Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfd07589-b879-3935-9f6e-b35105fe699c.roa
File: bfd07589-b879-3935-9f6e-b35105fe699c.roa (raw, json)
Hash identifier: hR66mJpsYoYw1LTx3BDCMhn2PZy0buG5Hh6jMAKTU9w=
Subject key identifier: B3:30:A2:EF:9C:C4:8A:57:52:26:57:F9:4E:29:29:F6:26:F0:E5:C9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584902EC2F5B979921449E658B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfd07589-b879-3935-9f6e-b35105fe699c.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 264409
IP address blocks: 166.0.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2f:5b:97:99:21:44:9e:65:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=b3989d07-223d-4ed1-bcbc-9047b8979327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:59:36:a6:40:d9:1d:a7:1c:50:1a:77:94:
05:30:d3:a6:20:e9:52:7d:c9:a0:0f:37:20:b2:c5:
83:1b:e2:8e:3a:de:34:a3:5c:f6:67:65:65:ff:7f:
07:99:62:a4:32:4d:2b:33:ba:ab:e0:c5:22:61:12:
7d:f3:3f:a5:c4:40:ab:5a:45:fd:aa:8f:64:f0:0f:
dc:a2:d9:4b:e7:cd:38:6c:20:a4:64:19:2d:39:0b:
d7:56:70:84:79:a8:13:e7:62:a3:5c:a4:d0:aa:32:
25:88:e0:68:0a:90:9d:87:3e:8d:ca:17:5e:e7:9f:
6b:b2:af:6c:be:71:a2:43:92:b7:6a:2b:31:36:7e:
a2:be:2e:ae:ff:95:fd:3a:f8:6f:7e:8b:76:e8:c4:
f6:a6:e8:58:3e:63:00:f3:28:06:8e:3e:f3:e7:b1:
62:91:a0:7b:ca:a6:5e:23:ed:d1:59:d8:aa:38:1f:
da:a2:f7:a2:20:9a:16:86:f9:aa:42:d8:ec:2e:64:
32:0e:e6:a5:bb:a5:28:5f:1f:95:8c:cd:0d:06:70:
22:e0:04:87:50:a9:a0:e1:9d:3a:bd:a6:b1:68:fa:
d2:48:a5:68:78:63:69:a1:d7:74:bb:c0:54:bd:e4:
cb:85:28:6d:e1:9a:c8:90:cf:fe:43:5c:ba:0c:61:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:A2:EF:9C:C4:8A:57:52:26:57:F9:4E:29:29:F6:26:F0:E5:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfd07589-b879-3935-9f6e-b35105fe699c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:8f:5f:aa:e6:34:d2:6d:ac:92:02:03:f0:a2:09:11:b4:7e:
5c:48:ef:a0:76:39:4c:8d:36:67:e9:db:d7:dc:3c:cb:22:90:
91:46:ef:57:77:62:bc:59:9b:38:c5:d9:35:20:72:4c:ea:4b:
cb:3a:2c:f4:8f:b6:72:e1:ad:48:bd:55:d3:00:0b:09:b6:c1:
25:de:9a:ef:21:84:9d:e5:1d:a7:01:6e:f5:f1:fb:37:8c:30:
04:c8:b8:66:c5:75:f4:e3:94:26:77:fd:97:7b:72:ce:b2:67:
59:1f:7b:89:8a:9d:72:e4:4c:5a:6d:8a:2b:5b:5e:82:69:fb:
d2:52:9b:bb:48:d0:0c:8c:49:d0:9f:c9:5f:ad:b0:6a:f9:f1:
33:44:c4:c6:f4:ad:5f:f1:a9:73:89:17:0b:c6:1c:7d:54:6d:
53:0d:23:f6:87:14:dd:3a:08:af:8f:35:1f:13:e5:bc:3d:fe:
3b:c6:35:69:5a:5a:fb:41:33:ae:5a:77:0b:c8:c5:de:55:8a:
02:db:e2:b5:9c:95:ed:13:be:91:20:3f:f9:1f:c7:5e:d9:31:
85:eb:d6:cb:98:c3:a8:0f:26:aa:f7:fa:5c:00:ba:77:0c:73:
65:4d:1e:d0:09:66:6d:ae:1e:d0:ac:d8:df:49:ca:51:12:a4:
41:a3:61:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:07:06 2025 by rpki-client