Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b60124e3-eb11-3582-874a-768e7a2bebf7.roa
File: b60124e3-eb11-3582-874a-768e7a2bebf7.roa (raw, json)
Hash identifier: xY2mcvwM+YP0zbE7XcNuU3P+5IlNy+0dT8QJFF8SjYo=
Subject key identifier: 7D:86:1A:38:48:82:72:1F:4B:FC:42:CF:6E:28:4F:1D:6D:A4:92:67
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D64114D9FC704103DA89C400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b60124e3-eb11-3582-874a-768e7a2bebf7.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.1.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:14:d9:fc:70:41:03:da:89:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=50371df2-3cd9-4294-92f9-a001898c0092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:e7:ef:ff:fb:d3:b8:e4:48:95:bf:8a:08:
31:ea:2d:63:a7:74:6e:45:3a:53:5f:68:03:a2:c6:
29:e8:ae:1f:15:37:f6:91:50:7c:f3:0b:8d:e1:40:
32:d0:75:ea:ee:ea:7b:d5:07:be:e2:5c:5c:79:a8:
58:52:52:7b:7a:43:36:ff:c6:ab:dc:f6:6a:b6:1a:
33:5c:c6:0e:57:2a:0b:bc:5d:b4:b3:14:3c:8d:2b:
9f:b4:b3:33:bc:44:3b:00:8d:47:59:76:d4:ce:20:
4c:5c:7a:47:51:3f:66:b5:07:50:71:b9:61:1b:81:
c7:85:a9:01:5a:56:0c:27:9e:fa:dd:3b:09:0b:37:
d3:a7:43:2a:96:9b:cd:68:86:cd:86:79:e8:48:57:
2a:14:d5:2e:67:c2:ec:f9:62:ef:89:50:32:cf:bd:
6a:23:a8:e0:b1:24:e4:6b:e3:ba:16:74:93:26:18:
d1:60:d7:51:17:53:a9:5c:0e:e2:30:fe:52:d9:66:
ef:ee:f3:c4:84:15:c5:84:a7:34:44:c9:f1:2c:86:
54:b1:35:63:1e:a1:f1:ad:94:2a:95:c1:bf:1b:f5:
8d:ed:6a:7a:d1:b9:dd:d0:7e:e2:38:d8:34:ec:a6:
18:89:56:79:70:06:58:ef:ce:37:38:d3:5f:eb:46:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:86:1A:38:48:82:72:1F:4B:FC:42:CF:6E:28:4F:1D:6D:A4:92:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b60124e3-eb11-3582-874a-768e7a2bebf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:81:dd:b5:ac:1f:2b:e5:b0:24:ca:c5:19:b8:83:1e:8f:85:
5f:63:a5:5f:2a:67:e4:c0:be:87:04:cd:9d:01:7b:62:09:2b:
9f:84:ac:b2:d5:bb:54:61:07:45:86:c1:0a:31:f4:5e:8f:e8:
d6:88:05:07:78:bf:64:ac:06:de:df:b3:94:68:fe:c0:bc:6f:
59:e5:cd:59:25:5a:93:50:99:4b:fc:89:31:00:9b:b3:b7:0f:
14:39:63:ac:44:ab:1f:c5:6c:da:3b:d9:a5:5a:c0:9e:b5:86:
22:01:b2:a7:c8:7a:7a:fb:41:50:ba:cb:51:f6:54:68:f6:96:
d5:e2:04:53:b0:62:01:0d:43:0c:67:30:66:34:52:79:37:8e:
ea:ff:9f:3b:12:22:1a:38:d1:b1:92:91:80:5a:26:53:e0:af:
57:86:13:93:6c:f2:83:d3:fd:47:15:9d:63:dd:56:38:dc:02:
97:74:07:31:82:e8:de:a1:ea:d6:fb:13:00:c9:74:84:d7:99:
a3:46:40:d5:cc:93:92:f4:18:7d:54:1f:93:5d:57:dd:73:74:
9d:72:0e:0e:67:37:c7:ce:c3:ec:f4:95:7b:e7:a7:6f:e2:c2:
d0:3f:4e:7b:78:aa:4d:fc:09:6b:3a:1e:cf:e2:0b:bf:13:96:
bc:7d:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:14:10 2025 by rpki-client