
Signing time: Mon 27 Jan 2025 18:04:06 +0000
ROA not before: Mon 27 Jan 2025 18:04:06 +0000
ROA not after: Sun 27 Apr 2025 17:04:06 +0000
asID: 11798
IP address blocks: 108.165.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:26:9f:a1:47:d8:67:18:56:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:06 2025 GMT
Not After : Apr 27 17:04:06 2025 GMT
Subject: CN=ed5fdac9-d769-437f-bdf8-dcf383418cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:66:7c:ed:16:87:b4:63:f1:b1:5f:9f:03:
b0:a8:ad:b1:b5:de:44:b5:32:12:b2:a5:0f:12:25:
d9:46:51:cf:73:88:5a:f4:23:59:66:a5:5f:7f:dc:
af:61:06:ab:36:4e:bc:40:71:b0:41:f6:8e:91:dd:
3f:94:cc:fb:4d:d1:58:ae:7c:ec:09:bd:10:ec:c1:
fd:09:35:ee:1b:b2:23:03:53:79:bd:ed:b2:a5:94:
68:40:e8:10:b8:20:12:ba:38:9e:07:84:f2:36:cc:
a5:11:d1:4a:f3:73:65:f8:2d:a1:c6:dd:ec:44:aa:
e4:82:3e:9a:14:9e:3a:f7:1a:08:6f:43:6c:18:1d:
6c:ff:4c:1f:70:44:09:59:1c:88:ad:ed:3c:a8:bc:
10:2d:d6:5f:95:4f:41:eb:a0:d7:75:8d:ae:d4:01:
c5:b0:9f:3e:d9:45:c3:d2:04:21:0d:9d:a7:6b:4c:
1b:30:51:9a:a5:6a:ef:16:61:75:50:e2:5f:55:84:
70:57:8b:32:9d:b4:1a:8d:f2:36:f1:cd:39:2f:9c:
63:b4:ca:f5:1c:7e:30:5f:6c:2d:be:05:fc:92:34:
c0:ab:67:5d:7b:16:11:57:49:8c:18:af:7a:04:03:
a7:f7:2b:72:39:fc:a7:43:a8:84:c8:df:8a:5b:77:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:16:7A:68:CE:A2:91:65:FA:E2:C4:47:10:F1:05:59:30:93:E0:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a09d3249-02ae-3cbe-9b06-4a93a959f64d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:3d:31:5c:5f:a2:02:ac:5c:1d:3a:99:b8:9f:dc:4a:85:1b:
93:f2:d6:fe:1c:4c:5a:b7:f2:14:32:74:ac:9f:68:75:b7:dc:
c5:03:39:3e:95:fa:50:be:52:01:50:79:87:d3:13:83:44:46:
a4:15:61:d9:d0:4f:9e:75:59:5e:17:5e:8b:d5:63:b2:45:bc:
10:44:e6:43:37:88:3c:b5:ff:2d:0f:4d:fd:1a:44:b1:ad:0e:
e2:73:48:24:0f:74:9a:ef:c0:73:e1:45:87:24:ad:d6:a6:f1:
ad:5a:1d:75:86:2d:fb:c1:06:30:7c:fa:08:4f:3d:0b:c1:dd:
4b:df:a6:ca:fb:b2:2b:b3:23:14:1c:bd:34:b2:e3:8a:73:74:
41:5a:da:8a:5d:95:f7:a9:7b:76:78:23:db:ce:46:57:7f:c4:
d5:67:8c:bd:4a:d1:74:bb:20:82:b4:e4:74:2d:c5:1e:03:17:
87:90:27:77:30:1b:f6:cf:c3:25:3a:d0:d6:e0:fb:ca:ca:e4:
45:16:71:46:93:d6:ec:ec:5e:dd:dc:3d:6a:98:9b:63:88:08:
fb:d3:db:23:5b:76:b5:1f:de:4f:49:3d:35:d9:83:1f:4c:01:
47:f5:f4:01:82:d3:36:f6:64:c7:e3:71:57:74:39:74:25:fb:
c4:a1:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:30:24 2025 by rpki-client