Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60b2275c-25c2-307d-a665-98eba81fdf34.roa
File: 60b2275c-25c2-307d-a665-98eba81fdf34.roa (raw, json)
Hash identifier: hE3V/dpZ/0BHp88aIqsJ1U7wqfAPlgnW5n7E/k+nxzA=
Subject key identifier: 97:C5:AE:C0:B2:12:29:83:67:06:23:F2:8C:A4:72:A6:C8:E3:28:7B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848ECE8EE37B0C3B6D2F8053300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60b2275c-25c2-307d-a665-98eba81fdf34.roa
Signing time: Tue 18 Feb 2025 16:46:59 +0000
ROA not before: Tue 18 Feb 2025 16:46:59 +0000
ROA not after: Mon 19 May 2025 15:46:59 +0000
asID: 401152
IP address blocks: 108.165.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:e8:ee:37:b0:c3:b6:d2:f8:05:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 18 16:46:59 2025 GMT
Not After : May 19 15:46:59 2025 GMT
Subject: CN=e5c86161-2806-44f8-ab41-724d8a127d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:81:41:46:d4:a5:cf:9a:a5:18:a5:39:99:
42:0b:41:72:95:cf:8a:f3:6f:9a:77:f0:2c:a6:ce:
8c:86:71:1a:79:6b:fc:4d:d6:1c:bc:14:2f:6d:1e:
32:fa:eb:21:95:41:a6:43:b1:a0:46:a3:5c:19:32:
54:99:b7:da:2e:7d:d5:9d:7a:ab:79:85:24:a5:9a:
dc:1c:14:e8:d8:0a:77:4a:1d:1d:b3:a3:b1:39:53:
df:d9:37:f3:19:db:97:38:e5:4f:c9:19:6d:45:2e:
f9:55:61:49:8a:d7:70:56:bb:97:50:0c:c3:5d:e4:
69:22:4e:68:97:42:76:24:fb:c6:53:cf:d1:ba:77:
31:cd:06:34:e9:72:f3:f9:29:4c:fa:2a:b7:12:85:
8f:47:8a:95:48:11:a1:88:10:0f:47:87:80:b8:b6:
bb:04:2e:ab:d3:24:81:15:e3:f6:80:bf:6f:1a:6b:
57:7f:f1:00:ce:d7:8e:51:6b:49:a9:14:79:fd:14:
81:3f:89:f5:93:48:8d:75:b1:76:09:75:be:07:b9:
83:78:81:9a:80:78:f4:35:53:f7:36:56:cd:7f:59:
8c:8d:14:ad:a0:35:6d:d1:2d:96:49:64:a6:57:9c:
82:49:04:8e:22:18:12:04:d1:d8:f5:2b:ed:39:fd:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C5:AE:C0:B2:12:29:83:67:06:23:F2:8C:A4:72:A6:C8:E3:28:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60b2275c-25c2-307d-a665-98eba81fdf34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:43:7f:e8:50:14:f2:0d:99:76:8b:e8:e3:10:fc:ba:79:45:
7a:66:72:13:1c:04:b8:06:bf:a7:73:e7:1f:97:7a:63:e6:30:
19:b9:88:94:64:d1:70:87:9b:a1:da:6a:0b:8f:ba:f4:4b:6d:
a3:8e:93:8e:8a:70:49:6d:9d:28:05:4f:01:e0:10:d9:3e:08:
a9:92:e3:ff:cd:7c:c3:9d:e5:10:ca:f5:cd:96:a5:50:a2:8e:
e0:27:8c:2b:78:d3:2f:a0:0b:e5:63:fe:bf:cb:0a:2a:7a:f0:
54:e4:c4:c6:ef:3b:e4:d7:a9:e4:77:c3:a6:9d:66:13:89:02:
f0:14:74:a1:bc:ba:1a:ce:6f:6e:c6:04:9e:e7:01:30:0b:1d:
7a:92:0a:6f:d8:d1:5f:44:ae:0d:96:81:0f:72:99:92:3f:3a:
98:35:e4:a1:c2:c4:d0:85:a9:2f:a1:a1:2d:13:5e:35:3b:88:
0a:12:45:ec:fc:2c:d6:50:2b:ac:31:ed:ae:ce:9b:96:72:f0:
16:9b:7c:57:fa:c2:35:0c:cb:64:c2:07:0b:cb:d5:59:d0:f7:
e6:78:b1:79:fd:b3:ea:ea:07:6a:60:20:dc:3c:fd:c3:ee:b8:
90:7e:fc:45:d1:f6:6b:ba:cc:87:92:02:76:64:3a:ae:e5:00:
fe:ed:75:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:18 2025 by rpki-client