Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/046416c9-958d-3f50-8e13-3ed7f1d45a83.roa
File: 046416c9-958d-3f50-8e13-3ed7f1d45a83.roa (raw, json)
Hash identifier: 6yWmRnw0+LkGvESg6MxiL/ntVEpwlkcPt35Ul3QzqsU=
Subject key identifier: 50:C5:F5:7E:0F:8D:97:E4:5C:9B:82:00:F4:BA:E6:E1:A4:72:82:4D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C688FF0140E71CEBAF100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/046416c9-958d-3f50-8e13-3ed7f1d45a83.roa
Signing time: Wed 19 Feb 2025 19:45:54 +0000
ROA not before: Wed 19 Feb 2025 19:45:54 +0000
ROA not after: Tue 20 May 2025 18:45:54 +0000
asID: 62240
IP address blocks: 166.1.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:68:8f:f0:14:0e:71:ce:ba:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:45:54 2025 GMT
Not After : May 20 18:45:54 2025 GMT
Subject: CN=cb287315-62e8-4182-98a5-e0b5692eab91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:ee:92:f1:20:8c:9e:f5:79:f9:30:fe:f5:
e3:c1:79:35:fe:31:1f:3b:d7:fc:24:59:81:14:5e:
c1:28:2c:d8:fb:7d:78:c2:32:34:4c:6c:a2:32:1f:
8a:dc:50:29:ba:3f:19:1d:d5:54:6c:26:40:1b:ec:
a6:a6:89:88:55:a0:37:11:93:eb:a9:ce:b6:b9:ae:
07:f1:49:e2:a6:87:4a:5a:ab:b2:a7:ae:4c:53:80:
40:37:1e:89:30:07:a0:90:8b:bb:1e:16:0b:58:b8:
48:07:94:9f:b0:36:67:6e:23:f6:85:80:7f:90:1d:
82:26:c2:01:46:90:b7:e1:2b:b1:88:6e:6c:70:25:
8f:bb:b8:a6:bc:f6:18:57:8d:0c:fc:0b:cd:ec:d6:
94:36:c4:04:39:0c:06:10:58:2e:c4:49:f0:9a:a1:
a5:b6:a9:5f:7b:6e:41:b2:13:86:2b:7d:ae:be:60:
d5:6c:4d:65:75:b7:9b:2a:c0:08:41:cf:27:ec:2b:
7f:fd:70:cf:b5:c7:55:7f:3f:9a:fd:c7:23:21:18:
8f:07:f4:8b:d6:61:22:f9:87:45:84:22:d8:6e:70:
5b:2a:c3:39:4d:66:71:49:6d:9a:18:bc:8d:31:c8:
9d:be:b9:08:a7:d5:02:1d:f2:14:63:cc:36:fe:03:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:F5:7E:0F:8D:97:E4:5C:9B:82:00:F4:BA:E6:E1:A4:72:82:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/046416c9-958d-3f50-8e13-3ed7f1d45a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:4c:fc:8e:95:61:ba:98:11:e3:dd:d4:1c:95:10:e0:71:35:
a9:4d:b8:86:dc:de:86:cf:45:4e:03:21:ce:a6:dc:12:1e:bd:
15:de:ab:8b:55:f0:9d:41:b9:bc:4f:bb:9c:dd:ab:17:42:00:
7c:7f:9e:33:fc:f0:fd:aa:5a:23:33:15:62:dc:92:fe:b0:7d:
f9:89:c2:da:ab:44:cd:94:d0:a6:9a:18:4e:a3:ba:fb:fa:99:
d3:0d:40:d2:97:c9:cc:8c:b8:d9:f9:1f:13:58:d5:31:6e:8a:
97:1c:31:73:3f:20:05:15:0f:78:50:e3:c2:09:09:f5:70:07:
f2:6f:c4:95:a6:21:7f:94:6f:d9:6f:37:82:4d:22:4c:2e:fe:
c9:b0:1b:23:bf:df:f1:b3:f5:39:9d:26:0f:64:68:80:73:39:
ef:dd:bb:05:f9:7d:83:92:7f:5a:e0:f2:b1:6c:e1:b3:d0:cd:
b1:fa:b5:c9:33:4e:2d:3a:7a:e6:3e:0f:b0:13:72:78:17:a8:
01:af:c4:95:72:f6:a7:9e:01:b8:24:d9:02:a3:0e:ab:86:78:
1b:7f:ed:d4:56:59:cb:f2:96:e6:a0:5b:ec:49:af:7b:53:bf:
8c:f8:6a:ac:be:41:fa:55:9a:74:c9:a7:c7:74:9b:5a:5f:4c:
e2:c5:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:25:16 2025 by rpki-client