Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd005e06-3e2e-3129-8a92-12bc5da79f59.roa
File: cd005e06-3e2e-3129-8a92-12bc5da79f59.roa (raw, json)
Hash identifier: 4HYXYbfun6aAtLzyZk3dejYR+LX2phy245Kri8RAiEY=
Subject key identifier: 1E:6F:FE:62:6E:78:00:A8:DF:09:4E:68:74:ED:A7:4D:44:0D:09:CB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848116FF9AD3F51403B83A43180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd005e06-3e2e-3129-8a92-12bc5da79f59.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 58061
IP address blocks: 166.0.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f9:ad:3f:51:40:3b:83:a4:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=0ffba659-db05-4673-9516-1f45bd442a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:65:b7:e1:bb:ea:54:2d:15:95:ce:d3:7d:
58:c1:ae:f4:da:63:85:1a:76:0d:fa:20:d1:c4:14:
36:f2:a3:0e:ab:9d:8e:96:c9:dd:35:44:08:26:60:
69:a5:91:39:5d:7d:84:96:70:6b:e3:d6:ba:a7:18:
f3:d6:7c:89:b6:7d:cc:37:19:14:1a:00:11:8f:be:
5f:e1:a2:39:42:14:95:9b:06:45:32:b7:88:15:22:
60:b7:2e:69:44:66:8f:8b:15:02:cb:5d:e0:3a:be:
80:fa:83:22:70:ff:de:dc:52:f6:65:a7:61:91:3a:
cc:88:4d:03:7c:90:60:6a:c2:b3:72:6c:fd:c4:54:
d2:76:bb:06:33:ca:9e:1e:ed:60:f7:2f:99:c8:8a:
71:a6:76:d3:ff:08:60:8c:41:8d:f0:6a:1f:62:2f:
8a:00:86:82:5d:73:4b:bf:4c:ee:d6:1a:9c:75:d1:
e2:8d:26:77:93:a5:54:c7:7c:4d:ff:de:a3:fa:ec:
f1:24:da:2a:fa:df:c3:0d:dd:d9:33:5c:c1:74:75:
04:95:5a:15:fc:06:36:2d:b8:fc:fc:74:f3:30:f5:
4d:c4:24:f9:52:72:de:5b:d9:ec:0c:40:a8:06:ea:
d0:fe:7c:d0:cd:44:ff:2a:83:d5:e1:b4:9b:7e:d9:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:FE:62:6E:78:00:A8:DF:09:4E:68:74:ED:A7:4D:44:0D:09:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd005e06-3e2e-3129-8a92-12bc5da79f59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:5b:b2:d0:a8:41:3c:df:d8:b5:fc:d5:d8:78:c0:9e:45:bd:
b6:7a:31:ef:07:fa:84:fb:81:ed:f6:55:b2:82:80:04:71:00:
d0:58:82:2a:48:81:fc:3b:d5:93:31:5f:e8:2b:0e:38:a2:79:
8e:c6:94:f8:0a:a2:d6:8b:1e:73:4e:2c:a5:7d:ac:ed:be:48:
e3:06:f5:21:f7:2b:64:36:c4:55:c5:42:a7:03:c8:5b:02:e4:
f2:a0:97:eb:06:2f:64:a3:4a:78:f3:9a:26:23:9a:7c:f6:c6:
7d:38:03:0f:71:47:86:d7:c1:08:d4:83:72:89:63:5a:31:92:
a2:33:16:d0:87:f2:4e:9f:d2:73:0a:7c:c9:62:a8:75:c6:99:
81:99:2c:d9:51:a7:48:3c:39:88:34:c5:78:77:53:26:73:52:
61:d0:0d:e7:27:2c:6e:58:aa:4f:30:6f:03:d3:4e:eb:41:ec:
b7:5e:ae:44:47:a2:c4:9a:da:4f:46:83:2b:c6:4a:d4:26:e8:
9c:57:3c:4a:c4:32:6b:b9:ff:a7:52:c5:e6:08:4d:f7:18:72:
36:11:c1:0e:7a:a8:56:6e:56:1e:52:19:7a:90:03:c8:b8:f8:
82:ee:10:62:dc:3a:b9:52:3a:f8:79:bb:23:ec:67:ab:53:f2:
05:d9:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:41 2025 by rpki-client