Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0a87e7c-8757-35a9-88e9-a2bf744ca88c.roa
File: d0a87e7c-8757-35a9-88e9-a2bf744ca88c.roa (raw, json)
Hash identifier: mfcjhFpwV2YPJKvAwANyXiLnqOIiIVKoRm42lxA//XI=
Subject key identifier: 59:28:FE:B3:A7:CB:6C:A2:57:B5:D4:96:48:45:1C:99:BF:CD:D2:4E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858484EDAD27D935325B437E5CA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0a87e7c-8757-35a9-88e9-a2bf744ca88c.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 21700
IP address blocks: 108.165.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:d2:7d:93:53:25:b4:37:e5:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=d50d4426-4874-4268-af11-0113d9147d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:46:d1:bc:5d:87:08:54:f3:e3:8e:cc:65:
09:8a:f7:cb:6f:9d:ca:40:7c:ff:ec:03:72:fc:88:
45:d2:ea:58:8c:f1:e7:84:f7:03:ff:1c:33:67:e8:
96:aa:5c:33:8d:3a:5b:72:bd:ff:56:6f:c4:17:a2:
8c:47:42:f7:56:99:7e:0f:54:a2:8a:ee:d4:cd:2d:
4a:9d:10:7c:5a:a7:60:24:5b:b6:f2:1c:6c:ce:39:
b0:e8:53:83:70:e1:8a:83:81:52:d8:fe:a4:67:13:
af:5c:03:61:94:77:07:da:64:c2:e0:96:53:4a:c4:
03:bd:a0:e0:9b:7a:27:8e:ff:83:23:21:54:01:bf:
0f:b2:13:b6:82:74:04:5c:f5:ce:66:98:b6:86:85:
ee:a4:48:b5:d9:c8:06:16:0b:46:3d:cd:fe:2c:a0:
46:65:11:89:50:cc:2d:7f:b7:1c:94:fd:c9:78:eb:
de:e3:1b:90:1c:f0:a4:95:0c:00:67:b4:33:7e:2f:
54:56:4d:b7:21:af:84:d7:94:10:ea:b1:ed:a6:6c:
7e:e1:42:64:11:87:97:38:19:71:57:65:a2:8e:1d:
50:1f:92:59:56:5d:4e:95:97:72:7f:b3:2e:29:b8:
ba:92:b3:0d:79:57:1b:fd:e5:7a:c0:3c:5d:ae:a0:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:FE:B3:A7:CB:6C:A2:57:B5:D4:96:48:45:1C:99:BF:CD:D2:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0a87e7c-8757-35a9-88e9-a2bf744ca88c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ee:09:2a:f5:ec:26:e5:fd:8b:9e:2e:e4:00:ba:de:c6:f8:
ad:d3:93:b1:b9:25:36:6f:63:67:33:50:a8:7b:42:e7:de:9b:
7e:9f:c6:b2:12:76:5b:0a:67:24:ce:2c:de:ad:73:35:a0:58:
53:84:c9:39:c4:e9:4d:3e:b5:2f:ef:dd:a7:53:77:14:28:f7:
2d:76:06:f6:e3:20:5a:31:bf:22:1b:d2:81:86:04:d3:c4:0a:
2c:45:71:04:b0:c4:14:e6:4f:56:3c:d0:89:95:54:6a:bb:4d:
f5:1e:2c:eb:89:50:3a:f8:8e:24:e6:ae:cb:f9:af:be:76:ea:
01:80:16:ea:26:19:c8:23:e5:c2:50:0c:a2:35:b5:6a:07:19:
25:c0:3f:b8:20:05:5a:27:4f:7d:dd:98:e4:b9:65:be:6c:13:
04:c6:06:26:d7:1c:8d:4b:31:fb:39:c0:7a:e1:de:c4:af:72:
ae:a9:db:e7:a8:97:63:19:f6:f9:55:d8:52:ba:7f:e2:91:18:
f7:25:17:94:76:03:5d:ba:3e:e5:e3:eb:f5:4d:cd:ef:a4:cc:
72:c2:28:58:8e:9b:da:79:dd:08:0d:07:f7:ce:b0:6c:fa:6c:
ef:ff:1a:d5:2d:3f:ac:fe:ff:89:33:24:57:82:90:9b:dd:af:
f3:61:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:59:32 2025 by rpki-client