Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/258a845c-d409-3fc8-8c13-ac57521a4276.roa
File: 258a845c-d409-3fc8-8c13-ac57521a4276.roa (raw, json)
Hash identifier: GuDZpddD2sHWjX5ep0WR6qe2dn43a61A8P6//6NbkOA=
Subject key identifier: B8:1C:4B:EB:7C:E9:D1:86:99:2F:75:24:4A:B7:9D:49:F9:3B:BF:8E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F5875F68B55CE93B32E00300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/258a845c-d409-3fc8-8c13-ac57521a4276.roa
Signing time: Fri 21 Feb 2025 18:52:42 +0000
ROA not before: Fri 21 Feb 2025 18:52:42 +0000
ROA not after: Thu 22 May 2025 17:52:42 +0000
asID: 401152
IP address blocks: 108.165.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f5:87:5f:68:b5:5c:e9:3b:32:e0:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 21 18:52:42 2025 GMT
Not After : May 22 17:52:42 2025 GMT
Subject: CN=66a082e8-7d01-4ea8-ba07-827a776818e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:77:19:8a:c4:d4:26:fa:89:37:0a:fc:e2:
94:21:bc:45:88:a7:e9:d8:f3:66:a8:79:9d:fa:fe:
be:7c:33:67:b0:97:f0:bf:a4:48:9a:ea:aa:84:e4:
a3:cc:a3:71:3a:76:a6:70:a9:08:29:a6:33:89:ec:
73:79:68:e0:09:de:18:fc:69:8c:86:8e:2c:4c:da:
db:53:3d:17:7a:9a:d5:1c:b5:a9:3a:32:ad:98:03:
5f:26:46:c3:10:9c:8c:46:ca:f3:de:e9:2e:a2:1f:
af:33:74:7f:c1:24:e2:c5:55:9f:1f:4c:87:f2:89:
f7:d9:7b:bc:97:84:c6:50:85:4a:3a:2d:07:3a:c6:
ff:03:f0:95:07:70:e0:99:d3:ee:53:3b:32:7b:6a:
03:b6:78:2a:e6:01:2d:5f:47:93:29:62:dd:55:cf:
c9:9d:2a:b8:e2:f1:0b:b5:cd:21:7b:a4:5f:fc:10:
6e:18:87:47:f5:c6:b6:19:16:0a:ca:e2:55:ca:c0:
b4:22:73:c4:d2:58:93:02:3c:53:65:da:cc:b2:48:
1b:e5:91:a3:df:74:97:c0:27:fd:28:be:e9:1e:83:
9a:60:fc:f2:db:f2:e2:8d:6c:03:b5:b0:8f:a8:6d:
ab:95:b7:34:4c:cd:fc:77:f8:c9:a9:da:b1:49:07:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1C:4B:EB:7C:E9:D1:86:99:2F:75:24:4A:B7:9D:49:F9:3B:BF:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/258a845c-d409-3fc8-8c13-ac57521a4276.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:d2:18:09:30:87:d1:1e:82:ee:93:df:4a:4c:67:9a:d9:cf:
99:27:5a:fd:f7:9d:20:58:15:46:a0:ec:75:27:a4:24:41:58:
84:2e:50:a1:ae:ca:5d:1c:31:85:75:0b:a2:38:bd:da:6d:34:
1f:ff:e9:81:54:84:8f:f0:f8:70:fb:43:d3:5a:29:f1:79:fe:
5d:07:d6:d3:87:c1:58:32:cf:7b:c7:0a:92:9e:15:bc:9b:73:
fe:f4:69:9c:e5:09:c8:97:38:ea:56:ee:27:09:15:8d:46:34:
0a:51:87:2d:74:51:eb:bb:74:39:44:b3:4e:9d:b8:66:f9:92:
14:03:1b:92:0e:80:6a:1c:70:e8:bd:d0:8c:44:74:13:97:25:
84:97:ee:3c:60:cc:69:2f:ce:f9:78:7e:7c:7b:48:f8:5f:27:
95:f8:56:a2:69:f2:de:cf:82:04:0f:46:2e:ce:82:a3:ad:f8:
f2:99:ed:b3:71:f4:aa:32:d0:b9:98:72:02:8c:dc:b3:21:83:
9a:00:c9:76:6a:cd:d5:f5:ea:92:2c:c9:a4:49:b6:28:38:56:
26:23:d6:aa:be:52:e6:86:3c:82:95:22:ab:9a:b2:8d:a5:fc:
e9:da:72:d1:a9:3f:f4:15:b4:43:76:dd:a6:80:99:d3:cf:46:
60:b0:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:39 2025 by rpki-client