Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbae651-8d87-35f3-9342-d06b82cf18c4.roa
File: ffbae651-8d87-35f3-9342-d06b82cf18c4.roa (raw, json)
Hash identifier: NzdHzLL9HoStOcnhnV9Pc13LeW9c3Lx0BdZPI2Bt8Fo=
Subject key identifier: 68:A2:3F:93:48:E3:BE:A9:9A:BC:74:B4:82:71:46:D2:9A:A4:7F:FE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848801DCC0674FE81FCAEA18920
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbae651-8d87-35f3-9342-d06b82cf18c4.roa
Signing time: Fri 10 Jan 2025 17:30:24 +0000
ROA not before: Fri 10 Jan 2025 17:30:24 +0000
ROA not after: Thu 10 Apr 2025 16:30:24 +0000
asID: 213993
IP address blocks: 108.165.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:1d:cc:06:74:fe:81:fc:ae:a1:89:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 10 17:30:24 2025 GMT
Not After : Apr 10 16:30:24 2025 GMT
Subject: CN=cbee9ed1-bf50-405d-b3eb-4db978401fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:1b:c6:e9:4c:e7:da:f3:45:76:7f:6c:a6:
c2:f4:99:18:1e:ab:49:40:6c:47:0d:3f:18:e7:1c:
52:a2:1d:5f:9c:15:14:cc:68:78:6d:0c:ba:62:eb:
d9:d7:31:18:d5:fa:f6:b8:1d:30:0d:a6:e2:30:8d:
a5:87:d0:95:ee:19:d2:ed:31:0e:58:a8:03:6e:a5:
49:80:36:23:dc:fb:2f:c2:70:b0:a8:c8:22:16:5e:
84:b6:e5:5b:8f:67:39:b8:30:af:c2:81:93:5b:96:
6e:4e:93:5d:2c:7b:7a:51:2a:24:e4:3b:4f:fa:a4:
47:9c:9b:57:cc:38:b6:6a:34:05:3d:59:f2:d2:53:
6c:ea:e7:71:51:65:17:38:cb:b1:f5:3c:a1:e3:8f:
c7:2b:b2:ea:c9:ba:55:0f:9b:2d:45:5d:d8:7a:7b:
fc:e7:aa:f3:42:b6:01:9a:a4:87:d3:99:cb:ee:ec:
55:69:93:ce:11:f7:70:f6:7b:4d:bf:8b:a4:5a:b7:
fc:1a:1a:92:93:49:99:c3:9d:a9:c6:08:77:01:9d:
65:a4:3b:41:52:bb:15:8b:27:35:80:15:d7:be:b1:
99:41:ee:52:d6:8a:05:6e:b3:f5:37:d2:b3:79:3a:
a5:ea:05:bf:a8:83:d0:82:e9:a3:4e:15:ef:d1:dc:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:3F:93:48:E3:BE:A9:9A:BC:74:B4:82:71:46:D2:9A:A4:7F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbae651-8d87-35f3-9342-d06b82cf18c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:43:99:b6:54:4e:f3:c0:13:30:83:4d:71:fd:79:7b:41:b7:
89:50:a2:60:8a:cd:14:8c:7f:80:2c:a0:bd:d0:27:2a:d5:dc:
f7:e4:7b:5a:04:a0:1e:31:7a:ab:83:fd:36:c9:4b:87:2c:36:
9e:83:2c:e4:f2:3a:3e:14:0d:2a:29:8f:55:b4:39:54:2e:32:
fd:ac:e8:42:e6:64:27:a4:14:de:ec:d1:9d:b3:1e:4a:08:f6:
9a:a4:38:09:62:46:ac:67:f1:fe:84:94:4d:4a:14:f1:60:37:
e7:56:d9:0c:4f:c1:73:57:9f:31:a9:10:06:37:74:81:c1:1f:
6a:da:75:a1:db:4a:31:b6:78:34:58:e0:ee:e7:6c:7d:8b:9d:
d9:54:98:ed:ab:8f:04:bb:d3:b1:a6:9e:5c:14:bb:d1:25:73:
51:bc:c6:a4:32:26:9d:05:cc:bb:13:9b:8f:8d:ab:e9:7f:63:
ea:f9:af:39:11:ea:6f:11:5f:ed:b3:23:5b:3e:4f:53:58:12:
77:48:25:24:a9:df:20:fe:9a:fa:a3:1b:0f:f0:49:9e:87:73:
4c:c1:9a:75:a0:ca:c8:64:0d:51:f6:48:82:26:ab:8d:e8:37:
63:8b:49:0d:a9:df:5f:61:af:66:43:64:4a:db:90:b3:b8:3a:
fd:4c:1d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:14:13 2025 by rpki-client