Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64885a19-33c4-3b8d-9a58-518fa0afb8ae.roa
File: 64885a19-33c4-3b8d-9a58-518fa0afb8ae.roa (raw, json)
Hash identifier: +97rgELydmBb7hh+BjCQyBUAbMEIuOVT/56TyAP13uI=
Subject key identifier: B7:AD:48:7A:E4:4C:71:3F:8E:8F:3D:38:AB:AD:44:3B:53:84:1A:66
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D64114F6B5D8AE2CAF407480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64885a19-33c4-3b8d-9a58-518fa0afb8ae.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.1.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:14:f6:b5:d8:ae:2c:af:40:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=573f32a4-43a1-44fa-b388-a520799a0e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:46:e8:e2:29:83:83:82:6a:e9:7f:bb:30:
d3:c5:82:76:3e:ce:d2:de:ad:c8:27:b8:f5:ef:94:
e9:4f:6a:96:91:d8:9f:30:db:e4:6b:f8:55:2a:ea:
ee:95:33:94:2e:ff:8d:ba:f1:d7:fb:33:eb:18:83:
f6:f9:e3:eb:18:79:88:37:28:ff:7b:d9:00:1c:2c:
09:39:20:8a:af:da:15:ad:26:c6:c0:51:ba:97:8d:
37:41:83:6e:4c:89:57:53:40:16:9e:85:82:3c:b4:
3e:6a:b9:8e:2d:15:3e:42:05:fd:fc:c2:07:d9:0e:
28:6b:16:7d:68:c8:25:b8:01:9f:c7:7a:a2:b0:90:
f4:56:ed:a5:e1:81:8a:6e:31:ed:89:ee:bb:0d:ca:
b9:dc:56:61:39:8d:cd:83:de:ac:d8:04:e3:0c:5a:
dd:6c:b9:2e:b1:84:86:b8:50:52:2c:be:97:6a:be:
29:b5:c9:41:e9:15:cc:55:85:0d:27:e7:55:b9:12:
4a:09:3c:88:43:ad:d9:bb:7e:dd:2d:39:c8:ea:44:
13:50:83:e9:84:0e:fe:ac:55:14:31:ca:a9:1c:90:
a9:51:cf:af:b5:5f:da:98:18:4c:1a:a6:a7:4c:d4:
a4:e7:e9:f2:96:48:3d:d6:dd:6e:fe:1d:15:f1:d6:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AD:48:7A:E4:4C:71:3F:8E:8F:3D:38:AB:AD:44:3B:53:84:1A:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64885a19-33c4-3b8d-9a58-518fa0afb8ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:01:75:83:43:09:98:6a:c4:65:dd:48:a0:fe:25:46:26:9b:
b5:83:14:e8:d5:ea:c0:a1:c6:10:ad:10:76:5d:da:3d:ec:10:
72:00:73:a1:c2:99:25:f5:99:4e:ba:d2:ee:58:20:3e:f7:23:
b0:44:68:f7:b4:76:10:ea:7e:c5:af:ba:47:75:c3:dd:6c:d6:
19:f1:21:f9:79:d8:33:c5:8d:5a:d2:05:20:9a:c6:df:8d:3d:
b9:b6:81:77:60:df:e4:9d:bc:08:57:3c:ca:d2:cc:d5:3b:69:
b0:9b:8e:44:60:49:c5:ec:00:25:36:e3:52:98:7f:02:01:b9:
37:16:f4:7f:fd:bc:89:7b:b0:17:76:2f:3e:b3:27:85:2c:4c:
99:2d:31:16:36:4e:ca:a4:34:83:5c:20:46:25:37:46:7d:26:
d6:e5:bb:13:34:b5:a1:40:5b:92:b2:61:a9:bd:e2:a3:91:fe:
03:42:8d:a9:1b:cd:7f:1d:2c:06:53:ad:07:bb:90:e1:e2:1d:
ed:f8:c2:54:59:37:39:53:3e:93:fb:6d:72:5c:75:8a:8e:2b:
61:d6:3c:61:7d:19:c8:32:75:d2:05:2d:5b:a4:21:bc:e9:2c:
f8:2a:23:54:8a:d5:ff:ea:d5:d6:7c:2f:82:a4:31:9e:e6:b6:
6a:9c:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:04:00 2025 by rpki-client