Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/928c7549-a0f8-3fe3-81e3-22490af1bc0b.roa
File: 928c7549-a0f8-3fe3-81e3-22490af1bc0b.roa (raw, json)
Hash identifier: 9UW2l7PlkFicUDdiGg+d8A0wsnzuOewz+fWF2usQ+qs=
Subject key identifier: 6C:1B:9E:D7:B5:3D:65:C6:24:9A:C9:D3:07:48:5B:D8:0A:DB:73:A6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584940BD0F1B1B251C42EBD67F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/928c7549-a0f8-3fe3-81e3-22490af1bc0b.roa
Signing time: Thu 20 Mar 2025 17:26:29 +0000
ROA not before: Thu 20 Mar 2025 17:26:29 +0000
ROA not after: Wed 18 Jun 2025 17:26:29 +0000
asID: 401152
IP address blocks: 108.165.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:bd:0f:1b:1b:25:1c:42:eb:d6:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 20 17:26:29 2025 GMT
Not After : Jun 18 17:26:29 2025 GMT
Subject: CN=378a7277-34ce-4fc7-bd0c-545a1966c8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:eb:a2:f6:84:01:ab:39:62:f2:7b:5f:a5:
49:29:39:bd:84:2b:1d:62:6e:d9:1d:a7:04:62:3a:
7e:fe:55:0a:ea:a3:d6:0e:6e:71:e2:d8:b6:09:24:
b2:4e:76:8a:a4:22:5c:0f:f3:e5:ff:e9:7b:19:2a:
bb:42:11:10:55:c5:0b:5c:1d:bd:e9:b4:d2:dd:c6:
ed:c6:2e:80:83:c8:b0:8d:de:13:e8:f0:fd:ac:76:
1b:a4:f8:b0:06:cb:bb:bd:26:0b:3f:05:15:dc:f5:
b9:c8:0f:21:c5:32:e3:98:af:47:bb:dc:31:f4:69:
88:91:72:a0:ad:d9:36:96:c5:96:9f:a2:03:65:1b:
03:e5:d3:a0:95:de:24:3b:18:3f:79:11:50:6d:45:
46:d7:98:a4:1c:34:8c:66:c5:cc:72:77:c7:75:43:
f5:78:e1:bc:cd:f4:af:f7:2d:ca:83:a2:b3:d6:86:
5e:23:8c:d3:cd:4d:74:0f:88:ad:0f:ae:e8:fa:55:
63:6c:4f:87:89:7d:fb:50:41:35:5f:3a:66:9d:51:
01:72:a6:60:98:aa:64:5e:ba:6a:98:2e:77:da:1c:
ae:2b:14:cc:1d:05:3d:8c:b6:04:01:05:70:4c:7a:
02:02:1b:7d:2b:40:31:01:85:f9:57:fe:63:7e:a6:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1B:9E:D7:B5:3D:65:C6:24:9A:C9:D3:07:48:5B:D8:0A:DB:73:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/928c7549-a0f8-3fe3-81e3-22490af1bc0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:46:2b:97:04:2b:99:b7:41:8e:31:68:39:fc:3f:33:8c:dc:
3f:a3:c5:e7:35:e3:5f:ac:97:16:3b:d6:4a:8b:ec:b2:f4:78:
93:ca:eb:55:e6:68:49:d4:13:ae:a0:6d:d9:c2:13:8b:09:8d:
a5:d3:9e:f9:4e:26:a8:8e:e0:87:99:85:6e:03:ac:79:cb:e6:
ee:d6:36:ea:04:b2:4b:37:89:63:c0:5d:6b:4d:d8:41:b3:72:
ed:6d:7e:4b:9f:b0:40:e8:b1:6c:47:25:4f:e2:c5:52:78:b1:
bf:94:c3:bb:bf:4e:d3:8b:7f:48:20:6c:ac:c8:4e:42:fd:97:
50:6c:54:b7:27:b4:9c:96:f2:31:53:6a:53:46:26:e6:fe:94:
d9:81:b6:b6:1b:dc:dd:0e:36:34:00:2b:3b:06:ff:84:d9:7a:
f1:07:ba:fc:02:d0:76:28:bd:cf:a3:b9:f4:a1:1a:66:01:4a:
8f:9f:3e:45:9e:f0:62:44:2f:9d:69:00:2a:4b:7f:70:65:d1:
a3:3c:36:f0:be:ed:0d:17:f1:2f:48:d1:f9:4d:93:c5:34:b3:
2b:91:63:43:af:48:40:ee:01:bf:d9:0d:8d:e2:29:ea:01:92:
eb:50:f6:25:7b:ae:ee:42:1b:23:4b:cf:b6:eb:95:a8:41:c4:
72:03:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:09 2025 by rpki-client