Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d8dd6895-3b6a-3bc9-9f6b-daf8a0f07576.roa
File: d8dd6895-3b6a-3bc9-9f6b-daf8a0f07576.roa (raw, json)
Hash identifier: rTFyLThFZ3FdbVqOh6J2OZ9EucbMPrx6N4OSIfWoOdg=
Subject key identifier: FC:C0:92:CE:C5:97:96:B6:EF:AB:02:DE:57:43:41:7A:B1:C5:BB:ED
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C722AE96D906D30185C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d8dd6895-3b6a-3bc9-9f6b-daf8a0f07576.roa
Signing time: Wed 19 Feb 2025 19:45:58 +0000
ROA not before: Wed 19 Feb 2025 19:45:58 +0000
ROA not after: Tue 20 May 2025 18:45:58 +0000
asID: 62240
IP address blocks: 166.1.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:72:2a:e9:6d:90:6d:30:18:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:45:58 2025 GMT
Not After : May 20 18:45:58 2025 GMT
Subject: CN=ecb7d0b4-1710-400b-8904-fcd86c54d7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:de:b3:53:8c:a7:59:c9:ce:56:6b:b5:6c:
1f:fa:ee:40:f7:4f:bb:8c:c1:38:33:a8:bf:d3:a4:
3a:c0:33:ed:a6:3e:f4:cd:c0:44:91:00:d5:ca:b7:
40:74:c6:c8:8a:3a:08:96:79:36:83:e7:63:4d:ae:
b7:bc:1a:0a:9e:3b:3e:c1:31:8f:4a:b5:87:65:ec:
d0:31:95:bf:72:bc:62:3a:98:73:6b:06:64:8e:26:
30:93:04:54:d7:d3:fb:27:c4:5c:c6:7b:e2:6a:6f:
46:92:9e:15:1f:65:63:e3:29:b3:bb:66:5f:1c:f8:
a8:90:b1:b3:df:a9:a1:44:2c:02:a5:79:90:84:ec:
9a:32:a3:ec:ec:cf:85:f9:2c:ac:43:92:b4:bb:1f:
67:19:a5:bc:bb:1c:68:3f:b6:ee:c6:9b:4d:3f:42:
0b:b9:09:aa:2f:2b:b6:24:6e:0d:6f:18:af:77:9d:
8c:b7:bf:7d:30:57:09:88:ab:0d:00:bd:e6:2d:ef:
d4:26:48:b8:86:98:66:f7:9d:09:5c:16:14:16:ad:
fe:40:d8:fc:3e:f0:ee:e1:c0:ad:6f:f7:d2:31:2e:
e2:9d:47:7a:4c:f1:7c:29:41:0e:b2:6f:cb:bd:87:
d9:98:d1:05:03:f2:66:0d:e4:f0:2a:eb:5a:cf:04:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C0:92:CE:C5:97:96:B6:EF:AB:02:DE:57:43:41:7A:B1:C5:BB:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d8dd6895-3b6a-3bc9-9f6b-daf8a0f07576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:00:3e:53:4e:ff:3f:ca:c8:59:d7:c0:de:98:d8:24:ba:7a:
bb:f9:ee:5c:50:83:40:5a:13:86:05:f1:1e:9f:2d:65:f7:f3:
51:68:97:2d:ef:f1:b6:14:7a:20:4f:5c:72:68:34:e0:14:73:
16:cf:63:d6:1b:00:48:06:77:d5:56:a9:a3:44:f3:99:b2:d6:
95:b9:60:5f:d0:45:b5:0c:0d:d1:5d:eb:67:5c:09:e0:b5:6e:
34:71:ce:4f:92:67:c5:6e:cf:98:de:cb:72:64:20:19:89:95:
59:f3:e2:43:81:71:10:ec:a4:ce:a6:4d:95:09:64:50:74:6b:
5d:87:aa:8f:66:45:2e:89:cb:4b:42:c6:62:95:df:d2:30:29:
c7:c2:06:89:a0:d7:90:b1:49:89:8d:df:30:a7:fd:61:c0:cb:
0d:66:17:7b:48:e7:a7:50:47:23:c6:d7:b8:2d:d3:be:ce:4c:
70:b3:f8:cd:3c:b4:9d:ad:60:7a:75:cf:ef:81:9d:06:b7:6c:
67:b7:90:95:3f:b1:97:b1:2a:d2:53:f7:cd:6e:4a:b6:28:16:
fd:69:6d:cc:49:0d:1e:fb:9c:51:54:13:bf:d2:f3:a0:d8:72:
69:7d:0c:b7:6c:27:c4:54:f0:d4:39:5d:39:d5:6e:3a:ea:52:
fd:62:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:26:12 2025 by rpki-client