Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddec24e6-b864-34be-bc11-a3c7e87d2ba9.roa
File: ddec24e6-b864-34be-bc11-a3c7e87d2ba9.roa (raw, json)
Hash identifier: v9+KlUzfNNGldTuQmeMwwRfCKUSgJprAh9C6V3VcE0U=
Subject key identifier: 47:60:91:EB:E7:61:80:C3:B7:72:82:B1:3A:0B:3C:CB:4A:70:E9:C4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C58236D1C2C8FF0598CD1D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddec24e6-b864-34be-bc11-a3c7e87d2ba9.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.1.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:36:d1:c2:c8:ff:05:98:cd:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c11c022c-ade7-489a-ae1c-71e5d86318ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:37:5d:e1:aa:4e:56:20:f9:e4:d3:f2:f5:
49:a9:69:fc:59:24:20:61:d4:e2:11:be:9f:23:1c:
50:65:43:9b:7a:41:8d:8d:0e:39:b9:a3:fb:60:80:
bd:d8:61:be:1c:9f:9e:08:fd:a3:70:a7:c7:02:f9:
b8:0e:ce:0b:e0:88:af:98:cb:f6:40:14:1f:f6:0c:
03:19:96:b1:db:0d:c1:db:cc:16:a1:b9:aa:d9:3d:
44:0a:97:02:84:58:5b:95:01:0d:97:34:f3:4e:c2:
d5:d3:b5:14:8b:5d:fa:0d:0f:21:9d:27:86:34:65:
c9:c8:c1:43:9e:4a:26:bd:88:f9:6f:e6:a8:49:37:
4b:78:13:4b:38:10:a0:08:cd:72:8a:10:90:af:bd:
2e:3d:cc:b5:be:ea:c4:e3:e7:ec:36:fc:b6:cc:5e:
8f:d5:12:51:8e:d1:8c:98:62:71:56:82:27:27:34:
3f:45:ed:d7:10:84:9a:17:96:f3:49:69:78:d0:9b:
e3:6f:c2:e4:c4:30:ed:a2:61:5e:22:85:c1:bf:17:
1d:b8:70:c3:c4:0c:ab:af:d2:ff:a2:b2:55:37:61:
d2:5a:26:20:4f:2e:d1:59:e1:c9:43:ed:9d:ea:e6:
93:89:75:98:e3:22:40:ba:d9:dd:b2:53:eb:4e:66:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:91:EB:E7:61:80:C3:B7:72:82:B1:3A:0B:3C:CB:4A:70:E9:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddec24e6-b864-34be-bc11-a3c7e87d2ba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:26:9c:89:d5:09:59:1d:3c:8d:69:bb:2e:76:61:a2:10:af:
e0:8c:99:86:dd:bd:3f:49:41:2a:15:c6:67:26:23:49:02:dd:
15:60:f7:9a:d2:39:4d:f6:d0:de:0b:98:74:b4:ef:75:9f:01:
6a:41:3c:60:ba:76:15:fb:49:8d:bc:85:f0:7e:00:c3:51:39:
04:68:04:40:db:aa:cc:3b:df:16:12:8e:cd:d3:37:4e:ff:4b:
fd:11:11:64:46:b5:37:85:16:d6:b1:cb:ec:f2:2f:64:17:b6:
d0:ca:49:b7:87:eb:fc:0c:cb:b2:e3:17:e1:10:96:63:bc:2f:
06:c3:af:f5:22:0b:d2:58:9e:d0:76:d6:81:3f:af:39:c4:60:
8d:1c:23:94:0f:28:4f:9c:fc:c4:32:ec:f6:6c:99:92:8c:57:
d7:50:82:80:89:fb:33:21:95:65:1d:4b:27:30:0e:5c:65:32:
b7:ab:0e:3a:36:72:41:29:ff:14:ce:62:66:f5:d8:51:cc:3b:
6c:1f:38:e4:14:a9:79:29:d4:7d:e7:3b:6b:03:41:42:cd:c2:
e5:8a:f0:35:c1:12:17:35:70:ea:c3:dd:f8:8f:70:79:8a:9c:
30:b1:08:8f:37:a9:73:fc:1f:76:a3:2d:70:e3:f6:11:1b:1f:
8a:68:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:04:55 2025 by rpki-client