Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/270858e9-361e-39ed-88d3-f98eae006437.roa
File: 270858e9-361e-39ed-88d3-f98eae006437.roa (raw, json)
Hash identifier: IGgCEn636VXsp+44HTMgkht84UWOtoPW46ZelTOZk9Y=
Subject key identifier: F1:7D:CD:EA:52:74:1D:F4:18:87:91:33:4B:11:2E:AB:FB:D9:34:43
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C580F5DC0101A2C3DE6C5F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/270858e9-361e-39ed-88d3-f98eae006437.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 979
IP address blocks: 108.165.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f5:dc:01:01:a2:c3:de:6c:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=0274d994-32bf-45e4-8272-df73e276fde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:92:b1:ad:65:31:bc:fc:29:1c:66:3e:d2:
9c:45:02:d6:76:70:a7:3e:66:a6:d1:33:32:41:bd:
91:75:d7:f5:b9:b5:0d:d7:51:ca:38:79:e8:e1:ad:
7d:26:b6:e8:7f:9d:99:3b:d0:22:15:a3:19:a3:cc:
71:db:ac:0f:6c:f9:76:23:f0:c2:2d:97:12:84:2e:
36:6c:c9:01:3b:5b:e9:52:f9:88:4c:58:19:ad:bf:
9b:ec:63:24:a1:0e:22:66:25:29:1b:e7:09:68:23:
9d:2a:1a:1a:3a:fb:22:80:4f:5f:cb:05:11:fc:2b:
53:88:8d:40:57:14:97:eb:86:b7:36:06:1c:aa:90:
62:f5:6a:7c:98:cb:4e:73:ce:59:c3:92:9c:56:ee:
1c:65:4a:9d:9d:cc:64:de:03:6a:51:70:a0:e8:9a:
c8:cb:41:a2:48:7a:5b:93:9b:67:06:44:0b:77:8a:
e3:47:db:01:ea:de:70:f3:74:e3:45:61:40:01:1f:
eb:a2:5f:de:a7:2a:d7:5d:be:bb:0a:34:39:99:ad:
a2:9e:4d:cb:11:6c:07:29:de:8d:79:46:db:0e:d9:
41:86:d7:f9:d5:fc:b1:d8:b8:a0:c5:e1:1d:a4:6f:
50:5a:8a:fe:0c:37:fc:17:a4:0d:76:ec:83:31:84:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7D:CD:EA:52:74:1D:F4:18:87:91:33:4B:11:2E:AB:FB:D9:34:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/270858e9-361e-39ed-88d3-f98eae006437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:f6:9a:09:8d:f2:6e:9e:fd:dc:c3:16:92:90:84:bc:f4:73:
34:6d:62:0a:78:d5:80:6a:73:41:d2:7b:8b:97:21:e7:c4:7c:
de:c3:33:4a:f2:52:50:99:ef:61:e4:7f:65:f1:1d:9b:b9:93:
99:63:fc:15:71:71:5c:47:d2:45:5e:7c:b6:34:ab:bd:ee:2e:
fa:4a:56:8f:2a:1b:a1:54:92:60:d8:fc:33:cf:a0:2d:d2:97:
35:18:70:c5:e3:7e:ed:91:a5:ef:69:f8:ec:ad:75:fb:00:e8:
fc:9f:eb:09:ca:36:2a:f2:ad:6f:e9:5a:48:9e:0d:cb:bf:9c:
62:c8:3f:80:41:86:12:d3:c4:6a:9e:c2:ce:24:9f:8e:19:34:
45:ac:a0:fd:c0:96:2f:9d:61:f4:3b:93:e4:f4:b9:8b:d3:20:
cf:b5:0b:8f:45:d8:69:29:10:a8:3b:6c:7a:f1:43:ef:62:2f:
9f:39:aa:11:af:12:57:08:fc:66:5a:c8:af:36:99:bf:d9:ac:
ca:88:71:5b:63:05:c1:b3:6f:bf:fe:50:29:07:0e:05:f3:dc:
ff:47:aa:0f:f6:e4:4d:a4:ea:ca:eb:11:fa:44:65:c7:26:b2:
a5:63:34:38:0e:63:04:58:d4:92:62:45:eb:90:ee:1d:a0:d2:
56:ad:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:27 2025 by rpki-client