Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa
File: 300f284b-a862-3224-8792-73a9f82be269.roa (raw, json)
Hash identifier: +ozeak8NAH/69+024cL0rpt73GKncuXXloixNXuISCI=
Subject key identifier: 36:3F:0E:C3:CA:2B:DE:EA:60:3C:0A:DD:99:2D:A0:F0:78:71:B4:1B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15512DD0CF71A9E228DC9A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 22773
IP address blocks: 166.102.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:12:dd:0c:f7:1a:9e:22:8d:c9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=d6cdcea8-9912-43dd-9978-a65a7571b07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:57:66:8e:ee:9d:4a:e8:37:ff:ed:ef:58:
d0:c1:8f:c4:c1:32:44:55:bd:37:0d:3a:71:dc:b2:
ae:f5:de:84:d4:31:ce:14:f5:53:ec:fc:1e:06:2e:
0c:b4:0e:dc:83:a0:c5:59:6b:c0:de:39:3d:64:22:
13:76:24:58:99:de:38:97:b8:3b:15:aa:a9:19:28:
e5:82:bf:11:cd:cc:db:99:82:c6:18:d4:23:14:f3:
2a:4b:83:7b:cc:87:85:5d:f6:3f:a6:f3:fe:3c:ff:
3c:2d:8a:ad:1e:1f:d5:15:e8:93:82:7e:dc:1c:38:
1b:38:cd:f7:19:b2:54:9a:ba:6c:34:76:80:9f:a2:
c3:76:dd:1a:05:73:f5:2a:94:b1:a9:8d:89:4d:43:
ac:7f:21:83:a6:07:e2:38:4a:e6:bb:81:89:cd:a9:
f5:df:a1:ef:4f:36:6e:86:89:8d:1c:3c:e1:3c:b8:
33:8d:67:c7:ef:8e:73:13:e0:43:4b:1c:84:05:fb:
ab:bc:b1:a0:4e:40:a4:28:6e:3b:f9:ca:4d:16:d1:
ff:c3:0f:50:54:b9:69:d5:73:9c:ee:fc:af:0f:9c:
d4:d9:36:5a:d8:2e:53:67:e2:32:e3:34:13:c7:3a:
83:87:50:7c:cd:2e:81:9f:bf:de:bb:38:e7:95:16:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3F:0E:C3:CA:2B:DE:EA:60:3C:0A:DD:99:2D:A0:F0:78:71:B4:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
166.102.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:6c:41:f0:38:6a:b1:1c:3f:ec:9a:f7:61:64:c9:b5:78:4c:
59:17:4a:83:93:66:a0:24:92:5e:00:8c:50:7f:f1:6d:c0:22:
15:7e:26:ae:f4:9c:03:26:9e:a3:fe:82:9e:4a:29:cf:88:7b:
74:38:40:58:a5:16:bf:f0:2a:8d:db:88:55:24:9f:27:4c:be:
25:2e:2e:9b:54:0d:86:3f:8a:ab:3b:c9:b6:47:45:e1:51:9d:
ed:88:ee:80:b5:bb:66:5e:f0:02:ca:d8:f6:cd:07:c8:fd:91:
89:1b:97:48:6d:b7:1d:a9:7d:38:81:ed:ea:0f:09:3f:2c:d0:
85:71:01:c7:7d:ff:fb:53:4a:fb:3d:00:a1:7d:02:3c:e8:e6:
95:7d:88:f0:15:75:db:ba:d1:06:a7:d6:c4:36:c4:94:d5:02:
ee:b7:ab:7d:42:62:78:70:6b:5a:84:8b:a0:99:6e:89:a2:12:
f9:a6:bb:79:60:c6:fd:83:49:eb:c9:bb:2e:ae:0e:e6:70:2f:
4d:ba:50:3c:d7:16:6d:68:d3:c9:9c:8e:50:c0:d0:7b:e1:95:
c7:98:e1:83:eb:f4:ad:24:0d:ce:ec:6a:a0:20:4e:9a:a9:d7:
30:32:a8:4f:a5:97:5a:10:a7:96:aa:be:81:87:97:a8:3d:a7:
a2:a2:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:20:52 2025 by rpki-client