Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa
File: 6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa (raw, json)
Hash identifier: 6fKz9ygrH/sbG9HI0khzBPJgsDuLLY85Yy59O4ewSLA=
Subject key identifier: A0:FD:AE:05:33:B6:36:80:E1:FA:26:B6:32:41:03:F2:39:63:98:36
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A99630060DEFCFBB41DBA840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 21859
IP address blocks: 108.165.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:30:06:0d:ef:cf:bb:41:db:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=bdfb3777-8c94-4bb2-af86-75e4eb57dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:e8:1c:f5:19:34:26:e7:ed:7b:65:6f:90:
af:74:34:af:00:81:8f:6d:ce:da:a4:58:47:3b:58:
92:2c:24:67:e2:9e:4a:e1:82:f6:7d:01:4a:6b:33:
58:24:a5:3f:98:e7:c8:fe:3e:d1:d3:85:7f:9c:f0:
26:30:4a:94:e0:47:e4:93:fa:81:27:c8:c8:6e:ac:
7b:52:ba:5d:23:96:e0:5d:93:45:a1:dd:ab:79:90:
6a:9f:99:15:88:77:d4:2b:a0:7c:b6:92:ae:e7:a1:
e4:82:d2:59:4b:b9:6a:eb:79:b4:3d:72:36:e0:46:
6b:89:b2:d1:ff:51:17:b6:f1:2b:88:67:1a:a1:fc:
d9:d0:78:e2:2b:9c:8c:e2:d1:7d:54:15:6c:13:c3:
0a:f9:9c:3c:f2:99:c6:53:62:bc:fe:8f:47:ae:41:
da:dc:85:1d:6d:21:2e:0b:0b:28:f5:76:82:9e:e4:
f5:8d:0d:96:c3:c6:7f:b4:cd:e9:b2:ce:0a:40:15:
82:9f:52:f5:73:02:d8:12:ad:39:69:a8:83:a1:9a:
68:33:7e:b0:57:4a:3c:49:20:56:a1:95:ba:59:85:
84:68:3d:44:56:76:22:58:47:f8:fd:17:d2:f4:c9:
d9:1d:b6:df:6c:2b:79:b4:50:25:0a:70:75:26:66:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:AE:05:33:B6:36:80:E1:FA:26:B6:32:41:03:F2:39:63:98:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:91:d0:b0:88:12:cb:49:42:c5:52:2b:a3:34:f5:8f:86:f2:
aa:a3:e3:0c:fc:7a:98:51:60:ee:1a:0d:ba:d4:a2:e9:c2:c0:
8b:5a:50:3b:9f:8e:03:c1:6d:a8:26:52:85:f1:cc:f8:7c:95:
c1:a0:f3:6d:94:e5:5c:2c:91:97:f6:59:7c:ab:c1:db:21:12:
a7:a2:24:8a:95:6f:46:a3:6b:0c:71:25:95:2e:c4:21:1e:0f:
43:88:1a:c0:3f:38:43:f7:9b:9f:34:92:bc:cc:f3:62:ef:54:
c2:85:9d:44:70:f9:f7:7e:3d:55:d5:a9:92:ea:27:cd:55:65:
fb:20:6c:48:ca:80:84:13:ae:ac:e6:94:4e:97:16:8e:c8:63:
e9:d1:59:1d:70:ad:d1:04:e9:59:71:a1:41:e6:2c:cc:3f:aa:
86:1b:7f:ff:33:ef:33:94:f5:6d:1a:30:38:47:b5:90:a0:5b:
23:6f:aa:49:a8:35:6e:e9:b1:09:9b:29:4b:c5:e4:33:58:c7:
e3:65:7a:dc:7c:56:05:18:9d:aa:35:6b:29:13:3b:dd:5f:f2:
ec:7a:33:fb:d6:23:54:1b:e8:6c:2b:90:f2:8f:73:dc:d6:9c:
35:40:d6:40:5b:60:06:2b:96:33:fa:90:60:de:e1:72:70:08:
d0:f9:01:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:58:38 2025 by rpki-client