Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ea9f830-ea6a-320f-89bb-6c9ad120354b.roa
File: 6ea9f830-ea6a-320f-89bb-6c9ad120354b.roa (raw, json)
Hash identifier: cEBa+IpXGLM9PzfOyF12IMJaqMBztOgkAD9RRg4Yrvw=
Subject key identifier: 86:23:77:C1:90:59:96:1E:84:12:66:16:56:A3:DB:3E:92:D5:8A:DF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849438BFC279696D32E79344600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ea9f830-ea6a-320f-89bb-6c9ad120354b.roa
Signing time: Fri 21 Mar 2025 17:35:02 +0000
ROA not before: Fri 21 Mar 2025 17:35:02 +0000
ROA not after: Thu 19 Jun 2025 17:35:02 +0000
asID: 11798
IP address blocks: 166.1.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:8b:fc:27:96:96:d3:2e:79:34:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 21 17:35:02 2025 GMT
Not After : Jun 19 17:35:02 2025 GMT
Subject: CN=2a825e94-7bda-475a-afeb-2578522602b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:5b:76:f8:13:22:e0:c7:ce:2f:92:d5:ce:
fd:95:8f:de:4a:40:90:41:ff:f4:57:94:05:55:12:
4e:df:40:c1:29:5d:56:6b:f1:8b:06:2e:50:37:40:
12:49:58:95:6f:f6:6b:ac:11:22:48:3c:90:2c:57:
dc:b7:7a:98:6b:79:1e:c5:80:27:d5:73:34:57:e3:
18:e4:18:99:e9:3b:5e:59:f5:75:c1:53:ab:63:da:
39:02:b4:57:62:ea:d6:bd:9c:30:c0:90:e7:97:58:
dd:38:b7:e5:08:72:e5:9a:72:0a:dd:17:9c:98:e9:
da:c9:f7:43:ae:0b:6b:58:7a:9c:55:6e:ca:05:fd:
95:2d:57:13:bc:c1:27:06:70:88:d5:37:e6:38:16:
b1:85:37:fa:27:63:16:20:d9:23:47:1b:a2:e3:67:
1b:08:05:c2:eb:02:9a:30:65:2d:1e:91:d7:ae:cb:
de:db:f9:c7:32:00:5e:86:9a:9b:98:1a:56:c2:b2:
98:b7:70:df:04:1b:23:5b:aa:d9:16:d6:6b:23:d2:
57:bb:6f:6e:ce:db:5f:37:ea:a2:d3:a2:4e:19:ac:
b5:6c:a1:d1:ea:07:e4:06:46:1f:77:90:30:03:6c:
e4:01:9c:75:cf:3b:89:4e:8c:87:f0:3e:f8:92:39:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:77:C1:90:59:96:1E:84:12:66:16:56:A3:DB:3E:92:D5:8A:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ea9f830-ea6a-320f-89bb-6c9ad120354b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:94:b5:fe:47:7e:6a:1a:fa:a6:e5:96:29:d9:e8:48:6a:65:
3b:6a:5a:a2:0c:05:ea:ef:ef:6a:8f:b3:cc:1c:4a:99:d0:7b:
b9:f7:91:8f:e1:af:ae:c2:c8:b2:ee:1d:b5:d6:a4:82:5b:1d:
0c:7a:ec:fa:57:f0:d3:c9:cb:51:0e:65:67:30:43:0d:64:11:
0f:0c:61:6f:e9:c6:b5:4b:ed:08:3d:26:60:0f:36:07:e4:da:
5a:c7:9a:eb:7c:19:8c:10:39:6d:9e:d4:58:3e:04:07:16:d4:
df:d3:46:46:7a:b9:09:90:45:37:3f:b5:b1:91:2d:3f:5a:bf:
13:d2:f7:8a:43:68:24:c5:6a:32:ba:cf:4d:c7:92:83:e7:9f:
19:3f:68:9e:8f:2d:9b:05:55:e0:10:c0:9e:ac:75:09:64:83:
e6:38:9d:ae:3a:a7:40:86:18:b3:b3:75:14:7d:3b:cc:e3:7a:
11:0b:b7:39:1f:84:90:40:82:68:4f:94:54:92:f8:c7:bb:30:
8d:1c:77:84:67:4a:c7:c1:63:11:c2:80:c3:5f:60:d9:ae:00:
8c:8a:4c:f3:89:9d:21:5e:42:7b:a5:45:b3:ca:49:cf:76:e5:
aa:1f:fc:43:20:e3:35:7d:c9:e4:4f:1d:3e:7e:6b:70:c2:9c:
7c:39:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:24 2025 by rpki-client