Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa
File: d412494b-0d71-3291-9c4a-412759c45e5f.roa (raw, json)
Hash identifier: hWjlZaq0nFOynKNw9gpwbA3Gh+zCD1AZmH/dNuY39sY=
Subject key identifier: 70:32:4A:76:FE:D3:36:51:C6:0A:77:95:FC:99:E6:0D:67:C1:50:38
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A9963132665F9C118C589680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 21859
IP address blocks: 108.165.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:31:32:66:5f:9c:11:8c:58:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=481d2611-cd8d-42c0-9c79-85e8c644154e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:55:68:a0:53:e7:72:36:f5:6e:81:f6:82:
40:83:6c:59:b3:24:75:b7:05:0a:4f:68:7c:47:99:
b9:24:2c:a2:9b:51:51:92:65:d4:1f:19:34:7d:2c:
3d:09:d2:ca:2e:4e:89:70:cd:7a:d3:9d:85:a4:b0:
ae:d4:47:86:ac:24:4a:52:fc:bd:69:95:d6:95:58:
69:cf:fb:16:90:92:fb:c3:1c:be:47:84:2b:ba:72:
a2:80:19:38:07:14:3f:15:da:9c:1a:56:ba:08:4d:
b5:48:cd:d3:d3:35:87:30:1b:ec:6c:3a:bb:23:87:
50:6a:16:a8:a1:37:b0:7b:45:c2:26:84:70:23:f3:
97:3d:b4:21:36:e8:67:a2:4b:89:a9:80:94:54:bc:
00:32:c2:9c:53:0c:b7:e5:09:a4:a2:c6:fc:47:8c:
18:9e:93:df:14:68:6f:1b:53:ea:5a:07:39:85:f5:
4e:06:7b:4c:60:e8:79:f3:6d:df:00:86:1c:42:94:
64:ce:74:e5:3c:43:03:f2:ca:85:44:83:fb:44:f2:
3f:a1:80:a2:fe:b5:e9:b6:1b:22:b1:f6:76:7a:af:
3b:05:0a:9c:79:21:18:6c:3d:ae:c4:44:8f:4a:f0:
d4:3a:e8:3c:82:bd:6b:5c:bc:bb:16:55:cd:9d:54:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:4A:76:FE:D3:36:51:C6:0A:77:95:FC:99:E6:0D:67:C1:50:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:8c:5a:e6:d4:e3:b9:5f:ff:ab:82:b3:33:4b:a5:32:96:fe:
41:a7:4f:bb:5d:d2:41:a9:dd:b4:b7:2d:04:8b:b8:8b:0e:78:
33:45:b4:af:54:b1:f1:ec:c2:14:96:f9:78:b3:fe:94:92:d3:
3d:82:d0:76:57:f1:be:fa:e0:39:94:6d:14:bc:f0:5d:6b:21:
5e:9c:e2:c0:af:3d:91:88:72:b6:55:15:6f:29:d1:46:ff:c2:
60:d4:45:0d:fc:68:25:3a:30:a2:10:c2:8a:f7:21:84:21:2d:
77:3d:61:bb:45:bf:2b:aa:69:7a:60:64:e5:60:b6:27:c4:7a:
ad:ed:d1:a4:b6:30:a7:4e:02:32:72:ef:19:8e:89:cd:0b:89:
aa:7f:24:76:16:36:a7:2c:2a:92:8d:0a:ec:63:be:50:fb:21:
f3:9c:d4:6e:12:f8:3f:17:19:23:6f:8e:31:fb:14:66:4a:5a:
65:a6:5b:04:11:37:91:9f:f8:33:e1:09:30:d0:93:a9:2e:3e:
cd:1f:00:bb:1a:7a:e9:94:96:cf:ed:eb:e2:46:20:d6:42:50:
1e:fe:34:ed:16:31:d6:ec:2a:8f:5a:02:c3:b8:d4:65:ea:8d:
1c:44:0d:b1:42:3a:e5:8f:19:68:a2:60:7e:ef:d5:17:18:bb:
f1:cc:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:46:34 2025 by rpki-client