Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf874917-27f8-3949-9b00-f01b9d427756.roa
File: cf874917-27f8-3949-9b00-f01b9d427756.roa (raw, json)
Hash identifier: kqyYfZ4vlDJwNlNErAR3ycWhCD3sbZ9Q5PRVfAc0TD0=
Subject key identifier: 2E:CA:4D:EB:63:31:49:48:5C:37:F5:1D:AE:22:35:BA:58:A8:96:13
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848467AC1C24EBD9A9E8C60EA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf874917-27f8-3949-9b00-f01b9d427756.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 55286
IP address blocks: 166.1.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:c1:c2:4e:bd:9a:9e:8c:60:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=51051985-ac4a-4f91-9058-5803405fad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:7d:e9:dc:d5:b4:8e:7d:dd:8b:da:86:34:
28:47:f2:24:1a:3c:30:28:79:07:d7:0b:e5:73:1a:
79:81:22:e6:49:0c:9f:71:45:71:6c:11:59:98:25:
78:0b:87:af:59:bc:19:1e:7b:18:22:e0:ca:10:d7:
1b:c7:d9:70:ca:9b:06:31:c3:bd:70:55:0e:95:48:
77:90:8f:71:d8:5b:ae:49:b2:c3:6d:f8:77:8a:c5:
a3:59:22:60:2a:23:e2:9e:6f:ea:89:41:52:e9:88:
a1:a1:12:a1:88:8b:8f:80:e4:76:ae:ef:46:74:c3:
3e:a4:2b:f3:f3:1e:44:82:8a:00:8d:cf:73:bc:6a:
1f:21:c6:0b:ea:32:a7:08:df:89:74:07:09:2a:57:
2d:a5:59:bf:a4:1b:3f:df:3d:2f:41:db:31:e9:4d:
ca:6f:43:d8:0c:6f:ef:d9:40:46:4a:1c:25:1d:0e:
74:b7:d7:eb:df:e8:7a:1e:17:7f:03:48:46:cd:96:
93:fc:5b:25:8d:2b:18:1f:23:fa:28:03:97:69:34:
57:5f:9d:39:1f:62:ec:34:2d:98:b8:eb:e5:49:c3:
86:a9:3f:e8:c1:ee:f4:95:16:8d:d2:81:e8:3a:ad:
90:ca:0c:30:89:35:33:74:10:d1:c5:69:31:a7:80:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CA:4D:EB:63:31:49:48:5C:37:F5:1D:AE:22:35:BA:58:A8:96:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf874917-27f8-3949-9b00-f01b9d427756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:6b:47:03:13:58:a9:3b:72:1f:63:4c:93:81:3a:30:a8:a2:
06:57:ef:74:be:9d:f8:58:9c:a9:31:3a:ec:be:30:bf:9a:27:
bd:7f:42:1e:f0:ae:51:1f:07:44:7d:7f:43:60:55:d0:77:8b:
a2:2c:db:2f:aa:fa:e7:08:b9:76:84:a4:e0:01:f4:20:6b:df:
7a:1d:1f:9a:4f:1e:a7:28:44:b2:e8:d0:b7:72:a4:24:06:6e:
d9:df:3f:6a:f3:9a:96:b3:4d:c9:8e:3f:79:9b:0a:0a:9a:d6:
5a:fd:63:d3:47:76:44:51:1b:6b:e1:12:dc:00:b9:04:d8:23:
a9:77:a4:65:33:28:15:f6:aa:d2:e6:f4:3e:fa:9c:40:05:b5:
52:01:9c:78:51:d9:1e:c1:fc:95:57:13:1f:8a:22:66:9b:8c:
3c:c4:8e:1c:3b:c0:1b:37:03:68:59:dd:5b:9e:1a:67:f7:97:
85:69:d1:1f:65:52:54:16:8b:e3:87:85:b3:fa:39:01:2b:c0:
a2:a5:ba:57:b7:48:d5:ac:f3:9a:9b:f5:0f:09:b2:ab:30:3f:
03:a5:0b:d0:5c:ea:20:0c:ec:23:90:0f:44:df:2d:f9:be:58:
48:83:50:5e:93:1a:14:ab:21:d9:9f:82:c9:78:fd:24:08:bf:
f0:21:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:12 2025 by rpki-client