Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa
File: 3725b52d-21b1-360d-acbc-9771dcda46e5.roa (raw, json)
Hash identifier: 1PSptB2AGXaqh0XX/PGTxIlhnxcSJTxY1XS2qYCIgRY=
Subject key identifier: 5A:02:7A:7B:8B:08:C3:3B:45:F8:34:BB:41:D5:E1:FC:A0:63:F8:90
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858492CAE83D1346340675145A080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 19437
IP address blocks: 108.165.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:83:d1:34:63:40:67:51:45:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=94f5c567-3f14-4deb-8e05-336e910e0afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:82:ca:5e:cf:6d:08:d5:9e:86:2a:4e:1b:
4e:a2:51:15:5a:2c:33:e4:73:8a:6f:e7:51:2c:49:
79:24:de:18:86:a7:92:fa:ca:5a:ef:49:30:c4:97:
0b:5b:b4:77:a1:b3:f6:ef:c6:a3:bb:f8:ec:34:9b:
27:ff:ce:93:6c:74:6e:c7:07:e0:15:be:fc:bf:7c:
ca:8a:03:70:8a:9a:f3:f5:48:dc:c6:41:31:4b:31:
23:cd:58:a8:9d:54:82:10:bd:e5:a4:4a:7c:d0:cc:
78:8f:5e:e2:5e:f1:18:a1:fd:28:2f:07:ac:61:72:
75:3b:71:61:01:ee:54:3c:39:ab:dd:ff:1f:02:37:
60:cb:9e:2b:da:27:80:55:b5:75:87:74:3d:7c:0e:
72:ef:13:92:33:38:e7:d6:0d:43:78:89:41:d6:64:
d4:04:61:24:db:e2:76:66:57:db:9a:4d:d3:c9:ec:
7a:ba:08:bf:53:ad:f5:52:63:98:7a:0f:0d:13:70:
5c:38:f2:a0:93:0e:f0:49:39:4b:e5:f9:cc:27:d2:
93:85:20:ed:3a:77:f1:8e:70:bf:4e:6f:4e:81:85:
7b:39:bd:d6:f9:bf:6b:f9:81:8f:6c:98:66:e7:54:
7d:f1:bd:4b:f7:44:50:32:0e:6e:76:53:1d:8d:fc:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:7A:7B:8B:08:C3:3B:45:F8:34:BB:41:D5:E1:FC:A0:63:F8:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:9c:3b:4f:2d:54:39:c1:89:1f:60:d2:22:2e:5f:38:13:86:
ba:f0:16:18:6f:98:e6:2f:04:07:d6:b8:55:a0:1f:48:ef:b9:
fe:c8:ff:6b:32:73:ae:63:74:dc:c5:1c:90:33:16:dc:71:71:
22:65:c0:a3:bb:c8:d2:77:86:47:5d:4c:6b:51:6e:3e:f7:7a:
24:63:63:a3:be:74:7b:d8:a2:09:9c:10:f9:7c:ec:b1:f3:fb:
2d:2a:3a:54:e8:88:d1:1f:6a:0b:b4:51:fe:e9:c9:f1:35:0d:
7b:6e:6f:ec:27:40:13:97:03:8d:2a:51:e7:eb:94:19:c9:a5:
9a:ca:8a:b3:8d:7d:50:09:90:48:44:32:fc:79:22:73:0d:f4:
93:8f:43:90:d9:51:79:51:1e:b0:3a:ba:60:ec:cc:ab:40:16:
1a:d9:eb:03:51:8d:66:54:f2:7e:6f:4c:eb:6b:92:ae:b6:d7:
52:79:10:15:45:08:5e:7f:e1:e4:67:20:53:d2:3d:9f:33:9d:
c5:bf:e2:3d:55:0c:df:6d:48:d0:bd:c0:12:e4:ad:23:a9:45:
17:9b:b6:37:81:08:93:85:17:e4:34:d2:8a:f8:48:c5:70:9c:
39:98:63:cd:25:d9:ed:e8:8c:25:c7:99:c3:62:57:75:d0:e8:
48:9a:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:04 2025 by rpki-client