Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb02ee39-a51f-36f5-9e8c-9c555519dbc8.roa
File: bb02ee39-a51f-36f5-9e8c-9c555519dbc8.roa (raw, json)
Hash identifier: pVkq3yE4Svaj4KzgI5vB+kPxPQHLSjN+TeSr/UsgDG4=
Subject key identifier: B0:0D:FF:83:44:60:CC:3E:28:5B:62:78:30:89:B7:8F:53:98:8A:A0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C7AFBB0063BE26775EF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb02ee39-a51f-36f5-9e8c-9c555519dbc8.roa
Signing time: Wed 19 Feb 2025 19:46:02 +0000
ROA not before: Wed 19 Feb 2025 19:46:02 +0000
ROA not after: Tue 20 May 2025 18:46:02 +0000
asID: 62240
IP address blocks: 166.1.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:7a:fb:b0:06:3b:e2:67:75:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:46:02 2025 GMT
Not After : May 20 18:46:02 2025 GMT
Subject: CN=00cb3964-f1b9-4911-84c3-f9e32a14e3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:c4:30:27:c8:bd:e8:ea:46:1d:96:59:d9:
08:98:40:04:24:3c:68:c2:ca:12:12:f6:3c:3c:a1:
e1:87:b0:92:8b:8f:69:06:5e:4e:b7:cb:7b:42:99:
11:c2:54:8c:71:e8:d7:05:8f:e9:ef:83:e2:c3:50:
37:25:54:fd:f2:60:01:fd:4d:bb:62:31:9c:21:85:
3a:86:a8:d4:97:86:aa:1b:60:87:79:79:76:03:86:
cb:17:f5:e8:2e:79:53:1c:4c:73:65:97:b7:44:0a:
af:0e:65:92:90:43:1b:29:0b:31:4a:c4:04:1a:27:
ff:09:43:9f:0e:9d:60:df:b7:ad:26:0f:09:c0:33:
0b:4b:90:d1:bb:a6:bf:f5:fb:c2:01:26:62:8f:8a:
61:8f:f9:cc:80:aa:dc:7b:a6:94:f5:c3:73:d8:e0:
65:f1:84:8b:02:05:3c:b7:27:98:77:23:ff:7d:79:
06:09:53:a9:69:32:4c:6e:10:88:e5:07:98:30:a7:
4e:a0:3d:43:df:8e:48:6b:2b:4e:5a:05:47:52:07:
b9:3e:c7:02:d5:da:4b:7f:a3:8b:82:89:ad:1f:70:
2a:e0:7c:b2:a0:b5:07:7f:5d:3d:98:71:02:62:99:
85:34:3b:56:74:af:bf:7c:c3:49:fd:c1:b0:b6:96:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0D:FF:83:44:60:CC:3E:28:5B:62:78:30:89:B7:8F:53:98:8A:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb02ee39-a51f-36f5-9e8c-9c555519dbc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:53:98:17:ef:b9:bb:b1:1c:4a:81:55:7f:6b:c9:10:6f:cd:
12:f1:de:7f:0f:c1:73:d4:47:0c:a8:bf:cb:cf:e4:0d:7e:d1:
34:ef:aa:16:70:a0:4b:4f:8f:e1:a4:9c:5e:7e:6c:15:3d:a9:
4c:06:44:9d:ed:f5:46:c8:d7:38:57:40:2b:61:f7:1b:d9:9d:
27:d1:da:af:ce:f4:83:02:99:c9:86:9d:0c:52:40:c2:5b:73:
f2:88:e4:f7:75:c2:07:d1:05:cd:f2:23:81:fe:32:ea:a4:06:
97:b6:b1:97:4e:d3:39:b7:69:f2:bc:de:41:f1:71:72:0d:aa:
cc:27:60:c6:66:f6:30:e3:b7:b0:5e:fd:61:16:cf:c3:76:57:
9e:f9:94:85:f0:09:95:89:e9:37:3b:35:ee:64:d2:b7:7f:a8:
38:58:6b:d4:24:6b:2a:47:1f:3d:a9:f9:66:4c:d0:69:43:cf:
93:03:43:76:e9:05:dc:cf:9a:0d:18:ef:63:b3:c7:6a:6e:71:
8e:7d:18:58:42:77:0a:fa:da:dc:f8:45:55:9d:34:72:38:4d:
f7:12:da:f6:99:54:3c:87:fa:3e:4f:2d:b2:b6:dc:6d:33:76:
58:e4:24:23:07:08:3a:11:95:3b:ad:19:dc:f5:76:08:5c:42:
99:65:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:19:31 2025 by rpki-client