Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/98c0943a-53cb-3411-b37c-0f790b394adf.roa
File: 98c0943a-53cb-3411-b37c-0f790b394adf.roa (raw, json)
Hash identifier: CdK9jjMst3FViM0BocTx1rZwB3/xGktoEpVCzmenEgk=
Subject key identifier: C4:D5:01:E1:E4:84:54:D2:6F:0C:80:15:91:65:1F:0C:5B:80:2D:A2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848CB164E4C8D7705FFBF7A1200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/98c0943a-53cb-3411-b37c-0f790b394adf.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 200017
IP address blocks: 108.165.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:4e:4c:8d:77:05:ff:bf:7a:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=35247db5-fde9-4eb2-9ee2-9df071e408ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:53:6d:82:2c:11:b6:78:fd:33:76:94:20:
c6:e1:23:3d:e6:cd:27:a6:91:4b:ca:de:87:bd:b7:
56:19:66:ef:2d:d2:1a:f5:e1:94:fa:c0:45:f7:cc:
9a:e4:a2:da:c5:72:b7:e6:34:7a:5c:3e:eb:83:3c:
71:6c:81:a2:ce:5f:52:75:52:eb:62:31:b1:b8:8f:
ff:6e:22:85:2b:3e:f1:f4:2e:62:7b:a2:6c:46:b6:
49:4e:b0:fd:16:64:74:92:78:23:cb:9b:8c:06:f4:
db:50:c3:3e:de:bc:26:47:96:ff:42:b4:56:8f:b1:
92:26:f0:d1:32:cb:ef:47:bd:ed:b1:35:c8:00:cb:
e6:50:60:31:98:c6:80:56:3a:85:13:c8:7f:ca:3d:
8a:d3:1c:bc:d3:ea:37:81:34:38:07:c9:36:45:49:
ed:3e:cf:02:9f:ee:3b:fe:f7:e2:ac:cc:4b:52:da:
94:b4:65:a8:ec:01:25:b2:6f:7b:98:66:a2:50:03:
8c:b1:69:28:60:cb:b6:15:7e:16:de:1d:96:9a:4f:
85:83:09:86:4e:07:b4:ab:3c:bf:4e:1a:8b:65:e8:
b1:62:1a:44:31:d1:78:6e:0b:c3:eb:2c:46:db:9a:
7e:8f:a9:bf:0b:ae:e2:61:ed:00:c4:51:41:db:47:
47:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D5:01:E1:E4:84:54:D2:6F:0C:80:15:91:65:1F:0C:5B:80:2D:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/98c0943a-53cb-3411-b37c-0f790b394adf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:0d:30:88:3b:57:14:9b:3e:72:4f:72:7e:e4:57:47:de:33:
f7:65:fb:26:64:26:a8:76:08:53:77:6a:1c:af:6e:1a:f7:bf:
a6:76:51:b0:0a:5c:d5:28:70:1a:c2:f2:9c:b1:7f:b0:0d:09:
0c:de:cb:97:5f:b5:99:6d:c2:c8:f1:b7:19:17:45:bd:0a:cd:
39:00:72:ee:98:e2:cd:fb:c7:ad:d2:1b:fb:91:34:03:87:8e:
b3:25:88:70:56:36:08:6f:ef:c2:8a:38:86:0c:f5:be:db:77:
04:83:1c:aa:7b:c2:ed:4d:c0:b3:3d:ce:a0:37:fb:2b:04:0c:
7b:46:67:93:98:a6:13:66:79:bc:2a:ab:46:64:90:96:7c:03:
a1:eb:87:9a:29:e6:f5:48:33:27:35:6f:0b:dc:51:a1:da:1f:
18:1b:11:06:94:0b:25:86:30:0c:36:9a:fb:14:fb:5f:27:c0:
07:2f:77:45:64:2e:a0:8f:f4:39:c2:a2:5f:80:af:51:25:fc:
fd:59:a4:59:18:01:82:e3:f7:82:f7:7c:6e:8e:ea:3f:b1:95:
7b:38:19:e3:dd:b2:f3:9f:6f:e5:6e:fb:40:f2:f5:99:51:f3:
b2:58:94:88:58:b6:1c:09:d4:0d:70:52:4e:7a:6c:08:6c:58:
79:5b:65:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:32 2025 by rpki-client