Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e11e8bc5-d834-3738-af0c-243fddb154ca.roa
File: e11e8bc5-d834-3738-af0c-243fddb154ca.roa (raw, json)
Hash identifier: 0L/hVm0z5s2H7ocvWHJjCvjYIJNwVgIqSc4P25VybaQ=
Subject key identifier: CF:7C:D2:77:36:67:4C:4A:56:EC:BF:69:EE:7E:5A:08:7A:27:B4:96
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A99631467550CBFB737DBF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e11e8bc5-d834-3738-af0c-243fddb154ca.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 21859
IP address blocks: 166.0.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:31:46:75:50:cb:fb:73:7d:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=9d658f71-5bb2-486f-81a4-f4c15aac57c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:40:7a:6d:35:24:95:96:f2:87:5e:c6:b2:63:
11:e7:1e:4c:3a:1d:00:a0:59:49:43:e6:07:2f:67:
3a:74:52:46:e3:ab:9d:02:3a:2b:f5:ba:56:ac:87:
d1:a1:5a:ae:bf:0f:ca:87:e3:60:6c:9f:d5:03:10:
56:3d:e0:40:4d:13:21:f4:b5:eb:75:75:8d:53:d4:
88:13:b9:0e:22:33:13:73:cb:4a:4b:eb:1f:6c:e0:
5b:61:cc:3d:f8:8a:ff:8d:c0:85:bd:80:d6:26:28:
c7:70:83:4a:6e:46:ff:da:0e:62:9f:9f:a0:6e:29:
70:83:ca:0c:25:bb:e6:74:28:ac:9b:6c:f3:82:24:
99:3f:7b:87:5b:63:26:26:f1:63:a4:87:5c:55:9b:
2f:a7:a6:7e:9e:40:8c:85:47:83:d9:22:1f:38:96:
6f:50:11:ea:b6:de:37:96:d0:96:e9:3b:13:09:a2:
7c:94:48:c3:38:87:23:ce:36:79:c1:9c:77:46:e6:
af:39:b6:b1:e0:f4:c3:81:93:d2:cd:37:13:44:18:
63:c0:bc:e3:0f:46:7d:b7:7b:b2:be:06:eb:f4:0e:
32:53:f7:8d:e2:52:a8:3d:2e:ca:2d:8a:1d:86:0e:
38:f5:36:5c:ce:b5:fc:ac:54:33:e0:4b:30:75:b0:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7C:D2:77:36:67:4C:4A:56:EC:BF:69:EE:7E:5A:08:7A:27:B4:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e11e8bc5-d834-3738-af0c-243fddb154ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:4c:72:f7:7b:de:05:ae:7a:00:02:e7:46:e0:f8:6a:61:08:
a0:70:ae:b0:c0:3c:a4:6f:92:3d:2f:cc:4d:dc:d7:a7:41:78:
26:89:1c:87:4d:52:a4:eb:ce:9f:87:9d:da:5f:dc:a8:2c:fb:
fb:e7:c8:82:bf:16:1a:b7:07:bb:eb:bb:2d:68:0e:a3:98:c6:
44:94:5f:d0:20:79:55:15:b7:63:42:d5:d2:71:5d:23:b0:3f:
9a:5f:61:1d:d5:89:c6:ed:89:21:c7:5f:ba:20:ae:dd:89:31:
c8:1e:e5:e6:31:09:66:50:72:f9:93:fc:df:d8:0d:33:31:6c:
5e:b8:09:4e:01:c3:d3:19:0e:16:43:01:61:9c:d1:35:df:d4:
84:bd:cb:8e:b3:a9:bf:1f:81:03:4e:00:45:1d:14:29:f2:16:
4f:26:cc:49:2f:38:76:69:db:44:69:9f:46:6c:7d:07:10:21:
6a:a4:e1:1a:d6:de:c7:af:f6:e6:e5:5a:d2:df:16:0d:e2:5c:
e8:c1:f8:53:cf:dc:10:25:7a:a3:15:94:64:c8:78:e5:b8:17:
26:9b:b2:77:fa:04:52:24:53:26:37:f4:ff:75:51:a0:08:3c:
46:5c:ca:66:df:48:bb:e9:a4:8c:60:59:3e:3f:fe:53:b2:9c:
52:80:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:57:16 2025 by rpki-client