Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa
File: b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa (raw, json)
Hash identifier: TpCobOsxW8RvZ/Czj/FgT0oYzzmxDTDO2I4y+M0aPBk=
Subject key identifier: C7:CC:8F:5D:3E:5C:11:6B:19:36:65:FD:64:89:53:68:50:CC:96:70
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584858A03E1EB40E53C44E4EA580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 5650
IP address blocks: 166.88.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:3e:1e:b4:0e:53:c4:4e:4e:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=14f8c292-bdc3-4a0d-bae5-7582ebfe34ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:6d:9e:4b:2b:f2:30:96:08:0a:cf:1c:40:
b7:7b:f3:bc:c0:d3:95:27:5b:ed:6b:58:7a:04:3c:
ac:c7:2a:9a:2c:18:ae:73:45:6d:66:26:54:b7:5f:
ec:2c:0c:79:29:ef:a1:70:b9:de:e5:e5:f8:52:89:
7d:86:60:06:9e:8c:b3:91:31:56:cc:6b:8d:a6:15:
e4:0a:6e:fc:e9:11:9a:65:e3:33:8b:49:69:71:a8:
5d:25:c3:03:1e:9d:19:d4:b1:3d:32:90:3e:cd:6b:
f8:cf:f0:f4:4d:d7:05:fa:0e:1e:b6:42:f2:ab:52:
1a:0b:c9:be:7b:3d:81:63:25:b3:d4:fa:c2:dd:1f:
e1:1e:4c:fe:08:51:21:4d:d6:0e:32:79:8b:fc:bc:
db:9e:79:71:ac:8f:9d:f7:29:ab:00:80:3b:17:90:
20:ad:01:a7:0f:70:99:a0:e4:19:94:7e:68:c8:00:
a7:65:9e:3b:4c:86:a4:53:73:66:78:1a:99:68:8a:
f7:47:74:17:e2:a3:ca:40:83:3a:e8:29:44:bd:02:
36:21:18:8b:58:ad:df:66:18:bd:06:70:bf:84:cb:
f6:f3:a9:ab:49:56:ca:d4:2c:e7:aa:eb:12:0b:aa:
44:19:dd:bb:da:ec:8f:22:f3:9d:39:9c:1c:66:d7:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CC:8F:5D:3E:5C:11:6B:19:36:65:FD:64:89:53:68:50:CC:96:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:68:c4:46:bd:e8:0b:19:75:8f:31:f8:31:13:43:37:cf:e2:
cb:2a:22:80:0c:da:98:b2:1b:54:b3:8b:c8:7e:73:3a:20:e8:
58:fd:7e:f8:62:58:15:34:8f:b1:44:38:b6:89:2f:4b:83:11:
5d:12:68:23:fe:3e:a9:f7:af:1e:7f:f6:5c:f4:80:98:da:ba:
e9:aa:49:cd:de:73:d9:60:10:c6:3c:d6:63:26:68:fd:84:96:
cc:f0:4f:6e:9f:9d:5b:a7:cd:88:59:16:52:c5:fb:a7:10:d2:
24:3b:1c:ad:b7:b1:d3:69:40:c0:55:af:09:d2:e4:f6:75:e7:
fb:d2:29:36:6b:70:69:70:be:40:d4:ec:30:cf:af:7b:b0:37:
a2:52:d7:8e:bf:5e:79:db:fe:53:3d:c9:de:0a:85:d0:5d:8d:
ee:da:38:3f:5d:7e:b4:3f:65:bd:34:a1:12:c5:d2:d1:bc:30:
b0:67:0a:cb:9d:ae:e9:c1:54:16:02:3f:9d:d0:06:c9:ec:8f:
be:12:b3:c0:05:e7:3c:09:3d:bf:b0:14:02:4b:cd:d7:20:07:
84:8f:e0:9f:2f:1c:54:17:fd:c6:0e:07:b3:39:a0:17:85:55:
ec:33:20:2f:e9:cf:4f:f9:97:60:6e:62:69:be:f4:ff:f5:01:
80:4b:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:00 2025 by rpki-client