Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b542a38e-5c90-3ab9-84da-559a4f3a33e0.roa
File: b542a38e-5c90-3ab9-84da-559a4f3a33e0.roa (raw, json)
Hash identifier: rb8PRpqISCHD2vULBJn/Urtf2dDGFynOYpY25sV6PxU=
Subject key identifier: 87:FE:D5:FF:D4:9D:A7:5D:B2:FA:1D:0D:19:BB:D5:B1:F3:63:D1:15
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847F84F7BC5A4C10628AB9F7F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b542a38e-5c90-3ab9-84da-559a4f3a33e0.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 64267
IP address blocks: 166.0.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:7b:c5:a4:c1:06:28:ab:9f:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=f27ece78-e97a-4aaa-8144-e4c5447003a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:ae:88:70:a0:38:47:69:ba:bb:44:6c:25:
1a:86:90:37:c0:e0:ad:75:32:56:a9:7b:d4:d4:e8:
dc:60:e9:de:49:7b:98:3a:ad:7d:40:d8:fd:76:39:
cd:38:f4:37:86:cb:16:00:2f:f7:b5:ad:83:48:43:
1a:ef:67:15:5d:47:1b:16:ef:12:b1:2b:35:b2:a3:
28:b8:f9:76:f4:ac:f3:32:90:ca:f5:f7:ba:98:8d:
4d:ce:7f:50:da:dc:fc:eb:1f:de:55:06:f9:5e:a4:
40:6b:b9:f8:12:2d:30:a5:dc:bf:89:3c:bd:56:fb:
1c:15:3e:82:5b:9d:22:43:96:e0:d3:2a:e0:c6:ef:
c4:35:19:9e:09:91:af:85:e5:e3:89:6f:14:e7:5f:
02:e4:a4:96:09:86:89:93:fd:75:75:13:14:43:79:
4b:c6:ad:96:63:02:e9:06:f3:71:b8:16:c8:88:63:
70:d8:b6:bb:2d:00:19:df:c7:3f:c1:ea:80:60:f6:
75:01:46:a6:5d:12:67:67:90:17:5a:ab:1c:e7:fa:
b1:11:21:8d:64:7e:44:6d:b4:4e:22:4a:3e:09:1d:
31:98:84:41:78:3e:c1:db:72:19:6b:f2:7f:e2:91:
10:79:43:b4:28:48:20:94:40:41:b7:c3:5f:bb:09:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:D5:FF:D4:9D:A7:5D:B2:FA:1D:0D:19:BB:D5:B1:F3:63:D1:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b542a38e-5c90-3ab9-84da-559a4f3a33e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:5d:90:24:93:3b:35:9f:e6:d9:bf:50:19:99:fa:fe:d1:c9:
ac:b2:04:9a:0d:18:7a:e6:a2:78:a9:d1:72:e8:6e:44:92:30:
4e:60:15:88:8c:60:7f:b9:a2:5f:f3:8e:94:b2:67:42:3f:6f:
78:d9:aa:6d:2e:d8:4d:70:a8:30:55:fd:d9:02:a3:a9:c5:1f:
db:87:4e:07:58:7f:32:c8:c6:37:aa:5f:b9:82:70:79:c0:75:
03:be:64:bb:ef:b9:1c:c9:f5:4f:f5:3a:16:54:78:f5:1d:ad:
07:e6:66:07:c3:f8:9b:10:f3:44:9c:23:a3:bd:bf:45:da:32:
5d:92:38:f1:84:3d:91:b3:04:10:14:7e:9d:6c:f8:ed:9d:5a:
b3:c0:4a:f1:ae:6c:36:32:2b:54:ca:9b:40:c3:da:c0:bc:ce:
87:8e:9e:ce:4d:51:b8:0b:59:1c:cc:31:83:70:69:38:c3:0c:
5b:f8:1f:ab:09:0b:72:31:5f:1d:d5:bc:72:34:f6:95:eb:3a:
85:31:6f:db:30:7c:84:bb:de:6a:c4:be:98:79:7d:67:3f:34:
2f:c0:d3:77:98:ac:4c:f5:a9:e7:8d:46:7b:84:59:17:40:84:
b5:7a:06:d0:27:18:d9:e0:cf:0e:7c:dd:61:bc:1e:f6:ec:2f:
9a:58:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:09 2025 by rpki-client