Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7087b82-f47f-3715-888b-bd60420173d1.roa
File: b7087b82-f47f-3715-888b-bd60420173d1.roa (raw, json)
Hash identifier: 8xLrB+GErHDhnQF479cmhUHCaeueSRbm1+lmT31rXnE=
Subject key identifier: 8F:77:45:FA:B7:81:E2:BC:69:1F:51:55:C2:86:18:DE:50:88:EA:64
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F8038527AEC88FD6EA1C560
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7087b82-f47f-3715-888b-bd60420173d1.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:38:52:7a:ec:88:fd:6e:a1:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=a174350f-167f-459a-810a-ea36bb134458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:e0:b9:b5:ec:83:99:d9:8a:6d:82:1c:4c:
39:91:ed:69:fc:6d:e6:59:c8:52:db:46:2a:18:a0:
50:b1:f3:af:05:7c:07:f4:19:76:5b:6a:e0:0a:f4:
c3:8d:aa:96:68:44:ab:d2:dd:ea:51:25:1a:7e:d1:
3b:e8:26:6e:48:69:4e:88:ce:31:5a:b9:ae:c8:d7:
a7:ca:03:d4:01:68:00:f5:26:9c:52:ee:24:20:c9:
3b:b0:09:76:ce:11:a4:00:13:23:7a:8d:b2:41:7a:
2b:58:75:25:74:c5:e2:6d:a9:e0:b0:18:b7:26:01:
cd:43:56:53:41:d3:b3:05:98:c3:e2:a4:c4:f1:ec:
5a:39:b0:0a:51:a6:05:ae:e7:00:75:0c:f9:02:ca:
8b:4f:9a:57:18:a7:88:f8:ae:47:90:50:b3:6e:76:
9b:bd:10:de:d2:3f:dc:8c:4d:4a:fa:5a:39:78:50:
82:1c:4f:14:83:58:60:f9:bd:26:28:e3:21:30:38:
df:e7:80:8e:ad:e7:e4:2f:5c:b6:4d:20:48:e5:60:
92:8b:6f:ad:9d:9e:8b:93:44:fc:72:d7:38:32:aa:
fd:b2:f5:26:42:b4:36:a1:50:ea:1d:7e:10:57:7f:
70:5f:e9:ca:78:43:92:48:21:79:c5:55:0e:74:ea:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:77:45:FA:B7:81:E2:BC:69:1F:51:55:C2:86:18:DE:50:88:EA:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7087b82-f47f-3715-888b-bd60420173d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:50:e7:22:02:a5:95:c2:f9:a9:bb:ae:59:e1:41:97:e1:18:
68:5e:0d:40:30:c1:2a:58:19:02:f3:48:af:66:d9:e7:84:d3:
34:61:3c:ed:b0:3d:d6:1d:c2:8f:ae:15:88:9f:98:31:84:f3:
1b:a8:e7:d5:7e:1b:22:93:74:90:fe:cb:eb:44:23:e3:ec:d3:
4d:b6:64:23:35:37:1d:de:46:3f:fc:b8:57:52:60:53:ca:fb:
82:0b:c9:8f:4d:64:a5:38:b4:3c:8c:7e:33:07:1a:09:4b:2f:
16:17:d5:3f:c1:68:2c:c8:1b:f7:37:09:89:dc:42:28:f6:cc:
ab:45:3b:2a:d4:ae:d8:c9:6e:73:bc:43:47:6d:be:6d:ff:ae:
d4:08:cb:d1:56:f1:1e:f2:4e:d3:77:f9:ba:3f:13:20:ff:ef:
50:fc:83:3d:1f:a1:07:f8:ca:a4:0a:a2:4c:b4:3d:cd:62:35:
51:ee:e5:4d:83:18:93:7f:61:25:c4:ba:d6:2c:65:79:e6:44:
7b:7f:31:e0:82:90:18:c7:1e:d4:d7:39:f9:4b:e2:4d:02:d4:
cf:cd:64:c4:1b:ab:ab:76:4e:48:7e:8b:07:25:11:6e:45:64:
c3:98:69:19:6f:ca:59:8c:79:77:0c:99:68:67:36:2c:ba:dd:
46:f9:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:19 2025 by rpki-client