Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/b3e3f44c-d84d-355c-bc11-a19a401c1318.roa
File: b3e3f44c-d84d-355c-bc11-a19a401c1318.roa (raw, json)
Hash identifier: Y+Hy7dDhD6o2307eO2LT079gLY6aeK6qMWviATgWoq8=
Subject key identifier: 0E:C2:54:AA:05:92:99:F4:15:21:18:23:43:11:F5:13:8F:3B:E4:12
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F43285848100A93C504F349BA3BEDD686
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/b3e3f44c-d84d-355c-bc11-a19a401c1318.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 16509
IP address blocks: 66.178.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:93:c5:04:f3:49:ba:3b:ed:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=99cca6f1-60bc-4ef3-96db-d556a0f97e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:a1:12:5b:49:d1:c4:aa:9a:8c:5f:44:c1:
1c:99:02:7d:e4:c5:6d:09:b8:fa:b5:94:47:d5:be:
79:fd:62:d9:c3:dc:d6:98:54:2e:2d:1f:93:3d:84:
77:b2:2f:6b:23:a5:2b:35:24:95:e1:53:ad:e8:01:
22:f6:3d:b6:1f:06:78:31:8e:8e:a7:63:ba:30:6c:
6c:c5:94:6a:5f:ca:1a:b4:4e:a7:dc:21:12:0d:9f:
fc:87:7a:e5:98:71:a1:3f:09:5a:6b:c2:ef:8b:28:
76:88:dc:62:30:28:7e:f5:ad:d7:64:fe:56:6d:a8:
08:6a:77:9c:ae:b6:2c:7c:a6:fb:36:cc:3a:a2:bc:
59:d7:66:b1:65:2e:ab:93:2d:09:bd:5e:17:70:35:
75:98:19:b4:1a:a2:f6:af:e1:dc:45:6e:5a:51:5e:
b7:f5:80:8c:95:89:28:c7:ad:5b:8f:c7:bb:09:0c:
58:6f:19:6f:ba:a8:75:8f:b2:e6:5e:9c:0e:3b:d0:
1f:e1:5b:87:20:cf:03:5d:a6:58:ec:f1:8f:73:b7:
d2:4b:b7:d4:5f:16:61:4f:17:be:e5:c4:65:f6:e8:
88:f9:9d:8c:e9:8c:51:79:4e:e8:c5:a7:aa:b7:66:
7a:40:ab:1a:5e:64:29:04:d9:17:27:53:35:aa:79:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C2:54:AA:05:92:99:F4:15:21:18:23:43:11:F5:13:8F:3B:E4:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/b3e3f44c-d84d-355c-bc11-a19a401c1318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:8d:8f:60:5a:e1:03:ab:aa:da:37:d6:3a:d2:c3:87:c7:c8:
33:5a:6e:4b:b8:7f:62:8d:2c:41:d1:0c:0b:d0:1c:7f:c6:ba:
a9:68:2f:82:6b:fe:c8:46:47:8b:7d:59:b0:cc:c1:65:2e:21:
56:65:41:22:1e:ee:e9:20:24:4e:bb:4d:c2:ff:88:6e:dd:2b:
66:80:8f:04:03:27:77:df:16:fa:9c:29:34:a9:f1:a5:3e:1b:
7b:3a:62:94:0c:ef:dd:47:c0:1d:26:f4:33:90:fe:db:c4:e7:
da:3f:17:54:f3:72:44:fd:5d:46:62:66:a9:14:96:9e:02:e8:
09:fe:32:9d:0c:a3:ba:d1:de:19:77:e0:40:b7:1d:d7:52:5e:
54:47:3c:98:ee:a7:82:c4:74:56:bb:67:6d:09:b1:80:6e:b0:
45:c4:41:9f:99:5c:09:98:03:6a:68:99:1c:98:b6:3a:6c:81:
35:69:04:1c:e8:ff:bd:e1:a3:dc:20:18:f7:50:14:3f:e1:f1:
f1:76:8c:62:e8:be:8b:ab:e0:c7:28:c2:71:87:3f:fd:18:1d:
40:c8:32:44:98:47:d7:80:6f:6f:53:7b:56:ff:75:b9:fc:f5:
72:59:7e:01:ef:31:6e:51:1c:aa:47:7d:73:93:f7:34:49:6a:
af:93:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:03:02 2025 by rpki-client