Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45e15e54-1bdf-3c4c-b36f-25d7948fcd8e.roa
File: 45e15e54-1bdf-3c4c-b36f-25d7948fcd8e.roa (raw, json)
Hash identifier: fcgucTItvt0/KtBowBYsZzk6EXOPc+fRT0uVLSMNWvc=
Subject key identifier: 59:75:38:4B:37:D8:F4:11:3B:6A:F4:C1:46:5C:0A:F4:8A:33:E4:E0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C6FD57A8213BDFCE9A400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45e15e54-1bdf-3c4c-b36f-25d7948fcd8e.roa
Signing time: Wed 19 Feb 2025 19:45:57 +0000
ROA not before: Wed 19 Feb 2025 19:45:57 +0000
ROA not after: Tue 20 May 2025 18:45:57 +0000
asID: 62240
IP address blocks: 166.1.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:6f:d5:7a:82:13:bd:fc:e9:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:45:57 2025 GMT
Not After : May 20 18:45:57 2025 GMT
Subject: CN=5427404b-5d20-4e2d-875b-5fc378992d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:c8:9f:03:68:d5:cf:7f:5d:a9:71:3e:2c:
99:69:21:dc:dc:84:f1:a1:08:23:f9:0b:58:56:68:
71:0c:23:bb:8b:35:64:2f:ad:54:3b:65:ff:61:4f:
a5:42:a6:fc:21:8a:03:13:b2:46:7f:6f:c6:5e:ac:
0b:ff:6b:16:b3:af:02:cf:03:fc:fc:57:91:59:c1:
23:26:d0:0e:5b:d9:ef:54:36:16:8b:11:dc:57:b4:
c1:a5:da:27:c7:53:c5:2e:a7:bd:5e:25:f9:2b:3e:
0d:9a:31:4b:dc:50:e4:dd:0b:6c:78:e8:38:b0:51:
af:82:da:4b:22:a8:48:f0:97:ca:60:7b:44:b8:1a:
f8:2a:de:f1:7a:e0:9f:15:a8:ce:fa:9c:8d:5b:03:
e6:1d:87:cd:a5:cb:47:7a:64:e9:a4:54:5d:46:44:
38:77:e9:51:8e:fb:c8:4a:dc:a8:7d:49:cf:c5:ac:
a8:15:6d:8f:11:b0:77:1a:42:cf:02:a8:7b:2d:9f:
4e:80:63:3a:8d:e4:ba:28:ee:81:46:dd:1f:71:dd:
99:2c:3e:b1:ce:46:46:d7:dc:dc:57:09:72:8b:e7:
f0:7d:4f:d8:c3:a5:e9:07:01:37:be:c6:55:e6:79:
44:bc:e6:9e:1e:9d:b1:5c:9a:47:b9:96:94:47:f6:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:75:38:4B:37:D8:F4:11:3B:6A:F4:C1:46:5C:0A:F4:8A:33:E4:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45e15e54-1bdf-3c4c-b36f-25d7948fcd8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:4a:2e:ef:54:62:a7:a6:03:e1:71:2a:68:a7:3a:83:00:bd:
58:7f:97:e7:68:56:30:0c:f3:3b:97:53:ae:4e:75:b9:89:62:
48:60:51:17:8f:f3:7d:b2:eb:f5:20:24:18:6f:39:23:7b:5b:
ba:77:fe:23:81:e1:d3:55:f4:ca:18:7b:f8:23:0d:52:ea:56:
cc:03:ba:67:cb:ea:89:30:04:cd:fa:db:c4:21:a6:9b:8f:18:
fc:cf:a0:bc:e8:96:b8:71:08:08:24:43:61:05:2e:fa:9e:4e:
72:e4:d0:08:76:1a:9f:07:68:c9:e6:c2:be:d1:a3:be:8b:ea:
a0:36:db:86:0e:2d:ef:8e:a9:5f:78:88:20:64:2e:f9:92:8f:
93:55:a4:8a:8b:c2:4b:aa:1c:91:76:a5:18:38:aa:4f:f0:0a:
2a:56:63:65:86:81:10:c2:fe:20:2c:95:48:a4:a3:e9:b6:df:
d2:9f:a8:e8:83:e3:49:39:1a:e8:70:73:cb:db:56:fe:b0:cf:
30:38:5f:55:8b:56:cf:53:0d:b3:67:20:a2:ad:c9:bd:e3:c4:
c8:cf:09:36:a2:f2:59:ba:9a:08:c6:0f:43:5b:39:02:27:d6:
30:15:32:6f:79:a5:e3:5f:72:49:03:1d:2a:3d:e5:72:21:98:
58:b5:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:17:51 2025 by rpki-client