Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3089fb1-e44f-39cd-9b87-744a17572787.roa
File: d3089fb1-e44f-39cd-9b87-744a17572787.roa (raw, json)
Hash identifier: cQluIZ3fCxOnnJTNF2Udn0igxsZNoloTl0fLP2l02P0=
Subject key identifier: D8:A2:47:FC:F4:51:AA:45:3D:D4:A3:FA:92:2C:07:83:EA:D5:CC:AA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584891DB2AB59941A0D5F6A88500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3089fb1-e44f-39cd-9b87-744a17572787.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 42831
IP address blocks: 166.0.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:2a:b5:99:41:a0:d5:f6:a8:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=849b9144-e92d-4836-81aa-5c89f1f85c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:73:7f:80:2e:dd:ab:ff:5c:98:84:6c:14:
7f:eb:f6:5a:24:20:21:4a:db:da:98:23:a0:d7:a8:
eb:44:ac:99:90:a5:2a:f7:dd:b4:91:78:3c:ea:ea:
e6:f0:62:c1:bd:db:49:6f:2c:41:31:98:a8:af:f7:
89:cc:e1:69:19:f9:08:2d:2a:37:b0:aa:43:a5:ab:
59:3b:08:f1:09:a2:de:56:4f:61:7b:1c:f0:09:c2:
b4:b3:86:a8:fc:cf:ba:b9:11:1e:20:e7:d8:ae:7e:
10:92:10:a9:f7:e9:b7:9b:63:76:e3:74:55:78:80:
61:24:8a:05:a7:59:94:18:0e:e2:55:c6:f4:0a:24:
78:75:36:78:d6:c9:98:bd:ff:dd:c6:62:16:58:1a:
21:f2:63:85:06:6f:15:2c:c2:54:b4:95:32:c7:a0:
99:62:04:57:0b:fe:e0:e1:ce:aa:2f:38:e2:6a:f2:
98:fc:01:2b:68:51:bd:e3:5c:9f:c0:68:8d:49:a0:
00:c8:71:35:57:5a:0a:96:85:40:a4:18:86:b1:c9:
a4:f4:8a:77:d2:aa:0f:c8:31:d4:5c:b8:da:5f:b1:
97:d8:a1:1f:0f:dc:06:2b:eb:8f:4a:45:8a:bf:6e:
b5:1d:fd:f2:a7:84:a1:10:ea:78:7b:44:59:42:7d:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A2:47:FC:F4:51:AA:45:3D:D4:A3:FA:92:2C:07:83:EA:D5:CC:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3089fb1-e44f-39cd-9b87-744a17572787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:39:7d:f1:19:b7:d8:06:77:be:dc:d5:76:9d:85:22:cd:38:
87:c8:6a:1c:a6:3d:b6:36:47:18:19:c4:2e:a7:91:51:ce:6d:
05:58:f3:4c:35:9d:74:cd:c2:3d:40:24:8c:b0:45:89:e0:98:
fc:83:84:33:b7:f7:44:0d:5a:9a:f6:f2:1e:1d:01:d5:fd:12:
f1:9d:91:93:32:78:d9:ca:ab:ef:e2:57:32:97:fb:6f:1c:db:
43:a6:ac:b3:18:17:9e:28:c9:f5:24:92:25:ee:4e:c8:40:4e:
11:ac:9b:d0:91:05:8e:94:68:5b:02:c6:9a:33:76:26:05:30:
52:f2:49:b4:c9:0e:90:4e:c9:00:07:23:2d:08:78:8f:31:1b:
a7:d2:e8:94:94:b1:13:fc:40:f7:26:d9:53:1d:86:f3:d8:93:
5d:d1:31:d3:8f:f3:63:7e:e1:84:67:31:7b:31:78:6f:8f:8a:
be:73:f5:d2:82:3d:70:ee:dd:ad:75:2b:d3:45:a6:f5:6d:5e:
c4:59:55:72:ed:42:d0:44:62:93:76:4a:18:cf:26:f5:29:2e:
9d:58:d5:d3:3a:c4:11:95:a0:ad:90:ec:80:9d:87:90:62:53:
60:29:42:b9:8b:67:bb:b8:35:6d:3d:c8:a0:d4:0b:6a:8c:12:
3d:77:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:18:37 2025 by rpki-client