Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a79dfab7-1218-3004-85b9-3493c02bc6e2.roa
File: a79dfab7-1218-3004-85b9-3493c02bc6e2.roa (raw, json)
Hash identifier: ZHi4fBR3ZeAxcJL85cklpE8HSvnrXpkIK2mezjwy5So=
Subject key identifier: 9A:71:06:99:14:D2:5A:97:CD:0F:9D:B8:91:F7:FB:5C:03:E2:E4:DD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858487755E5AA5A81C6BFDC64FBC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a79dfab7-1218-3004-85b9-3493c02bc6e2.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 203576
IP address blocks: 166.0.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:e5:aa:5a:81:c6:bf:dc:64:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=f1111347-fb23-4a7f-a335-e4b054da90a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:06:fc:ca:e7:df:5d:a9:8a:e4:01:b7:a7:
df:79:25:85:c6:d2:3b:dd:79:87:11:88:cb:37:78:
d0:12:6b:13:a3:05:a6:9e:44:20:07:d7:2e:b2:49:
18:82:8b:0b:d8:ca:8d:a2:85:1a:b3:5f:04:7e:55:
23:36:62:11:ec:44:93:00:82:65:41:96:48:2d:43:
61:4f:40:6e:8b:c9:76:32:61:db:90:41:51:1b:2e:
14:19:2f:67:9c:cd:60:4a:48:9f:b7:91:cb:87:b4:
62:6f:23:8c:01:17:0d:7c:02:03:c2:4c:80:77:1a:
37:be:4a:e3:95:15:fa:cc:07:33:f0:5d:d6:98:81:
27:ce:a1:37:09:06:05:ec:b0:95:b8:72:34:61:8a:
8e:ed:f6:86:31:41:45:1a:f8:6c:5f:05:03:42:d2:
2b:39:23:57:c2:ea:8e:c5:e2:32:3f:80:61:fe:b2:
a0:6d:c2:f8:38:a6:99:53:65:c4:8f:d5:3c:17:6f:
6a:69:9f:8c:0d:2f:c4:34:0a:f6:ee:1a:2a:f2:c4:
65:f6:04:c9:99:21:5e:67:35:5a:41:d6:6d:6f:cc:
62:2a:64:16:da:7e:c3:f6:21:a3:0e:e6:38:0a:eb:
8a:ff:0b:f6:cb:fc:d5:9d:d0:39:af:a3:17:a9:90:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:06:99:14:D2:5A:97:CD:0F:9D:B8:91:F7:FB:5C:03:E2:E4:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a79dfab7-1218-3004-85b9-3493c02bc6e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:1a:03:b1:3b:8c:d6:f5:7e:32:47:0e:18:76:b8:02:83:09:
18:22:af:b9:dc:4a:17:11:6a:63:5a:af:06:f5:a8:9f:45:58:
36:79:57:e8:fb:df:2c:01:35:21:04:10:87:0b:6d:dc:77:25:
58:c1:e8:87:75:c4:1e:33:af:46:1d:dd:32:e9:6f:a4:17:41:
25:4f:b6:80:5d:bf:c1:ef:5f:8d:7b:24:14:d0:6a:1b:6e:2e:
9e:c8:fb:82:0b:a6:2a:e3:6f:6c:9d:ce:13:35:0e:88:91:15:
ae:04:af:ac:85:9e:06:4f:ac:42:12:61:7a:88:ea:27:dd:81:
f3:0d:30:5c:48:91:93:07:ab:95:c8:9b:5c:54:8e:a8:9c:c0:
29:26:2c:b6:ba:01:52:6d:df:69:dd:73:cc:12:a4:57:5d:79:
73:73:1f:9f:3b:51:f8:94:07:7e:24:9a:8e:20:3d:b4:82:84:
63:d9:5a:41:0f:66:9f:43:b4:93:26:48:dc:c3:d5:b5:a4:98:
11:07:c9:c8:9e:56:8b:8b:0f:55:8c:6d:f0:70:9d:ad:b4:c1:
80:a3:6f:ba:4b:1d:b8:93:e4:9e:2d:d9:96:98:28:32:2a:3f:
3e:e6:f0:36:15:c4:25:d3:91:ba:f5:43:ad:09:e9:a7:7d:5c:
2d:fb:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:24 2025 by rpki-client