Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/25a84a0e-a59d-3a01-83e9-63f05af291ad.roa
File: 25a84a0e-a59d-3a01-83e9-63f05af291ad.roa (raw, json)
Hash identifier: ErnAvEcbFRZicZZo7fQelTdV+uXS/wAfqU9aWW849sE=
Subject key identifier: AF:D6:81:B7:0E:7B:85:30:D8:33:EE:D7:F3:6F:8B:3B:E1:A0:69:87
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584908EC490B57DD88EF3CE3D100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/25a84a0e-a59d-3a01-83e9-63f05af291ad.roa
Signing time: Fri 28 Feb 2025 17:36:23 +0000
ROA not before: Fri 28 Feb 2025 17:36:23 +0000
ROA not after: Thu 29 May 2025 16:36:23 +0000
asID: 61138
IP address blocks: 166.1.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:ec:49:0b:57:dd:88:ef:3c:e3:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 28 17:36:23 2025 GMT
Not After : May 29 16:36:23 2025 GMT
Subject: CN=1a4fedd9-4a46-4fd1-9e65-db94f31a5262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:8c:fb:5c:59:32:56:9c:71:6d:71:06:08:
b3:1e:6e:0b:b7:05:02:1d:03:24:65:94:44:b4:f3:
2f:bd:90:b7:d3:31:8b:30:9d:8b:a5:d5:9b:fc:22:
1c:e5:f0:b6:14:2a:cc:a8:95:43:eb:0a:d7:9a:34:
e9:01:61:9a:bf:9a:7f:4a:b2:82:5e:05:99:91:03:
79:71:98:90:a5:57:f8:f5:6c:09:6e:02:60:c4:e0:
f2:6e:16:90:87:25:b4:17:85:5e:3b:41:ed:09:f4:
af:10:73:ac:99:54:f7:73:ac:ef:7a:c6:d0:1d:d1:
2d:12:02:b7:2e:1a:58:58:b3:81:53:7f:7a:45:b9:
b5:1b:61:3a:53:18:e0:11:1b:95:27:95:e6:a1:df:
7a:30:f4:1d:b1:4a:81:e1:eb:80:96:a9:2c:cc:31:
8b:b7:3a:71:57:80:fd:df:02:b6:47:4c:58:c1:1c:
a5:5c:4e:94:32:21:98:fd:7d:3c:80:ee:11:f4:a4:
c1:c4:b0:6d:38:35:98:d1:d9:89:8f:04:59:8e:1b:
6c:8e:90:74:94:28:02:ad:6d:5e:5f:0c:45:65:b1:
86:1d:18:82:fa:86:85:65:b3:4f:c3:4b:37:0e:99:
bd:69:44:0c:18:33:6d:8b:1c:00:b5:40:c7:b6:7e:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:81:B7:0E:7B:85:30:D8:33:EE:D7:F3:6F:8B:3B:E1:A0:69:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/25a84a0e-a59d-3a01-83e9-63f05af291ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:24:89:d1:04:be:26:95:0c:e7:2d:bb:43:af:5e:94:63:b8:
60:f5:f2:84:50:2a:7c:1f:78:47:2e:bc:4f:16:05:55:16:e5:
86:04:6f:de:08:4a:ce:b1:b1:5f:cf:ef:ac:81:f0:f4:5d:49:
e4:8c:b0:10:ae:1a:1f:d7:ce:b6:01:ec:4c:8b:68:a1:99:b4:
ae:0b:c7:02:97:0b:fa:e0:87:6a:73:66:93:77:80:69:ab:1d:
25:fe:40:c3:ec:69:13:9d:02:2b:5d:7d:02:a0:f7:f0:fe:b3:
ef:0c:2e:4b:14:40:d2:79:7b:b5:f9:d3:f5:17:86:ab:eb:64:
73:70:18:0e:e4:fa:20:4b:b3:9b:8c:f3:e1:19:b1:ca:ee:2e:
2d:e1:ce:b3:06:c7:92:fe:73:30:56:0f:59:28:13:da:17:42:
f0:1f:78:84:d5:11:7d:fc:64:83:2d:08:61:df:bc:15:03:61:
2f:07:d8:c4:6a:81:65:ac:42:f4:78:d8:cf:82:34:fe:91:96:
68:80:7f:d9:e2:b0:48:9c:ac:8c:61:c4:51:8b:e3:3f:ab:22:
f1:31:d6:8e:cb:49:84:82:a6:1c:85:28:82:01:25:71:f5:da:
d3:8c:02:30:2b:5b:81:29:fd:f8:75:8f:79:92:ac:74:c6:6f:
7a:fa:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:52:55 2025 by rpki-client