Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/397443db-e7e0-3fc3-aa39-ea0093dd33c3.roa
File: 397443db-e7e0-3fc3-aa39-ea0093dd33c3.roa (raw, json)
Hash identifier: Sp5l6cXWTgJX+Pw9f8kzy+Zuci5UOHM5ww6UAztaGzM=
Subject key identifier: 09:39:D0:2E:45:35:1E:4A:F7:CA:A5:A6:C4:D0:BC:FC:B8:63:C0:D2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584937D94092DD56D4776D984C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/397443db-e7e0-3fc3-aa39-ea0093dd33c3.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 48266
IP address blocks: 166.1.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:40:92:dd:56:d4:77:6d:98:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=6a8bc308-5168-4005-bb22-4f7d46adb336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:af:28:69:2a:24:1f:7a:22:74:d0:c4:bd:
76:98:62:a5:01:f2:bc:22:d2:82:65:38:1a:8d:d0:
59:6e:c1:c8:0e:58:fa:6d:1f:6a:b8:e2:5c:1c:f8:
a8:ee:72:2c:98:f9:ba:b6:b4:d6:c2:94:df:12:e0:
56:28:50:f9:72:63:14:bc:d8:f0:02:97:63:20:37:
c1:6d:37:d2:7c:4e:ec:45:db:d3:41:6a:65:8b:65:
ee:59:ba:3a:44:b0:31:f5:00:1e:8f:5d:86:b5:ca:
85:df:10:99:fd:6b:ff:9d:f1:b0:2e:9c:04:9d:3c:
1e:94:fd:44:8b:a1:ad:bf:15:58:c1:d7:cd:fb:03:
ce:a2:91:f4:1a:7d:a2:ec:8f:ca:15:2c:4b:29:28:
28:0e:73:d9:58:8e:24:73:25:51:12:f2:52:12:48:
0e:cb:44:59:65:74:bd:32:c5:e4:61:c5:70:67:4d:
06:8f:3e:cd:eb:b8:99:fa:17:42:02:73:87:74:f3:
74:4c:27:2d:50:38:c0:e2:0d:f1:ed:9d:b8:ff:88:
90:71:cb:92:59:91:4a:5e:63:ce:03:00:70:64:2b:
27:a9:8d:ab:64:40:70:31:4f:1c:32:f0:e3:18:f8:
16:29:ce:06:d1:f5:a7:fd:40:81:fd:46:23:45:5a:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:39:D0:2E:45:35:1E:4A:F7:CA:A5:A6:C4:D0:BC:FC:B8:63:C0:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/397443db-e7e0-3fc3-aa39-ea0093dd33c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:ca:b0:6d:82:70:1c:ce:69:d8:31:14:69:a3:dd:5f:16:cb:
aa:6e:5c:4d:3e:e6:7d:fe:ff:49:76:31:09:2a:f7:ac:a8:72:
16:a7:00:a4:51:4f:3f:b8:c6:e1:f0:c1:56:a1:20:2f:97:99:
6a:c2:85:18:10:0d:33:6d:a9:1d:ce:95:bb:53:f4:be:47:6a:
c1:b0:c6:65:96:34:fe:f7:a2:09:19:2b:d9:97:db:d8:32:a0:
54:0c:24:5f:a3:ea:c2:30:80:9e:b0:19:2e:2c:56:0d:48:6d:
14:e5:95:b7:fc:82:d3:b8:c0:45:d5:8a:8d:fd:fb:62:b8:db:
9b:19:b5:7b:57:42:b2:e0:94:ab:11:ca:37:27:30:11:08:42:
c9:d2:a9:7e:ce:1e:d2:ab:a2:fc:d9:54:7e:97:b3:18:6e:5a:
79:f8:b6:16:58:71:0c:0d:c7:8f:7c:16:de:ca:52:71:89:21:
e8:5a:64:a9:bf:eb:4d:e4:13:01:f3:57:16:58:27:46:e0:d4:
80:d6:32:ba:2d:55:68:aa:d9:ac:44:b3:e6:f3:cf:6e:fb:a6:
ad:fd:bf:1a:dc:c2:db:78:c5:87:86:c5:e8:4b:87:7a:ec:f1:
23:dc:73:c9:1e:1c:9b:fa:24:bb:11:19:b0:46:89:7f:f8:2f:
f8:fd:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:16 2025 by rpki-client