Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df1fd899-5035-351b-9006-8496b357700e.roa
File: df1fd899-5035-351b-9006-8496b357700e.roa (raw, json)
Hash identifier: sIHfOd76ecoDkPRq7P69Iy8ZuwBEdiacUvgdhf/chuQ=
Subject key identifier: 92:26:F5:4A:61:A6:07:E6:82:71:CD:BE:50:20:A6:C9:9C:9A:CC:51
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848116FF8B35570FB256CE31780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df1fd899-5035-351b-9006-8496b357700e.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 58061
IP address blocks: 166.0.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f8:b3:55:70:fb:25:6c:e3:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=58c5e721-92b5-48bb-bbcb-add03d83bf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:70:54:bc:71:c4:a8:4f:84:2d:64:5c:ea:
f2:ed:22:f2:38:98:94:53:97:a4:97:48:e6:cb:04:
3b:42:0d:7b:13:8d:66:1c:5d:2d:85:cd:38:32:83:
3f:6b:79:36:72:18:09:18:c9:6a:8a:6a:8a:36:a2:
6a:79:44:6d:e3:65:d8:fa:e7:8f:82:ea:54:89:63:
31:1a:ee:c9:cb:9f:5e:c0:44:ba:53:8d:b0:29:46:
bb:f6:fa:d2:dc:5d:0f:f7:b8:43:8b:d5:79:86:59:
c8:98:96:89:d0:04:de:1c:1f:03:b0:23:28:52:3d:
0f:41:db:8d:49:d9:2f:64:db:c2:35:c0:a3:97:58:
27:77:f6:fd:b3:e6:4d:c9:cf:76:00:34:fa:c6:06:
56:ad:3f:10:2a:e3:68:c9:97:68:d2:4e:37:cb:d6:
6a:af:f7:97:9b:10:cf:a6:b5:6e:70:db:80:2e:58:
c0:b2:34:13:bc:3c:39:fd:24:db:6f:4e:b5:2f:21:
d3:c7:6f:57:39:2d:83:2d:c7:31:29:2e:c0:a0:39:
3d:f0:ab:5b:75:e3:e3:2f:4c:df:5e:19:3d:8f:8d:
91:eb:45:a3:5b:e3:ff:41:70:95:b1:9c:67:ac:54:
2d:2b:40:b9:b5:c4:87:ad:e6:9c:8a:ac:43:67:c0:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:F5:4A:61:A6:07:E6:82:71:CD:BE:50:20:A6:C9:9C:9A:CC:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df1fd899-5035-351b-9006-8496b357700e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b6:4b:99:91:fe:37:78:cd:e6:9a:9c:ea:f5:93:78:4b:e3:
69:94:fe:fc:25:56:a0:33:18:97:f7:68:a5:7e:83:fc:1e:71:
91:8d:8f:09:7c:cd:20:b4:91:61:a6:a6:93:1c:9e:46:c0:8d:
16:0b:c6:65:e0:3a:bf:e5:e5:78:d2:d2:16:45:6b:55:ae:b8:
fe:08:54:9a:f5:f1:49:3d:04:0a:b5:47:ee:0a:d9:75:a7:89:
e9:20:61:25:7d:31:d9:b6:cb:bb:cf:8c:2b:42:d5:c9:ce:c1:
27:e9:b0:8b:7b:e1:2f:92:b1:f6:39:d3:e7:ac:a4:25:22:3d:
c2:4c:2a:38:71:ad:2a:41:8b:5c:22:ca:e9:15:d6:be:4e:0c:
49:a3:74:c2:22:3a:54:62:f3:f5:7d:fa:a0:56:f5:6c:76:4e:
47:e0:37:30:39:b4:c4:5c:a0:37:58:14:2f:f9:c1:b1:fb:ab:
35:f8:25:67:da:3c:65:7f:7e:53:76:a5:14:29:94:f6:03:58:
a8:38:ef:ea:54:66:b5:c5:6d:a4:64:ce:b9:18:fe:3e:9d:d3:
a0:1e:8d:b8:a3:c6:55:0a:70:dd:a6:e3:77:b0:06:c5:6a:62:
5b:d6:18:99:e6:e3:20:e8:63:fb:1f:d5:61:dd:9a:74:b2:71:
d9:4f:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:20 2025 by rpki-client