Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec4ca592-d0dd-3b17-ae76-983f48bb0ddb.roa
File: ec4ca592-d0dd-3b17-ae76-983f48bb0ddb.roa (raw, json)
Hash identifier: Zpnx28MtRtxBEefGkJ+/aQnPZsjPebcBQwi/9/XszPo=
Subject key identifier: D4:A7:3D:E2:82:A1:36:3A:23:83:95:94:F9:AC:4D:88:E0:80:EA:4B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858491246F0D5AD2797B2E1A3C580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec4ca592-d0dd-3b17-ae76-983f48bb0ddb.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 19437
IP address blocks: 166.1.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f0:d5:ad:27:97:b2:e1:a3:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a4297f41-2679-4876-b08c-181a16bd390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:ac:fa:79:37:bf:45:d9:fa:09:68:c9:03:
1a:1e:81:ff:67:37:b2:32:d5:0c:6e:42:0f:2b:ec:
25:2b:88:ec:e1:cd:0e:4e:02:aa:f8:60:07:21:f1:
ce:9e:a3:c0:e7:6a:13:65:db:cf:50:94:38:b5:49:
35:ef:88:01:ff:53:3a:9c:45:d4:98:4b:f9:db:ad:
22:d1:a2:30:d3:81:9d:af:d2:84:7e:7a:22:3a:0d:
fb:70:52:4a:53:64:78:18:b2:95:ce:66:cc:dd:d7:
ab:30:d1:02:ce:7b:d2:4f:f7:87:ef:08:15:c0:55:
ac:5f:54:20:e6:41:a2:61:ac:15:4d:51:14:1f:fe:
e9:ca:e7:bb:79:53:15:e9:36:a7:7d:9a:95:6c:aa:
9a:71:bc:c6:24:3c:01:8b:44:c6:1d:42:11:ea:98:
20:e5:13:6f:ae:c8:24:31:4b:6d:5e:b0:6c:c9:0f:
ca:ca:7c:bd:0e:81:e3:21:50:40:f4:d3:99:8a:0c:
ec:4f:78:76:86:d3:bc:a9:77:ae:0e:d9:4e:1a:7d:
6c:8f:37:92:be:6b:34:e9:c7:6f:56:2c:0f:84:39:
35:b8:0d:7f:23:c2:30:26:fc:16:80:b3:2c:9a:a4:
a2:42:ee:e0:c8:13:8b:84:95:68:d8:ec:05:99:2b:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A7:3D:E2:82:A1:36:3A:23:83:95:94:F9:AC:4D:88:E0:80:EA:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec4ca592-d0dd-3b17-ae76-983f48bb0ddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:77:2e:a8:83:9e:d9:1f:02:c7:25:2f:b4:65:94:12:c2:6c:
41:48:35:5c:d5:9e:dd:41:34:74:2a:ba:4f:52:4b:17:92:52:
4f:da:b7:60:e2:3b:2f:8f:42:a6:5f:a7:d7:08:97:92:f2:ee:
e3:a8:30:f6:f4:cc:2b:07:40:ee:a5:f5:71:3b:9f:47:90:3f:
69:41:f5:55:67:df:0d:63:4d:d1:43:de:af:4b:c6:c5:44:38:
9e:75:bd:99:9f:d3:64:4d:75:26:33:a9:3b:2c:5f:ab:e6:bc:
e8:1f:2d:61:f8:38:9f:bc:93:65:83:93:4d:84:fe:79:58:eb:
e5:27:fc:ac:2d:a1:e3:7d:4e:5d:66:98:cd:71:8a:46:bf:e9:
29:12:77:c7:73:4c:d4:9e:59:53:a1:59:3c:2b:5d:3f:22:6f:
f2:5d:c5:32:03:da:ce:f1:9c:b6:1f:5e:46:8e:25:5a:f6:4f:
5f:2f:b2:f2:b4:21:39:c9:25:eb:1c:80:49:3f:db:49:ba:76:
79:b0:3d:05:ee:23:75:a8:99:88:7a:d5:ba:aa:e2:ce:91:da:
d2:88:ed:b9:24:0b:65:db:75:ad:f4:84:b6:63:39:62:b0:f2:
33:b1:00:47:9b:7b:83:76:ad:cc:f8:9f:0e:19:8c:84:c9:7d:
88:a8:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:40 2025 by rpki-client