Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/173e2676-a6bc-38ab-8c26-c2254b8003d7.roa
File: 173e2676-a6bc-38ab-8c26-c2254b8003d7.roa (raw, json)
Hash identifier: aqa6qmux/CjECa80KNKwju5GDfivOSZaAwL04q35VSY=
Subject key identifier: 7E:DB:F0:EB:85:7A:9C:CC:14:28:85:C7:70:A3:AE:AB:54:5C:7B:93
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F0088A6AA9DA0D38F39DCD60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/173e2676-a6bc-38ab-8c26-c2254b8003d7.roa
Signing time: Wed 19 Feb 2025 19:38:06 +0000
ROA not before: Wed 19 Feb 2025 19:38:06 +0000
ROA not after: Tue 20 May 2025 18:38:06 +0000
asID: 44477
IP address blocks: 166.1.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:08:8a:6a:a9:da:0d:38:f3:9d:cd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:38:06 2025 GMT
Not After : May 20 18:38:06 2025 GMT
Subject: CN=cf4e0be3-2729-4f15-9aff-e076c6357477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:6d:3f:9a:3f:55:f1:02:53:29:8a:2c:bb:
1e:a4:2d:3a:a0:3a:bf:0d:76:2f:f6:06:11:f5:79:
c4:3f:fe:44:c6:b5:c7:60:e5:23:53:27:3e:ea:38:
65:e8:77:f8:dd:af:24:2b:83:ff:a0:1c:61:46:49:
05:a8:ab:8b:a1:46:71:24:77:23:83:44:03:17:a2:
b4:91:0b:a3:48:b6:9c:d7:20:93:dd:59:89:b5:15:
2d:6f:f2:3f:76:60:c4:fd:07:f6:f0:c5:69:51:4c:
45:21:44:d2:61:b1:bf:0d:10:b8:61:d7:d4:50:00:
c8:d0:1a:43:4d:51:da:9a:a8:cf:76:4b:ae:15:89:
4a:cc:0e:c4:28:e1:7f:c1:7a:f0:05:77:25:88:b3:
1b:9c:f9:d1:37:63:9f:72:b7:70:40:12:9d:32:83:
99:7f:a3:37:57:e3:a7:3d:80:59:09:47:d7:be:47:
3b:28:ac:49:9d:c7:44:d5:73:82:33:6e:61:e7:72:
f8:27:3c:fb:63:1b:65:72:5d:7f:25:e7:f0:e8:d1:
a0:09:91:26:fb:0f:a2:8b:8b:b9:e6:c3:94:6f:59:
76:8f:11:62:45:78:54:cb:c2:7a:26:f8:f7:4c:aa:
f8:21:08:33:2f:5d:70:7b:3b:43:2c:d3:99:39:2f:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:F0:EB:85:7A:9C:CC:14:28:85:C7:70:A3:AE:AB:54:5C:7B:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/173e2676-a6bc-38ab-8c26-c2254b8003d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:5f:5a:4d:36:31:37:60:8d:c2:56:f6:ee:20:5a:01:ae:26:
8f:f8:fe:9d:1a:31:8d:f6:ea:22:7e:3b:fc:bf:1f:7d:b4:15:
7e:e6:4d:63:f9:3c:38:90:d8:8c:f3:dd:0a:28:48:69:2f:dd:
a2:89:d4:f8:d0:e5:c2:f2:12:c1:6f:76:da:9b:36:de:bb:40:
05:3f:20:42:63:dc:3e:33:01:4e:bc:33:0c:2b:2c:0c:03:bf:
59:4c:bb:a3:17:4e:a2:2c:54:73:1f:bb:7c:d9:7f:44:a9:fd:
1e:a6:a5:dd:95:e1:75:fd:53:b5:8a:ae:ae:9a:8a:a1:b1:68:
d2:21:43:36:bb:4d:9e:40:28:e9:52:da:8d:06:e8:f9:b5:1d:
1a:29:90:2a:9d:8e:b5:8d:f5:55:45:d3:7a:94:68:b1:3f:94:
e3:f1:7b:c6:bd:78:16:12:e6:34:86:42:8f:41:72:4f:6d:6c:
62:c8:f8:67:13:94:ba:47:1c:7b:b0:04:80:04:78:a9:ab:da:
d0:90:13:25:32:e7:64:fe:5b:9f:c3:81:35:77:79:53:ce:c9:
d5:9f:ea:e0:25:cc:52:7c:d2:67:0e:66:e8:e3:36:be:7d:f8:
ae:e2:e7:c8:a8:f8:e4:78:9b:a4:db:99:f8:52:01:a3:e6:32:
bb:fd:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:48 2025 by rpki-client