Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8aa7c3c6-4170-35db-8a56-cb1628025114.roa
File: 8aa7c3c6-4170-35db-8a56-cb1628025114.roa (raw, json)
Hash identifier: TAR/E9iIFMD/QZ05A/V3cHGng4MMVOuImIeE0qHCAcg=
Subject key identifier: 73:8D:DC:1F:FB:E8:72:2D:E8:E4:FC:40:95:1E:79:77:D5:DD:0F:BB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F0088A1AFE7500DBA1460500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8aa7c3c6-4170-35db-8a56-cb1628025114.roa
Signing time: Wed 19 Feb 2025 19:38:06 +0000
ROA not before: Wed 19 Feb 2025 19:38:06 +0000
ROA not after: Tue 20 May 2025 18:38:06 +0000
asID: 44477
IP address blocks: 166.1.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:08:8a:1a:fe:75:00:db:a1:46:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:38:06 2025 GMT
Not After : May 20 18:38:06 2025 GMT
Subject: CN=944af95b-30f3-4e77-9142-6c5c34897ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:49:a1:a1:70:61:7d:d8:b0:e1:b9:a9:70:
39:cd:fb:34:15:a0:cd:55:e7:4f:9a:be:e4:e4:c8:
a9:90:2f:be:87:dd:9a:83:95:63:26:75:97:b7:e2:
19:b2:4d:64:26:36:2b:12:00:4f:2b:2c:05:e1:d6:
f5:c5:0d:29:28:30:df:ec:5e:50:e3:9a:7a:92:fd:
6f:eb:ee:32:1e:e9:e7:c3:8d:54:bf:54:84:e9:1c:
cd:1b:30:48:62:ec:96:0f:9c:21:99:ac:18:d8:7e:
19:18:f1:85:e9:85:6a:81:93:c7:c2:9c:86:64:7b:
04:d0:6d:73:b0:07:9e:30:63:4d:de:ae:a3:a2:42:
55:b3:94:ad:71:32:de:64:ee:15:1e:84:a8:b1:25:
73:e3:35:df:8a:9d:27:c0:df:8c:7a:b3:1a:e4:64:
66:e1:94:53:f9:4a:ea:b3:a4:69:f3:e5:69:98:68:
a9:85:dc:d3:8f:b4:4f:8f:2c:be:4b:99:c4:c8:0d:
9e:0f:69:ba:c4:21:00:2c:21:a7:52:1a:80:d0:d1:
f2:3c:4c:86:f9:5d:3e:04:89:bb:25:4d:4b:11:68:
38:a3:e3:44:52:af:c9:d9:5a:04:1a:89:47:f0:42:
54:0f:5a:a1:8e:62:93:5f:c9:88:69:9e:d1:12:ed:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8D:DC:1F:FB:E8:72:2D:E8:E4:FC:40:95:1E:79:77:D5:DD:0F:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8aa7c3c6-4170-35db-8a56-cb1628025114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:2f:65:e5:66:a2:46:af:9b:cf:7b:0e:c9:a7:92:d5:2e:50:
f7:95:c1:ac:76:8e:67:f4:0b:28:f5:8d:66:97:5d:fd:87:6c:
cc:95:a4:bb:43:57:44:22:9f:76:b3:0a:ed:28:d5:82:57:d4:
7f:28:9c:f7:ba:11:5d:07:96:5d:ad:3c:4b:12:c1:57:18:03:
2b:2b:94:ca:c3:fc:e3:8c:49:2b:50:9c:0d:04:38:07:bf:87:
2c:d6:2e:2b:19:1a:a6:e0:40:03:3d:86:db:bb:cf:03:99:28:
9d:5c:90:84:2c:8d:fd:cd:19:3c:a0:b9:5f:34:84:c1:9e:ce:
86:b7:80:c3:34:e0:ca:5f:b5:b4:64:98:16:7c:6a:67:c4:f2:
66:2d:dc:94:fb:c3:7d:cc:e9:e3:f0:6c:2d:4c:02:9e:e3:f7:
37:ef:5d:27:a4:1d:7a:5c:26:83:c3:b9:a5:6a:e8:af:39:3c:
6d:34:3e:4b:c9:29:8c:91:7c:db:42:9d:6a:e0:e6:0f:b2:04:
d4:30:fa:ea:68:20:4e:14:ef:3b:a2:71:70:3e:11:de:a0:b9:
2c:1e:58:b9:c5:6b:ec:3d:5c:d6:26:6f:ea:4b:be:94:0f:3c:
d7:1d:83:18:fc:34:94:8f:d2:ab:10:c4:71:71:cf:fb:73:90:
30:34:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:09 2025 by rpki-client