Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b743b23d-6511-30ac-8d65-b57c095577e8.roa
File: b743b23d-6511-30ac-8d65-b57c095577e8.roa (raw, json)
Hash identifier: yO9dLcU5F8InYgwdx/NTdo7LkXPoWPKyEWhOOJNLALQ=
Subject key identifier: AF:54:8F:EC:09:2B:64:AD:99:F4:92:4E:F8:C7:DE:FF:26:AE:CE:A9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA424233F391676AC1AFF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b743b23d-6511-30ac-8d65-b57c095577e8.roa
Signing time: Mon 27 Jan 2025 18:04:04 +0000
ROA not before: Mon 27 Jan 2025 18:04:04 +0000
ROA not after: Sun 27 Apr 2025 17:04:04 +0000
asID: 11798
IP address blocks: 108.165.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:24:23:3f:39:16:76:ac:1a:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:04 2025 GMT
Not After : Apr 27 17:04:04 2025 GMT
Subject: CN=bbd4d470-b4e8-466d-8904-dc50ec1870cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:5f:8f:d4:6b:84:e6:67:ac:eb:04:38:64:
81:9e:64:9e:10:65:8d:eb:e6:2e:fb:17:bc:21:40:
5f:80:06:92:91:45:81:c7:53:67:95:53:cc:50:07:
f5:31:8e:6d:d8:d2:2e:2a:06:d9:7c:34:db:b5:11:
52:4f:34:c7:17:72:ba:60:ac:e3:0f:63:37:11:86:
59:29:bb:4d:00:fb:5c:66:05:6b:eb:95:56:af:df:
8f:83:68:53:14:83:d6:2c:39:a7:8f:39:be:40:6d:
f2:7c:d6:67:19:54:8d:c6:54:95:c9:74:fb:05:e1:
0c:79:76:ca:fb:a7:41:88:22:94:8c:60:49:c2:ba:
5d:79:aa:f7:a7:5e:43:d1:59:4a:d7:9d:26:08:61:
15:a3:a9:75:50:9c:a3:90:71:65:b0:a6:15:b2:8e:
a0:0e:b2:e3:57:f2:e2:44:09:e3:51:dd:09:e5:a0:
2e:d4:f5:35:28:cb:da:b2:5f:d1:da:4e:39:6c:bf:
99:b5:e0:52:13:07:4a:45:9e:30:94:5b:ba:93:f9:
e8:b0:9e:69:06:4e:0e:e9:9a:cf:62:21:1f:63:d2:
d1:ef:1f:5d:3f:83:cc:d4:6d:cd:82:3f:dd:93:e7:
60:bc:d0:0b:09:4d:e0:d8:15:b4:6c:9d:12:2f:55:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:54:8F:EC:09:2B:64:AD:99:F4:92:4E:F8:C7:DE:FF:26:AE:CE:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b743b23d-6511-30ac-8d65-b57c095577e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:a3:5d:30:37:e4:50:1f:10:d9:dc:af:b4:9e:ad:e8:1a:a8:
e0:b8:b4:b1:9c:c5:86:24:25:2c:5c:d7:1d:f2:83:12:87:c9:
25:d2:fe:dc:39:4d:e4:9c:26:ee:ae:b5:97:e6:55:c5:b3:42:
7c:c7:a0:f4:f2:7b:56:53:b6:c1:a4:07:56:e8:cd:f8:94:fa:
8c:a7:30:a3:78:ee:9f:a0:e2:86:ab:a7:23:19:7e:cb:50:59:
d7:08:6b:9a:4c:76:65:90:e1:a9:ef:68:c0:a5:64:26:a1:1f:
b8:05:8d:42:39:d8:2e:6a:36:7a:0a:28:3e:d6:a5:f2:0a:dc:
64:c3:dd:16:44:3e:2d:02:f6:66:73:ed:33:5b:0a:f5:56:4d:
16:01:91:0b:70:96:50:52:48:e1:14:7d:cb:40:e6:ec:33:ae:
23:0f:dc:ae:3b:4a:1a:e9:8c:68:d1:d1:65:21:0f:ee:57:08:
8f:94:1e:8b:1e:5e:11:6c:6e:b8:cc:76:13:ec:f8:48:ea:dc:
4c:71:91:ec:50:df:fa:35:c1:60:f6:d3:f6:08:2d:30:c5:01:
16:4e:de:86:45:77:a5:fc:31:47:35:70:1d:66:70:db:c1:04:
17:0e:91:aa:e4:96:9b:57:16:31:05:bb:23:29:f1:a7:39:b9:
03:e9:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:23:56 2025 by rpki-client