Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7eb504a-1085-33a8-a97a-c4107ee11a27.roa
File: a7eb504a-1085-33a8-a97a-c4107ee11a27.roa (raw, json)
Hash identifier: TKm4Qh5IztcBiO+GFcRapCj5MQ5/bJSMm2NjqHSRnXU=
Subject key identifier: A6:B0:F5:94:E6:5A:72:6E:D2:69:D6:68:EF:3C:CB:09:29:1F:FC:E6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584819CFBEECD19790577F2D8380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7eb504a-1085-33a8-a97a-c4107ee11a27.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 26383
IP address blocks: 166.1.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:be:ec:d1:97:90:57:7f:2d:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=901fd477-7bbd-41f2-b857-00de1db05467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:18:0e:60:fd:54:7a:0a:09:6a:ce:3d:7e:fe:
76:37:3d:b9:5d:69:28:e0:8b:c0:59:6a:cb:5d:cc:
3c:9b:d6:e3:f6:64:b2:f6:43:c5:4e:ae:9b:c3:ac:
ff:59:f5:8a:c2:ec:59:c4:3a:5a:5a:96:42:73:51:
f7:a7:b2:47:7b:3c:2b:22:30:a4:97:39:19:8b:90:
5b:7c:84:89:4a:f2:d2:53:1a:25:07:7a:3f:6b:f5:
d5:4c:32:38:f7:df:47:78:62:ef:0d:d3:5e:41:f5:
73:a4:48:53:a5:d3:72:7c:5b:25:10:cb:6e:14:6b:
97:fa:ba:35:f2:fd:c5:0e:a7:41:3f:33:3a:e5:7b:
59:85:f4:05:63:76:04:60:95:f6:2c:a0:73:88:0d:
fa:8a:0a:3d:ce:09:6e:4d:33:a9:5b:a4:54:5c:8d:
25:61:e0:2f:d2:26:40:09:b0:d5:38:bc:29:86:63:
e9:ed:27:eb:58:eb:0b:da:b0:13:23:84:0f:26:6b:
79:fe:bf:29:d4:b3:9f:6c:bc:c7:0d:cb:8f:8a:db:
94:d2:55:91:d4:90:ad:d9:40:47:0b:94:d1:dc:08:
3a:98:59:16:8a:3b:ed:e8:35:58:41:c8:a3:8f:6d:
6e:df:d4:b1:3e:ce:df:d5:d8:0c:1a:ac:2a:41:5c:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B0:F5:94:E6:5A:72:6E:D2:69:D6:68:EF:3C:CB:09:29:1F:FC:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7eb504a-1085-33a8-a97a-c4107ee11a27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:e6:42:b5:5a:7f:bd:f2:73:18:40:35:3d:24:85:bd:60:db:
d1:40:0f:de:78:a5:c0:77:d0:5a:07:15:f2:61:80:f1:7c:b0:
ba:1e:ca:0f:7d:43:96:fa:50:e9:c1:85:f7:65:6a:d6:b8:7f:
65:d6:22:ae:1e:bc:60:c1:88:ed:ad:b8:9b:70:4f:57:6f:03:
2d:8e:d5:c8:f3:83:fc:26:38:90:b7:ec:aa:e5:61:6e:b8:e4:
d4:f3:50:87:c7:81:8d:a3:8c:31:b6:86:b5:6c:33:1e:05:a5:
81:9e:8d:1f:0e:e4:0b:c8:41:a4:a5:93:28:8e:b6:1d:6c:6d:
41:52:b0:18:35:05:04:ab:73:c5:78:c0:ff:9a:ea:2c:f4:49:
ff:25:56:f3:7e:c8:55:77:1f:e4:14:d1:a6:c1:24:61:32:1a:
72:83:2f:f1:2b:14:ae:5a:ca:db:76:d4:61:cf:2b:2d:80:d5:
84:96:57:77:ee:d0:35:93:1d:b8:c2:80:9c:8d:ba:20:09:5e:
fc:f9:ec:4f:1d:a2:33:e0:cf:c3:c5:25:49:69:21:92:37:95:
6c:01:50:a8:ea:16:f5:80:98:d0:7b:f8:a2:3b:d8:ed:71:68:
cd:9e:17:f1:d4:f8:3e:52:51:01:44:90:66:a0:77:96:32:1d:
e8:03:ce:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:58:47 2025 by rpki-client