Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f6dbb30-7c02-3550-8f87-385b47a71c3c.roa
File: 2f6dbb30-7c02-3550-8f87-385b47a71c3c.roa (raw, json)
Hash identifier: s/1z5iV09UiCc2wpccwQTdmFlLvr0gvxRMjD2HEbR/o=
Subject key identifier: EE:D4:F2:DA:87:A1:B0:4E:C7:57:12:06:0F:A1:11:CD:54:69:8F:C5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D64114093E0A5E2AF4022D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f6dbb30-7c02-3550-8f87-385b47a71c3c.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.1.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:14:09:3e:0a:5e:2a:f4:02:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=0e4a09f4-e3c4-4758-a2b8-148346b8b5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:c5:30:c2:58:b1:ec:61:07:2f:a0:a5:e0:
43:25:6a:4f:c5:62:27:db:61:23:5a:53:db:a7:20:
18:d6:81:01:b5:1f:85:00:96:30:6a:52:b5:02:37:
77:61:5d:af:57:cb:48:ed:1b:e6:18:5b:a5:87:f8:
ef:3e:53:55:54:f0:83:66:99:a4:fb:39:a7:e8:b2:
97:d6:37:85:e1:3f:90:4b:ab:c4:2a:d5:7f:79:29:
08:51:6b:36:66:b7:17:59:9e:67:f0:69:46:d8:e6:
96:2a:43:a6:c7:f4:08:05:f8:32:5f:cc:cf:22:21:
5b:6f:93:fb:0c:f4:ab:ee:af:ce:96:5a:e3:f3:b1:
8f:91:0e:8d:50:3c:df:47:26:d1:24:1e:fd:52:cc:
3c:2a:1c:72:9c:a5:b7:c1:52:3e:17:bb:ef:a2:79:
e9:61:3e:7a:08:18:bd:04:91:14:f9:ec:da:2a:fc:
fd:cd:1f:3b:49:7f:29:d5:87:90:59:4b:02:c2:46:
7f:8d:b6:12:42:91:f3:be:3a:0c:69:ac:a2:3e:40:
3d:35:53:6e:7a:4b:65:53:e5:90:d8:cc:ad:51:cd:
46:5e:98:8c:b7:8b:58:09:89:42:32:53:d1:74:bf:
93:47:04:e6:63:b9:15:66:88:4a:a0:34:98:ff:84:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:F2:DA:87:A1:B0:4E:C7:57:12:06:0F:A1:11:CD:54:69:8F:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f6dbb30-7c02-3550-8f87-385b47a71c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:ed:fd:62:f0:c5:bf:4e:6d:bc:50:2a:5d:5a:1c:0b:61:05:
e3:c7:cd:87:0f:d7:8c:98:b5:65:49:f0:84:5d:f6:0d:dd:70:
44:5a:05:77:2b:47:1a:e1:4c:56:21:cf:c6:a8:88:88:3a:4c:
d4:19:cf:73:7a:6c:a8:10:a6:5d:f4:d0:a2:99:54:fa:31:65:
b3:85:61:6d:bc:9f:87:a8:fa:e3:db:3d:dd:bf:11:96:b7:ec:
f5:f8:94:b3:17:c8:b3:b6:c3:f1:47:f2:24:5a:37:af:fc:12:
08:b3:a2:d7:ee:5b:a2:15:67:2c:95:5a:6a:cd:30:65:47:d4:
f2:f4:be:aa:25:b7:60:cd:f0:35:da:18:11:c7:5d:ae:77:0f:
1e:75:5e:f7:a5:17:af:9e:3e:57:b1:42:7a:40:56:3f:b4:1a:
67:89:0b:f8:1a:db:25:3f:cc:93:be:39:34:19:34:0a:14:17:
10:56:63:85:96:eb:7f:90:30:9c:01:ed:c6:c7:ea:4a:6c:f6:
aa:a1:45:2d:a3:03:03:cb:4b:0e:b4:0a:61:d8:3e:f2:85:0f:
8f:cc:a8:06:25:6b:44:f7:42:34:4d:c6:0b:83:20:8f:2a:7b:
91:6d:f3:45:4d:b7:7c:90:ea:2c:7f:43:36:31:a4:51:9e:72:
2b:ee:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:20 2025 by rpki-client