Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ef6ae76-e224-355a-b965-ea4bd1d6ead2.roa
File: 0ef6ae76-e224-355a-b965-ea4bd1d6ead2.roa (raw, json)
Hash identifier: XMJrGxOrVhjheqxCug9wY+gKmE7Fpsyg47fUqKTA4w0=
Subject key identifier: 58:10:97:6A:9D:50:8C:6C:BA:59:0E:AD:97:DD:2C:09:D3:C3:AB:AD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D6FD64B5F96F2672441177A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ef6ae76-e224-355a-b965-ea4bd1d6ead2.roa
Signing time: Mon 10 Feb 2025 20:20:26 +0000
ROA not before: Mon 10 Feb 2025 20:20:26 +0000
ROA not after: Sun 11 May 2025 19:20:26 +0000
asID: 401152
IP address blocks: 108.165.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:fd:64:b5:f9:6f:26:72:44:11:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 20:20:26 2025 GMT
Not After : May 11 19:20:26 2025 GMT
Subject: CN=21e0939d-c396-447c-b842-3c8de1cd360c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:d7:1e:ee:02:19:3e:eb:d8:04:2c:53:fb:
61:6a:35:5a:48:8f:98:fe:38:3c:aa:ba:ca:b8:de:
c9:95:43:37:f0:02:87:d9:5b:61:af:8e:e6:48:81:
4b:28:8b:97:18:e2:4a:14:a7:f4:e2:0a:81:2d:20:
0d:12:9a:9c:d8:97:4f:ca:f7:f3:11:93:29:5e:ba:
53:a3:e7:a7:aa:62:a7:7e:b1:ab:4a:d5:fa:11:be:
00:eb:14:46:f4:7e:bd:46:44:a6:46:f7:aa:43:74:
b7:79:18:a8:9c:98:9d:8c:a5:bc:3c:86:19:1a:b1:
5f:ff:d2:90:77:4d:a5:61:80:49:db:c7:19:c5:23:
7f:f1:e9:be:1b:ba:b4:cd:34:a0:4f:26:e0:bd:f0:
f3:86:bb:a6:bf:01:c7:10:8e:9e:e5:c0:6c:10:66:
ad:be:3b:58:f5:7d:e2:89:6c:30:e1:3e:73:93:c0:
5c:da:59:33:f6:85:13:6a:5d:a6:c6:9e:e4:9b:bf:
02:3c:d3:2c:94:05:ca:98:3f:c3:60:ca:65:01:17:
78:d8:62:d9:ae:5c:ce:a9:51:bd:21:52:84:04:28:
70:3f:01:ff:14:ac:33:28:2d:4f:d9:1b:15:b8:a1:
5e:dd:a1:2e:43:4e:c7:71:45:c8:fa:a7:6e:16:cb:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:10:97:6A:9D:50:8C:6C:BA:59:0E:AD:97:DD:2C:09:D3:C3:AB:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ef6ae76-e224-355a-b965-ea4bd1d6ead2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:17:ce:a4:8c:7b:ed:02:8c:96:51:58:bd:1a:66:c4:b4:f5:
d3:e0:52:02:5c:d1:b0:4b:4b:cc:9c:df:2d:cf:be:da:e3:26:
94:b1:94:ea:3a:51:05:59:1f:15:75:54:64:d9:01:b5:b5:ad:
54:da:a4:1e:ce:24:e2:01:51:78:c4:c2:0c:8f:9f:51:9e:e9:
9c:03:3f:53:d2:41:b9:b7:d4:4b:46:d0:d5:5d:25:c4:8e:a9:
19:34:87:52:42:5b:52:dd:32:d4:16:73:56:77:01:9a:2c:e6:
38:6c:45:54:bb:a3:9e:f9:fc:ef:28:97:9a:08:4d:10:4a:01:
37:b4:dd:bd:12:8f:c6:72:92:df:00:bd:1c:82:1b:5e:39:16:
59:9a:d7:76:79:ac:1f:64:05:e0:40:a8:a1:fa:24:74:9e:05:
c9:87:2f:15:82:74:97:fc:d2:3f:55:ee:35:af:7f:35:44:65:
e5:b3:3b:f9:6d:19:46:ed:a0:67:be:23:95:31:80:2a:60:3a:
3f:bf:41:1f:28:b8:33:8b:49:02:7f:52:bb:97:60:8a:b8:7d:
59:d0:34:4f:97:aa:e9:af:da:63:25:1e:9c:75:9c:28:09:09:
91:a0:af:99:73:5c:02:a9:28:a1:ab:31:16:55:76:1c:0f:75:
fe:54:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:38 2025 by rpki-client