Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53352d9d-bf07-30fc-901c-392a7daf5799.roa
File: 53352d9d-bf07-30fc-901c-392a7daf5799.roa (raw, json)
Hash identifier: AKQvzQx80elvxynXVn/f8FhCDQfvRic+TRXlQVOPJH0=
Subject key identifier: 98:63:09:78:35:8A:B7:E1:15:A5:CF:F6:59:4B:28:8B:40:14:6D:A8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AAFB6BA9ED6ACF07184C2600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53352d9d-bf07-30fc-901c-392a7daf5799.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 11798
IP address blocks: 166.0.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:6b:a9:ed:6a:cf:07:18:4c:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=97b7d383-dc29-45dd-9619-3b3f778462cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:21:24:b5:d0:cf:c2:95:73:f8:e2:7f:82:
6d:26:cf:06:e1:05:0a:67:97:5d:a8:6e:8c:cc:ca:
2f:c8:f5:d8:00:f5:d2:5f:92:6d:19:13:a9:77:f9:
62:c8:ea:ce:90:6e:5b:b7:4f:3d:0a:1e:a2:5e:0e:
ef:e8:88:80:88:1f:c4:12:83:4e:4a:19:55:07:42:
21:9b:50:6c:e3:87:c7:a8:4d:4d:23:5d:34:17:ab:
3a:84:54:df:09:d6:f8:d0:59:57:1a:68:05:b0:c7:
2c:42:fa:99:0d:cb:9c:ac:c1:ff:68:32:e8:e0:2d:
b9:13:00:66:d7:f7:cf:1f:25:c3:51:e4:b5:90:3c:
f4:d9:23:7e:d9:02:98:c9:97:b1:56:09:a1:03:f3:
33:30:c9:bd:52:46:69:23:e7:ff:7a:a6:2d:da:c4:
b0:b8:2d:66:8d:e0:57:e7:2e:46:c9:4f:46:7b:75:
f0:3c:56:dc:26:19:91:86:1b:a5:49:b5:04:21:7c:
bb:cb:4e:2e:17:d3:99:f4:54:d6:42:0c:2c:d5:4a:
3a:d8:86:d8:a6:a2:d9:26:f5:79:ad:eb:00:f2:f9:
85:fd:7f:df:88:95:7a:89:45:d5:d2:84:91:02:29:
32:a1:da:88:87:3e:83:dc:cb:87:eb:ff:9e:38:56:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:09:78:35:8A:B7:E1:15:A5:CF:F6:59:4B:28:8B:40:14:6D:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53352d9d-bf07-30fc-901c-392a7daf5799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:d6:82:09:4f:ef:f1:13:fc:78:69:05:c7:63:dc:5d:f7:60:
98:6c:8f:88:d5:17:36:a4:2a:c6:39:e8:af:06:73:c2:e4:14:
40:44:0c:f3:1a:5c:16:23:ec:a5:d7:22:ba:83:6d:73:c6:a2:
fe:c5:d5:ee:c2:5a:91:95:e6:b1:7a:96:06:b2:b5:97:71:a5:
1a:3a:b9:c9:04:1b:e1:89:4e:74:5a:30:d9:f3:e6:f4:7a:45:
b7:ff:31:0b:6c:ed:48:83:51:53:fe:30:1c:22:80:d9:e1:70:
ca:95:89:27:df:07:c4:9b:7f:4d:ae:3f:cb:d1:64:ee:51:96:
dc:92:e4:f4:9f:1b:15:9c:e4:d4:c1:b8:e2:68:1b:ae:7c:cf:
9b:cb:6a:98:69:8e:86:a8:da:0c:3b:d2:c2:26:ec:b2:33:7d:
77:0f:5e:b4:7b:c9:ed:e0:46:fe:d2:20:99:f6:83:87:5d:c3:
45:dd:de:62:ec:2f:86:6f:72:26:c8:74:f3:e9:6f:e5:5f:91:
c1:f5:07:c9:5a:dd:4d:17:d9:4c:6b:9e:6d:51:f2:cd:0b:e9:
fa:4b:c4:8f:43:e2:ca:0a:98:50:a7:c9:97:e0:99:50:45:c9:
18:cc:d8:fb:5d:62:04:f6:3d:4c:a5:50:9d:8f:9f:b4:41:7a:
f4:2f:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:21 2025 by rpki-client