Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa
File: e5a2b901-93aa-343b-bf32-8a23a333f069.roa (raw, json)
Hash identifier: SNJUM4ynXyFgl9jcdvWd+5dfaS2b+9tFHMC8q940ayQ=
Subject key identifier: AA:C3:47:B4:FC:09:EF:4B:23:87:5F:8F:5C:C1:B5:2E:59:D4:12:0D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847F584F80BF6DB4C27B48F1D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 21859
IP address blocks: 108.165.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:f8:0b:f6:db:4c:27:b4:8f:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=2b74a769-a158-4f4d-947e-80285237d2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:64:4e:b9:78:e7:b1:16:98:0f:00:08:90:
0b:0c:ac:96:6d:c0:79:fe:a2:ff:b8:59:cd:13:00:
cd:a0:7a:10:10:79:8c:34:9c:42:19:0d:0d:59:ac:
0a:ef:a7:9a:85:5a:b8:64:f2:16:04:15:09:4e:5d:
f5:b0:4a:e0:6b:28:4a:30:7a:94:37:df:2a:ce:a8:
92:58:fd:51:b1:55:a7:80:b5:db:a6:81:ea:39:5a:
ab:07:33:76:a4:68:57:d3:b8:a3:9d:4a:89:e3:32:
60:67:31:49:35:8e:bc:34:22:07:d4:e3:27:4e:e7:
f6:fb:96:a7:04:2d:77:83:33:27:63:75:1c:ca:c9:
f2:01:1e:cf:62:1f:a9:11:a5:19:4d:51:72:f0:5e:
5a:26:06:b9:b1:5f:f8:a1:c6:8b:76:0d:73:db:f5:
d6:69:95:cf:ef:21:e3:7b:84:64:69:cb:77:18:67:
4e:f1:59:fe:64:8f:e2:0f:ea:9d:59:c7:f4:76:d1:
a1:7b:10:92:52:9d:59:c1:89:ad:9a:dc:ed:61:af:
8f:6f:b9:a0:0c:15:54:6b:b8:72:5f:d1:19:e8:9b:
f6:4a:23:e3:74:71:bb:2e:b7:90:4f:28:2f:69:7e:
ab:3e:ce:7a:a3:3b:65:57:5e:7b:6a:25:4a:94:ed:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C3:47:B4:FC:09:EF:4B:23:87:5F:8F:5C:C1:B5:2E:59:D4:12:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:f3:5d:61:26:61:11:1b:43:c7:51:c9:8b:e7:d0:6d:dd:eb:
15:d4:d2:ad:05:ee:fe:bf:84:c0:7e:82:6a:ac:5b:0f:9a:f1:
e6:5a:00:e3:d0:3b:e6:39:92:26:8c:ab:5a:4d:36:5a:43:cc:
a6:81:f7:6f:54:3b:f2:7c:2f:ca:4b:fd:06:48:6c:93:59:58:
3e:a9:3c:c8:21:f3:ef:0d:bc:c9:c6:e2:0b:e9:90:36:34:6a:
f1:b4:59:2e:a1:e2:02:a2:2b:a0:9f:ef:2c:61:d0:df:7a:6c:
3f:17:cd:7a:c7:d3:16:6b:be:ca:92:fd:93:51:4d:1c:82:a2:
93:8b:46:1b:98:94:bf:fb:dc:e5:58:62:e5:90:cc:86:20:51:
fa:f2:e5:fe:c6:db:80:78:e3:b2:f3:a4:fb:4f:58:f1:21:78:
31:17:da:e4:aa:33:3d:df:4a:86:16:10:61:dc:23:e2:a5:9a:
71:78:1b:cd:07:53:38:3c:0e:a7:a4:f9:0c:4b:eb:f1:62:29:
8d:53:28:3f:c8:76:33:03:be:b4:56:fe:ac:a7:f0:47:59:d3:
32:50:f4:e5:8a:cc:4a:b7:35:5c:0b:fd:6b:d1:16:23:54:70:
9c:00:0d:49:fb:59:1e:02:13:c5:1b:99:ad:9c:bd:47:fa:bc:
75:9d:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:57:22 2025 by rpki-client