Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d8ee4ce0-f9aa-3b89-bca9-d1c948645d03.roa
File: d8ee4ce0-f9aa-3b89-bca9-d1c948645d03.roa (raw, json)
Hash identifier: 5Htd0EELpfWqAMcd1dGnxq6LwoltkR6zi1tMpakmMXQ=
Subject key identifier: CD:0A:93:4C:F5:AF:C3:46:E6:63:56:5D:7B:61:CC:08:3C:A1:B1:41
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848E59BB47F72DA19F6BC2303C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d8ee4ce0-f9aa-3b89-bca9-d1c948645d03.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 61112
IP address blocks: 166.0.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:b4:7f:72:da:19:f6:bc:23:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=78e0f22f-bce3-45a0-ae54-ce4c7d8319b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:69:a2:7f:20:f2:a7:8e:1b:a2:09:49:1c:
ea:5f:e7:f6:e4:ec:6b:3b:dc:92:81:cf:0b:7f:44:
95:e9:b1:53:39:4b:48:05:93:e9:7f:3b:5b:0c:42:
59:f9:29:86:62:fa:18:cc:be:4a:3f:e3:5a:b9:bf:
41:d9:dd:94:6e:29:20:d9:0f:9b:67:bf:06:68:43:
00:44:e5:d1:9c:7a:9c:43:d1:65:82:ba:e4:fb:1a:
d3:fe:74:18:2a:50:f8:74:3f:b1:60:f1:d4:b2:b9:
f0:b4:cb:97:9f:95:fe:e9:b8:23:9e:b4:9c:12:d1:
c8:f5:d4:c7:89:e4:72:08:d8:bd:cc:d1:51:ed:f1:
ed:b4:a4:61:e7:49:02:5b:c6:3a:74:5d:59:a5:bd:
0c:6a:10:bf:39:37:0f:34:ee:ef:87:39:4f:76:c6:
49:0d:8b:fe:3d:36:6f:41:03:96:55:a2:e8:1e:52:
e0:19:83:2d:d0:21:1d:d5:9b:a7:cc:8a:8a:01:2a:
40:2b:15:2b:f2:a4:1a:93:77:38:01:58:26:06:d5:
16:12:da:56:fe:af:a8:54:f6:81:f9:75:c3:37:45:
30:e6:ff:bd:b2:82:04:09:ee:6e:ec:ba:64:f8:d9:
a2:7f:7c:83:6a:51:02:eb:fa:5a:67:93:34:a3:b1:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0A:93:4C:F5:AF:C3:46:E6:63:56:5D:7B:61:CC:08:3C:A1:B1:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d8ee4ce0-f9aa-3b89-bca9-d1c948645d03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:cc:b4:7d:c1:26:c6:aa:a9:b9:90:fb:a6:d1:b4:f2:32:43:
24:ce:ae:06:0a:c0:d3:06:97:04:1a:73:30:fd:21:5b:84:b9:
d8:f5:c2:94:27:7d:c2:80:17:0f:a4:90:6a:4f:4e:9a:a6:69:
c8:24:25:79:3f:06:5d:62:ec:1f:30:c6:55:5e:1d:59:f6:3b:
c4:81:03:fe:92:64:ea:99:6a:91:17:ff:a6:5f:5e:a7:07:03:
62:5a:7a:fc:89:fb:4f:fb:41:9d:f9:db:c3:28:f5:de:b7:0f:
87:9c:ec:73:16:2e:79:49:24:10:e7:a0:9a:45:fd:0f:2b:62:
4a:34:c4:3c:86:6a:27:cb:03:23:b7:c6:50:70:19:69:a3:2b:
3f:ac:2c:c9:a0:01:bc:09:16:48:08:23:65:f2:b4:8b:2b:e6:
73:8d:fa:06:04:6c:f8:00:37:99:87:2d:f7:7e:93:e4:a6:99:
88:f6:ec:e7:b3:b4:40:1b:37:49:c2:9a:ed:aa:59:f6:33:65:
aa:df:82:4f:ed:55:ac:7c:6a:fb:62:48:b4:f7:d5:5c:09:40:
b5:6e:fa:a8:2a:e1:7f:3d:ff:a9:7e:b6:ae:b7:7c:cd:76:e8:
38:ce:33:36:d8:ec:71:e8:3e:b0:b5:9b:ac:e8:56:20:b9:f3:
b9:6c:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:33 2025 by rpki-client