Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa
File: 7d36ea96-e1a3-346d-96f7-d02e19249321.roa (raw, json)
Hash identifier: h7/5+q31W+iJ33rqml0uxmdwXQ4EcAZKE/fvP7/RpFs=
Subject key identifier: DA:05:21:2D:9B:99:7B:E3:66:04:2C:5F:D6:33:1D:98:EF:D6:9A:1B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584913AC3253EC58C2E4A55C8980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 396163
IP address blocks: 166.0.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:32:53:ec:58:c2:e4:a5:5c:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=7b52cc35-b4db-47e0-a118-7b59e9d2f1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:0c:03:3d:2f:e8:3a:0b:44:81:6b:46:cf:
43:4e:46:a7:25:6a:10:44:d3:e7:9f:8a:81:98:86:
ba:fd:40:46:eb:c7:fa:86:65:e5:f9:83:6b:7b:25:
4f:18:61:fb:0f:c4:02:66:66:3c:ee:c2:46:5f:34:
2a:60:05:a7:06:59:2a:24:0c:99:58:e9:19:35:65:
43:34:7d:f4:89:8b:fc:ef:ae:c9:56:0e:fb:48:d1:
30:53:83:a1:a5:3e:54:49:5f:82:67:5c:5b:de:06:
89:8c:25:60:8b:8b:41:f6:91:f8:aa:bf:c4:1e:90:
c7:f6:07:16:85:4e:c4:19:2a:84:32:a5:6d:d6:25:
4d:be:59:76:1b:fe:d2:f4:ef:ac:d7:c9:ad:d5:e1:
32:de:53:c5:d6:e9:18:c8:b1:05:a6:f9:8e:a3:c5:
f8:f4:f1:14:35:2b:f5:1c:d8:dd:a7:f5:40:dc:24:
6a:c3:ff:92:b6:c9:89:8d:46:af:70:8d:37:dc:4b:
0c:14:5f:9c:48:09:23:6e:2f:01:3e:32:b1:e2:ef:
cd:ee:32:99:e3:f2:4f:c0:68:22:95:a2:61:eb:1c:
d6:d4:46:b2:ca:8b:7d:63:48:a8:eb:0f:c5:89:59:
3c:2b:65:39:85:80:88:a8:6b:eb:a0:e6:ea:1a:b1:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:05:21:2D:9B:99:7B:E3:66:04:2C:5F:D6:33:1D:98:EF:D6:9A:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ee:46:ff:f6:12:35:67:eb:c0:09:34:2e:f3:35:60:49:62:
85:30:0f:e3:a7:7c:77:8f:81:88:d5:2d:64:bd:ef:29:b9:93:
10:4c:2c:b9:4e:03:76:e0:dd:a1:d7:80:f2:27:bf:2b:39:be:
dd:35:26:59:c1:c3:db:f4:7e:de:04:f0:6a:e2:76:51:ba:b4:
6f:6e:d2:56:20:7c:1b:e5:85:24:33:1a:77:18:2c:e8:fe:e6:
6b:79:74:98:0d:50:94:d8:10:72:49:8f:1d:b6:30:90:2c:2a:
da:0e:f0:38:41:db:27:20:88:0c:cc:fe:18:93:e2:f0:45:24:
d3:c1:bc:0c:d2:d3:3a:c0:4b:34:10:d2:8f:d2:9b:bd:3b:4c:
a9:2c:68:bd:37:62:87:70:89:0b:06:1a:ad:2e:54:b6:64:00:
71:26:ed:13:cc:0f:56:cc:4b:3b:1d:e3:bf:87:21:94:bb:cb:
b5:b6:c4:55:a7:74:bd:f5:38:aa:0f:7f:6e:65:9b:e0:de:c1:
7d:f5:14:54:4a:c5:67:af:93:ea:2a:b3:19:ad:7a:cb:c5:bf:
80:23:e0:ca:44:b4:f0:98:b3:5e:4c:96:21:38:62:14:2c:90:
84:15:e9:16:e1:30:80:81:bb:30:3f:6e:9d:42:8f:62:68:7c:
6e:c7:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:38:57 2025 by rpki-client