Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe01bbf6-7262-32e3-8c5c-6ae0c9b81220.roa
File: fe01bbf6-7262-32e3-8c5c-6ae0c9b81220.roa (raw, json)
Hash identifier: fr5oNxoU0FeVYY8dDpSRi6UhffqFCB65xOPVV71+yXI=
Subject key identifier: C4:B8:D4:1A:18:41:C4:D4:87:A2:B2:35:24:38:A6:B4:BC:76:67:6F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848116FF97F28B2515544A2EA40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe01bbf6-7262-32e3-8c5c-6ae0c9b81220.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 58061
IP address blocks: 166.1.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f9:7f:28:b2:51:55:44:a2:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=4cd5a14c-db0c-4672-bf40-e71672e81a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:79:dd:94:91:8c:d3:da:52:3c:86:bc:d4:
83:f3:7c:27:0c:e8:00:a8:72:15:8d:ae:e0:f9:f6:
8a:89:4e:ca:ca:74:4d:b4:ca:c4:4a:77:70:6f:e4:
9e:b5:1c:23:09:a2:a6:16:a2:43:74:80:c4:94:56:
19:ee:d7:76:ef:f3:51:e6:69:4b:6f:44:79:27:b6:
f7:6a:89:2e:ad:17:0d:74:d8:dc:d3:89:50:4e:89:
0d:a3:72:da:6c:3d:ba:29:87:c7:56:8b:7d:5c:ff:
13:6d:5c:8d:d3:71:d2:c1:e6:80:79:2f:40:9d:0f:
1e:96:64:3c:a5:71:df:19:ad:d7:14:f2:45:ea:df:
23:e6:89:49:07:b4:66:29:27:ce:01:22:ad:32:bb:
ce:3a:ae:8d:d0:d0:82:d7:f5:fd:08:33:18:b6:2b:
08:f5:2e:49:c4:f2:30:67:f8:4a:47:52:04:98:62:
84:67:eb:c8:d0:82:20:c0:3e:87:fd:0c:07:d5:19:
d2:b5:77:56:14:ad:7f:ee:9e:f3:b7:9f:9f:80:73:
ae:d5:7b:30:dd:9b:1c:33:81:b4:13:43:88:4a:47:
63:96:eb:1a:25:97:88:ba:0a:98:a3:dc:9a:91:bf:
7c:01:22:8c:e7:3f:b8:a1:bf:b4:98:04:48:3a:47:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B8:D4:1A:18:41:C4:D4:87:A2:B2:35:24:38:A6:B4:BC:76:67:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe01bbf6-7262-32e3-8c5c-6ae0c9b81220.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:d3:20:e9:2b:24:b9:e7:e6:e8:dc:c5:08:a8:8f:09:2b:b4:
95:68:5f:1a:22:a3:d1:b1:aa:43:1c:b7:ea:df:b5:f4:84:51:
6c:8a:4f:5c:b3:84:9d:9e:04:88:60:78:da:19:f4:90:6a:53:
91:56:fb:07:18:6a:67:8d:72:7b:6a:91:5e:c6:a6:b6:5b:48:
a0:60:ca:e7:0c:f3:d2:b6:9d:4f:70:b8:55:20:bf:d2:46:df:
9e:5a:54:93:9b:f1:b1:d7:3e:42:52:3a:4d:99:33:5e:7a:3e:
35:09:98:72:b2:f9:c3:57:fa:08:b6:1e:3d:03:f2:c0:04:f2:
3e:cc:aa:18:b2:db:85:ba:e9:0a:08:55:67:e5:58:95:67:77:
9b:3b:ea:ec:b7:84:80:42:7b:5d:4e:e6:f0:34:9c:cf:32:6e:
0e:1f:d9:a4:2f:e4:d6:31:4a:34:d6:9b:5f:30:f3:fe:dc:7b:
c0:d2:c9:f8:3b:86:5f:85:e1:d9:e0:ce:65:d6:23:60:aa:1e:
2e:8d:4a:2f:b1:b2:45:55:06:42:b7:33:5d:86:62:60:2f:6b:
e3:41:c9:73:01:1f:71:95:bf:90:d0:04:34:6d:1d:e1:e8:c4:
ef:70:02:27:8f:4d:da:c6:7c:09:94:67:4b:f4:08:be:1b:37:
59:48:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:37 2025 by rpki-client