Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5ed8cf9-29db-3c51-b457-6feb3fe28be7.roa
File: e5ed8cf9-29db-3c51-b457-6feb3fe28be7.roa (raw, json)
Hash identifier: BpCjkD7qHZX5AWcALEir7W/cS6q0rFAUIwR1Eo8r3Zo=
Subject key identifier: 6B:D4:97:5F:DC:00:19:A5:8B:84:E5:53:55:04:A6:4E:CE:F3:47:F6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA426C627FABC26C9B43900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5ed8cf9-29db-3c51-b457-6feb3fe28be7.roa
Signing time: Mon 27 Jan 2025 18:04:06 +0000
ROA not before: Mon 27 Jan 2025 18:04:06 +0000
ROA not after: Sun 27 Apr 2025 17:04:06 +0000
asID: 11798
IP address blocks: 166.0.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:26:c6:27:fa:bc:26:c9:b4:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:06 2025 GMT
Not After : Apr 27 17:04:06 2025 GMT
Subject: CN=3932b8c7-aa21-4440-bb1e-dfb55d992d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a4:26:ee:45:1d:e4:ff:ae:b0:00:a2:be:97:
2d:a9:a5:4f:1a:df:a6:02:3d:f7:16:26:91:70:21:
f1:5c:ba:03:61:d9:62:4d:2c:04:69:e4:1a:ff:5f:
d6:66:f5:5d:de:9a:a8:26:cb:a5:1d:43:f3:ca:34:
9b:5b:35:7b:17:50:67:78:04:cf:dd:c3:f9:59:6b:
e6:26:32:54:58:2a:3c:72:8a:a5:d4:e6:d4:d1:eb:
d3:ad:ca:9f:b7:9b:5c:a1:43:fb:fa:38:3d:f2:b2:
09:ac:ee:65:bf:55:b3:b7:a7:24:79:a8:4a:4c:e7:
8f:b4:8f:0b:45:8c:3a:dc:7c:a0:a4:2b:12:65:1e:
05:e3:ec:e6:fc:52:88:3c:42:3f:b2:dc:c0:7b:ae:
b5:4c:d8:31:e8:19:e8:fe:4b:f6:d5:aa:06:3a:f5:
fe:fa:7c:5e:76:1e:ed:6d:c5:ac:ad:74:08:42:06:
9b:0e:cd:e5:02:5d:d1:52:17:97:c2:af:1b:36:2f:
7f:fb:ff:d6:56:fa:bb:1f:7b:9e:73:a3:87:20:74:
63:65:89:d9:f3:be:ca:c7:f2:0e:31:44:34:9e:64:
d2:a0:a2:1d:b2:66:a7:db:9e:b2:4a:c6:15:1e:ad:
bb:90:08:cb:4e:2d:02:6c:34:d1:35:70:4f:6e:de:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D4:97:5F:DC:00:19:A5:8B:84:E5:53:55:04:A6:4E:CE:F3:47:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5ed8cf9-29db-3c51-b457-6feb3fe28be7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:9b:d0:12:59:03:3b:ea:e9:1a:7c:5a:1e:62:8e:e7:05:b9:
c1:62:09:f3:0f:92:7a:90:a7:17:ab:63:96:b8:2e:48:36:e3:
8e:73:8e:ca:1a:81:88:da:8c:48:55:0e:9b:7f:c6:cd:d6:66:
16:86:77:e4:2c:35:20:72:48:68:86:42:18:bb:c1:ac:38:1f:
d0:cc:73:41:3c:c6:84:cf:34:e9:9c:ac:75:d6:0b:47:f1:28:
61:fd:7a:ed:98:64:13:97:19:e6:ac:c4:ae:2a:48:18:73:c0:
ee:31:97:30:9c:0d:2d:6d:87:38:50:b1:40:f6:14:f7:53:a0:
64:87:57:94:3a:af:36:70:9c:7b:47:b2:ac:08:0c:2c:e2:39:
06:fb:36:b5:03:9d:26:46:fc:56:83:03:b1:39:72:6f:e4:41:
8e:0a:1e:f8:2f:10:06:f3:cc:c5:6a:16:c3:9c:3c:2d:15:a3:
5b:b7:3c:bd:3b:9b:5f:05:3b:24:77:d0:66:1b:ae:02:d9:1f:
5a:30:03:36:e4:9c:4e:dd:03:12:2d:36:f9:42:35:e0:78:ed:
18:d2:9a:22:94:7e:fa:7d:8a:61:b9:33:7b:93:55:97:46:52:
d7:8e:f4:f2:ba:08:15:5a:4a:a8:7e:4a:b4:db:83:66:3d:c3:
c4:55:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:01:44 2025 by rpki-client