Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9ce5237-d9c3-3901-bf15-b0a2c40416a0.roa
File: c9ce5237-d9c3-3901-bf15-b0a2c40416a0.roa (raw, json)
Hash identifier: 9dPwNzySfSq+iI2nUwKy+pnT6rJOcoZjKCv2yGp5j7Y=
Subject key identifier: DF:BD:A6:99:82:E9:89:66:28:4F:22:58:B2:6B:A2:B8:7A:73:A9:41
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C740D5BB74F98679F6640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9ce5237-d9c3-3901-bf15-b0a2c40416a0.roa
Signing time: Wed 19 Feb 2025 19:45:59 +0000
ROA not before: Wed 19 Feb 2025 19:45:59 +0000
ROA not after: Tue 20 May 2025 18:45:59 +0000
asID: 62240
IP address blocks: 166.1.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:74:0d:5b:b7:4f:98:67:9f:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:45:59 2025 GMT
Not After : May 20 18:45:59 2025 GMT
Subject: CN=57dc6d43-df82-4236-a446-0fe275f26b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:02:3b:21:30:7e:1e:f2:6c:3b:fc:68:a4:df:
dd:c9:47:83:96:61:6d:88:fe:ef:39:a1:16:1f:5c:
18:fb:05:45:51:01:b1:70:55:bf:09:dd:de:39:15:
bb:11:65:81:da:fd:20:ab:d6:3b:b6:e8:b3:33:8f:
cb:4f:60:67:b8:08:6a:5d:ee:0a:d8:99:ec:a8:fa:
9d:16:d9:17:a7:a4:5a:28:0a:e3:c2:1f:3c:23:d6:
47:06:1e:81:7c:fc:e6:7a:5e:d1:a9:77:12:49:51:
75:6e:fe:7a:72:94:81:a1:bb:bf:48:3c:d2:ce:50:
2d:49:47:3d:51:82:c0:6e:c6:79:fb:80:26:ce:61:
b9:73:50:2f:bc:14:e3:ec:f7:3b:6e:31:15:81:95:
60:62:b3:27:95:a0:bf:5b:72:10:20:fe:32:de:ea:
71:59:75:b7:0b:88:02:f6:69:8f:d3:85:31:f0:c0:
20:24:e1:47:6e:ba:94:b3:ab:04:b3:ca:c7:98:5c:
a7:f9:12:c4:a6:62:45:a3:c5:72:cc:68:f9:2f:4f:
07:29:e8:5c:f4:38:51:8a:00:31:ea:b0:ab:ee:a3:
45:76:16:c4:c1:76:b2:f5:58:c3:56:d1:41:31:3a:
3f:87:70:f2:4f:30:b0:9e:be:38:5e:d9:02:68:1b:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BD:A6:99:82:E9:89:66:28:4F:22:58:B2:6B:A2:B8:7A:73:A9:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9ce5237-d9c3-3901-bf15-b0a2c40416a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:92:ef:c2:04:6a:39:c5:62:a0:d6:7b:a9:d0:a6:f2:2a:61:
9d:25:a5:55:b7:0f:f0:d0:07:7a:27:57:a5:b2:2c:ff:18:ce:
27:f5:9a:11:a4:22:5b:62:ec:72:4c:02:07:09:e1:67:c3:80:
80:49:d7:51:12:c5:4c:0b:9b:c7:da:ef:ca:f8:cd:cc:e5:87:
87:43:b8:10:a7:b3:63:11:58:d2:9b:db:af:90:dd:94:71:2f:
ee:fd:58:b4:71:ba:3b:ad:21:0e:2c:ed:df:5a:ad:1b:33:4f:
8a:c2:e8:3a:81:4b:9a:1d:2f:56:19:80:3c:5d:e6:18:dc:21:
b0:ac:59:43:6c:c1:75:3d:84:37:ab:df:23:68:9e:19:c1:bf:
75:a7:13:4a:61:75:36:e1:7d:87:1e:0d:68:55:f9:7e:41:da:
ad:d7:98:71:e6:23:73:ca:b4:04:a8:41:7f:25:70:4c:6b:a9:
95:c5:a2:b6:06:4e:f4:d5:bc:9e:3a:f2:9b:21:de:d3:25:ef:
e4:20:fe:b7:c4:dd:ab:fc:2b:cd:73:48:39:7f:01:05:c1:4c:
19:7a:8b:d6:0e:97:7c:fb:5e:ff:10:a2:45:65:6b:29:6a:1d:
72:41:ff:eb:be:9f:bd:7b:94:b9:85:de:cb:86:9f:0e:ac:4d:
73:8a:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:21:58 2025 by rpki-client