Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8d11418e-71f4-3e76-a99b-f177cacd9406.roa
File: 8d11418e-71f4-3e76-a99b-f177cacd9406.roa (raw, json)
Hash identifier: f/G/g3LwXQjQh5zNV9rCGk2luUDIqJLkLymMyOIre78=
Subject key identifier: 61:5E:0B:07:64:50:AC:99:DB:51:32:A3:9A:F6:97:43:16:E5:65:AE
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F432858482F70A9F32088E3B99AFEFC80
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8d11418e-71f4-3e76-a99b-f177cacd9406.roa
Signing time: Thu 12 Dec 2024 19:56:53 +0000
ROA not before: Thu 12 Dec 2024 19:56:53 +0000
ROA not after: Wed 12 Mar 2025 18:56:53 +0000
asID: 16789
IP address blocks: 137.66.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2f:70:a9:f3:20:88:e3:b9:9a:fe:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Dec 12 19:56:53 2024 GMT
Not After : Mar 12 18:56:53 2025 GMT
Subject: CN=db5e8ad7-21a2-4cbf-bc28-2660e445973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:c1:02:29:8f:56:f2:12:74:15:b0:fd:d4:
cd:40:2d:61:7a:12:6f:fb:a4:c9:bc:df:89:4f:cf:
f0:93:6a:eb:2c:de:1d:fd:f8:a8:bf:0f:5c:23:d6:
6f:e3:38:6f:c1:4f:95:e8:46:53:09:d7:e4:bd:eb:
4a:af:eb:c7:9d:4d:f2:53:74:64:b1:8f:1d:ec:33:
cb:d6:ba:4f:50:f4:db:04:ee:81:60:5a:71:12:5d:
2f:3b:16:c4:0c:8e:58:30:ca:69:d9:5c:1e:25:06:
22:cb:a6:a5:c8:87:8b:d2:2f:6a:e0:08:e4:db:cc:
36:2a:fc:35:00:8f:8b:10:7e:d0:b7:51:78:96:29:
1c:90:92:1f:8f:4e:5c:64:e2:62:6a:12:d6:af:56:
0a:70:0a:bf:7d:95:7b:07:6c:08:fc:19:83:e5:2e:
01:e1:dd:ad:dd:09:6e:99:ae:74:ed:52:46:d1:ef:
47:bc:83:0f:ed:41:0d:8a:c4:52:85:21:c4:19:27:
f8:a3:12:7a:56:42:84:99:83:0e:63:45:c1:09:54:
07:28:bc:e2:35:c9:3a:3c:c2:c7:db:60:57:50:a4:
b9:07:4a:77:69:52:88:5b:ff:6d:ec:11:ce:97:ce:
6b:c2:87:09:f0:1b:0a:32:de:14:c1:e7:7c:47:08:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5E:0B:07:64:50:AC:99:DB:51:32:A3:9A:F6:97:43:16:E5:65:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8d11418e-71f4-3e76-a99b-f177cacd9406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
137.66.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:78:c0:60:49:32:b6:10:a5:c7:c2:85:ee:1d:b1:2c:c6:0b:
c7:ef:5c:0c:9f:cd:9d:0e:47:13:bb:05:c7:bf:07:44:01:ac:
e4:7d:7a:ff:17:1b:1f:8e:d9:cf:87:8f:a6:7f:e2:69:3c:cf:
88:70:6e:ba:20:1a:7e:cf:be:20:90:8a:40:26:dd:b5:eb:6e:
d6:1a:a8:de:ba:5d:64:cd:70:29:46:6d:80:4d:72:2f:d8:fd:
8c:51:39:ae:02:ab:78:2f:10:77:e7:2d:21:45:7a:eb:90:c4:
1f:c9:fb:04:eb:2d:4c:18:79:de:61:b3:39:82:00:25:66:99:
80:95:9b:a2:0c:3b:71:6a:6a:56:50:12:6f:70:cc:dd:6a:55:
31:73:5a:0b:e4:74:f0:8e:e7:66:2f:02:0e:60:fc:c7:fe:5a:
21:1e:99:86:46:45:d3:ab:9b:25:16:d9:60:ba:07:07:27:48:
3d:3f:2e:3e:fd:d0:0b:2b:f7:3a:75:84:4b:14:a7:9d:fd:58:
11:67:6b:3f:e8:a1:ba:cc:48:36:e7:d3:dc:09:5a:e4:e6:55:
1d:c7:48:d0:9a:5f:aa:53:41:a8:19:1c:bf:d0:32:c6:f0:f9:
38:67:99:48:4b:40:de:43:76:e8:fa:cf:f9:8d:3d:56:92:2f:
3d:5a:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:49:28 2025 by rpki-client