Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/023d7855-2d78-37d8-b5fd-57387d527158.roa
File: 023d7855-2d78-37d8-b5fd-57387d527158.roa (raw, json)
Hash identifier: s1AN7XgXkhX80XDRDiP1VPpthQhzxejCPrQHOqs8UIU=
Subject key identifier: E5:61:0C:4B:05:C3:89:D3:1C:64:2E:D2:77:B1:15:FE:0B:83:D9:AB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F22C25642CB7EB54F5105C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/023d7855-2d78-37d8-b5fd-57387d527158.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.0.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:25:64:2c:b7:eb:54:f5:10:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=1c4465d6-c136-41b2-9f68-a670ef57a061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:fc:4c:28:46:cc:1b:ed:ac:f6:a5:e8:09:
f4:d4:ab:b1:65:68:a7:58:48:f8:54:09:88:84:a1:
01:c9:7a:74:d5:d2:96:58:da:96:96:b3:8a:99:0a:
7b:59:b2:fa:4c:6e:2f:d2:f7:14:cc:c8:7e:ab:20:
90:ad:3d:6b:b6:d6:89:76:60:e3:32:f3:36:da:a4:
22:61:98:6a:00:dd:db:39:92:8f:28:b3:b3:f0:cf:
5f:94:ba:bb:ba:b4:65:33:53:b6:61:b7:3c:6c:c3:
02:bc:13:ba:c7:19:9b:52:6e:fb:1c:84:e7:33:0a:
e5:41:2c:6c:d0:d3:3a:e1:f9:dc:40:5c:12:26:6e:
8b:ed:a1:f1:27:40:f2:75:65:71:5a:83:0f:ba:3f:
02:22:f4:43:14:71:28:87:92:9d:2d:a4:2c:96:0a:
94:b4:3f:46:fd:b4:1a:9a:af:56:23:6c:d2:21:83:
59:e5:eb:a6:43:39:f5:57:17:9c:e4:de:33:59:95:
59:88:5e:2a:c8:d9:79:11:ee:e0:1f:db:51:7d:d1:
ae:46:21:99:e5:df:4b:9b:98:72:e2:a8:23:5b:f7:
ce:18:e0:bb:51:ca:7f:b7:f3:1f:1b:96:0f:7b:7b:
ea:f5:35:9e:94:76:4c:08:2b:b4:ae:1c:b8:37:07:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:61:0C:4B:05:C3:89:D3:1C:64:2E:D2:77:B1:15:FE:0B:83:D9:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/023d7855-2d78-37d8-b5fd-57387d527158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:44:be:f8:21:1c:0a:27:43:e7:a4:37:76:1c:20:e3:2c:3f:
8e:57:2c:7f:71:56:bc:e0:f9:f9:74:44:25:49:f7:c9:07:90:
c2:91:18:ab:00:23:93:48:0d:2f:50:15:95:40:2a:71:37:15:
ae:4f:42:65:eb:c2:e6:20:33:c0:53:6b:b9:9a:b6:f8:02:e8:
a7:0b:66:6c:cf:6c:06:a4:eb:12:8e:42:d9:64:a7:1e:aa:50:
d9:1e:c1:bc:ca:9a:9a:78:f9:ce:c4:f1:d5:60:0a:19:c8:0e:
b0:87:85:7c:d3:23:2e:ba:53:f7:0e:b0:9a:2f:e8:65:ff:5f:
0c:c2:e8:72:72:94:4c:eb:0b:6e:09:12:30:7a:43:55:b0:f2:
a0:bd:c0:b3:8b:09:b8:6e:1b:4b:6f:de:b2:fd:a7:b0:f8:99:
8a:72:8c:35:68:83:6c:0c:e1:a1:9f:94:77:d9:ed:5a:18:ce:
a6:1c:2b:b1:13:64:b4:f8:77:d5:aa:cf:30:fa:9a:b6:7a:e5:
de:74:c4:3a:17:34:26:06:92:c6:16:32:ea:89:58:f2:bb:16:
b1:f7:83:4c:97:90:cd:b5:10:a8:17:96:50:be:d1:e2:17:4e:
6c:62:cc:cb:e4:f6:5a:fe:2f:0a:ae:38:11:90:dc:11:30:b2:
27:4f:81:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:36:47 2025 by rpki-client