Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/203abe04-e652-3d3f-8f37-58689549b5fc.roa
File: 203abe04-e652-3d3f-8f37-58689549b5fc.roa (raw, json)
Hash identifier: 8cKn54pmE3VVWE40obyGsSW7LW3yC2CbhKYHt6/c3Ws=
Subject key identifier: 30:D6:42:D3:04:0A:F4:D8:D5:5A:5E:C5:F1:63:57:00:99:8E:FF:BC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C6F406A1D1D718A3B9640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/203abe04-e652-3d3f-8f37-58689549b5fc.roa
Signing time: Wed 19 Feb 2025 19:45:57 +0000
ROA not before: Wed 19 Feb 2025 19:45:57 +0000
ROA not after: Tue 20 May 2025 18:45:57 +0000
asID: 62240
IP address blocks: 166.1.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:6f:40:6a:1d:1d:71:8a:3b:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:45:57 2025 GMT
Not After : May 20 18:45:57 2025 GMT
Subject: CN=84ff66a5-63af-42a4-af30-14667864e5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:17:b0:47:88:65:e3:0f:26:f1:5c:d6:9c:
5b:2e:d4:21:07:94:61:09:84:65:7b:62:48:83:03:
d0:93:b6:25:4f:70:49:b6:37:61:4a:89:53:72:9f:
38:12:e9:04:f1:9f:11:01:f9:ef:c0:eb:34:11:72:
0e:ed:3c:02:c6:2b:b2:ba:23:b6:d6:16:06:9d:d8:
aa:c2:43:9c:f6:79:c7:7f:e3:07:43:43:18:91:be:
2f:a7:44:6f:52:28:b1:0a:f1:50:6c:0f:7d:40:28:
f3:db:5b:12:18:74:d4:f1:aa:9c:72:dc:56:66:82:
9c:6e:09:27:ac:28:a1:3d:bb:54:de:db:93:4e:79:
86:1c:8c:f2:54:ff:1e:d1:54:1a:df:f7:e8:f7:62:
4c:a0:6d:19:58:a8:27:3b:04:c3:9d:0c:22:24:e9:
4e:48:a5:a0:ec:5d:48:7a:5a:73:36:95:ee:1f:34:
13:5c:02:e7:73:1c:36:f9:38:83:f5:9d:03:5d:d8:
33:0e:d5:1c:b9:4f:0e:ef:fe:9f:1d:3d:32:a7:9c:
9d:e1:9f:15:0e:47:59:24:e0:04:d5:56:ce:ca:c2:
a5:fc:05:9b:f6:2f:75:f1:6d:48:26:75:82:29:22:
80:be:30:96:09:97:d2:5f:29:15:ac:c2:b5:b5:bd:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D6:42:D3:04:0A:F4:D8:D5:5A:5E:C5:F1:63:57:00:99:8E:FF:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/203abe04-e652-3d3f-8f37-58689549b5fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:28:0d:1e:8e:35:ec:0f:52:b0:e1:cc:d7:ac:c3:aa:2e:60:
5a:4e:3e:c0:31:72:63:28:c6:81:e7:cc:36:bf:41:e1:f5:10:
87:9d:db:73:84:d9:86:b2:ac:42:12:25:d6:b5:00:b4:dd:c1:
ad:1d:ee:b4:80:4b:c2:f8:0d:31:41:24:e8:e1:4b:f8:42:69:
0f:b7:ae:d0:c6:f6:2d:51:ab:7d:e0:60:88:bd:81:71:87:f7:
db:a9:60:82:8c:db:5d:b9:16:45:56:45:9d:c9:7d:b6:23:49:
51:96:88:40:7f:b2:77:b9:74:ac:10:4a:b6:98:c8:18:79:cc:
54:1a:5e:eb:43:a4:f7:6a:c5:97:fb:bc:0d:84:73:55:6d:d8:
8c:1d:e6:d2:58:33:36:d7:d6:79:31:12:87:4e:a4:16:51:06:
5b:45:fe:de:19:08:e8:bb:9b:c9:38:69:87:3f:17:01:d6:e3:
61:33:be:b9:bb:cc:f8:22:f2:c9:9e:c0:d8:42:c2:60:ef:e7:
d0:91:a8:98:d3:d9:16:0d:4d:69:a1:2a:37:37:8a:a9:76:d1:
cc:d1:d0:7c:13:43:fb:30:22:2f:03:67:ff:24:d5:1b:c5:a7:
f3:61:26:60:6f:fd:e5:7c:55:a7:6b:1a:73:ea:38:a1:14:42:
85:4a:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:29:42 2025 by rpki-client