Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/951b7e3d-2549-348b-b5e0-32a1b4f1c29d.roa
File: 951b7e3d-2549-348b-b5e0-32a1b4f1c29d.roa (raw, json)
Hash identifier: 6Lr0hxO7sXzAG9KuuEg9QwXf8ETeKIRoVJGKIVkue74=
Subject key identifier: A3:1E:FA:ED:18:E8:AD:F6:B5:00:BB:60:D4:46:F1:B7:9D:4E:B9:2C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D64113C60A67CB6D9B80BB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/951b7e3d-2549-348b-b5e0-32a1b4f1c29d.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.1.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:13:c6:0a:67:cb:6d:9b:80:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=ad864541-1a0d-45e1-9255-c91a3219b453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f7:65:dc:61:e3:a0:9d:cb:c4:93:f6:c3:af:
50:0a:a4:3d:5f:55:96:9e:d0:b3:60:82:a9:ac:e0:
e3:4f:12:a8:f4:c5:7c:fd:c9:99:52:e7:7b:04:39:
81:7f:6d:ba:e5:dc:0a:a7:88:d6:89:84:37:8e:e2:
1a:7f:3c:23:21:72:ec:ef:8d:a8:0c:88:7c:a7:23:
3b:5a:ad:d7:5a:4b:5d:52:5f:01:c7:af:58:24:f9:
72:8e:c8:fe:57:f9:88:8c:33:70:9a:20:80:96:dc:
a5:9e:42:00:a1:6b:68:50:4e:1e:55:67:50:a2:ad:
de:df:10:be:92:70:9b:55:56:ab:e9:94:41:1c:b9:
11:48:96:77:4f:45:ac:03:3a:b3:c4:fa:a7:50:c2:
7c:e1:f6:30:00:a2:5b:f2:6e:57:36:dd:6c:1f:91:
e9:68:cd:14:a0:4b:c8:69:3a:1c:2d:3a:61:25:19:
a3:fe:4d:31:90:f5:b8:94:13:1d:a2:e3:06:95:44:
3c:35:d4:90:11:5b:c4:af:ae:5f:0f:84:ce:60:50:
0f:e4:19:19:1a:8f:e3:ca:1e:c0:e2:de:86:14:cc:
c9:6b:ea:1c:6b:2a:9d:45:c3:34:e1:35:0a:f3:eb:
71:84:e4:51:76:93:36:82:47:c0:fa:45:9d:39:04:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:FA:ED:18:E8:AD:F6:B5:00:BB:60:D4:46:F1:B7:9D:4E:B9:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/951b7e3d-2549-348b-b5e0-32a1b4f1c29d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:c3:8b:61:b5:25:88:72:70:d4:24:66:b4:b3:2f:33:e6:82:
3b:64:d0:ef:ab:12:7b:54:22:d9:d9:61:9c:90:45:b3:0f:83:
04:63:39:5d:32:c8:da:bd:39:64:fd:32:24:d0:d3:b8:db:65:
1e:d5:a4:b5:64:ed:54:01:7b:c6:d0:03:ea:11:d6:52:1c:f3:
ee:70:8a:96:39:95:78:18:ba:9f:27:ac:d5:71:73:3e:ed:cb:
97:e0:d0:c2:a7:b6:32:cf:1c:bf:10:62:4b:d5:02:63:c3:f3:
b5:d3:87:f7:10:b2:e8:27:8a:fe:53:8c:bf:7d:03:a7:8e:a3:
12:08:96:f1:68:ba:22:49:f5:b7:31:ac:35:66:27:58:bc:16:
83:d9:ea:07:81:85:44:29:b9:ab:5c:5c:9c:e7:ed:a6:df:e9:
aa:74:97:e9:13:55:eb:08:73:a5:da:08:6b:5e:05:cd:22:aa:
7d:9f:c1:70:de:7e:02:a9:59:b9:35:87:f2:a4:a7:41:79:a8:
52:a6:0c:95:ac:5c:aa:19:85:53:70:cd:69:bb:a8:59:6f:18:
bc:e9:31:8d:2f:5e:80:89:a0:e3:85:5a:6b:f3:4f:84:f4:8a:
3b:da:2a:73:4c:c2:4a:86:1b:98:67:27:d2:03:67:df:db:85:
a1:6a:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:42:37 2025 by rpki-client