Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef9d716f-a3ae-395a-886b-d0c5a75d2d8a.roa
File: ef9d716f-a3ae-395a-886b-d0c5a75d2d8a.roa (raw, json)
Hash identifier: zeqD8ZvBQkn754ifsXCSfft2/rnt99cKLMhFhealIPg=
Subject key identifier: A2:F2:90:95:D8:16:B5:0C:B1:4E:3B:09:1C:22:35:93:6C:1B:E5:72
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584957D0BC89ED6CFBFAA501F700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef9d716f-a3ae-395a-886b-d0c5a75d2d8a.roa
Signing time: Fri 28 Mar 2025 23:49:44 +0000
ROA not before: Fri 28 Mar 2025 23:49:44 +0000
ROA not after: Thu 26 Jun 2025 23:49:44 +0000
asID: 401152
IP address blocks: 108.165.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:d0:bc:89:ed:6c:fb:fa:a5:01:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 28 23:49:44 2025 GMT
Not After : Jun 26 23:49:44 2025 GMT
Subject: CN=708bcb71-e627-4a74-83b6-508c1156dc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:39:7c:79:fb:8d:09:a2:9d:e5:9f:3b:a8:
59:10:d8:b8:8d:ec:ba:0c:da:0d:a3:91:5a:ee:b2:
49:20:86:b5:2c:db:06:72:85:f3:cb:2d:70:c0:e8:
69:16:86:f3:ba:91:49:0d:2e:a1:38:76:4f:d0:19:
09:a3:55:c4:4c:0b:ab:36:a0:3b:88:4f:d3:29:f4:
1d:d2:22:67:71:7e:56:89:eb:72:76:a4:75:9f:38:
f7:b0:ab:98:f6:69:d1:bd:58:1e:55:1a:ff:8f:0a:
8f:b0:ef:44:9b:5c:4f:78:a7:68:89:bd:84:2e:4c:
44:70:49:a0:f9:94:82:6c:71:d2:ae:58:1d:64:91:
11:a0:98:11:f6:94:54:e3:e6:57:65:18:37:7c:7c:
ad:7a:1f:7f:c8:4e:ac:9f:c1:1b:da:1f:59:ad:3a:
1e:42:1f:09:0c:c9:a7:f6:fc:10:be:28:05:24:39:
28:81:9e:68:0e:cd:18:91:91:a1:47:c7:03:c9:39:
c7:64:24:2b:0e:75:b1:e3:10:ba:48:de:3d:33:52:
24:db:f9:a1:1b:c5:17:68:cd:1d:f7:42:f0:d5:c9:
66:51:e0:9c:c1:a1:95:74:55:c7:06:7f:c7:b8:04:
34:bd:b8:e6:92:a0:6e:4b:e7:9d:a3:00:05:89:1c:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F2:90:95:D8:16:B5:0C:B1:4E:3B:09:1C:22:35:93:6C:1B:E5:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef9d716f-a3ae-395a-886b-d0c5a75d2d8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:ea:74:aa:1b:a5:8e:68:d2:df:39:32:ca:eb:78:12:0e:37:
87:3e:54:22:7f:bb:ad:5c:d2:93:9b:02:79:1d:52:f9:bd:6d:
4c:d2:ec:42:4f:ba:03:ca:2e:ad:ec:56:1c:23:21:4d:5b:e3:
43:da:a8:7c:5b:97:63:fc:9d:09:09:b0:7c:9e:43:96:b0:b4:
46:77:6c:0a:0e:f9:7b:d1:25:a6:32:5d:1b:87:52:72:2d:e7:
e8:ad:b5:06:ff:13:43:f1:2d:11:81:2c:ef:40:3c:90:a7:d4:
05:e8:eb:ad:40:a9:f0:87:b2:4c:b1:3b:57:4e:fc:01:07:3a:
5e:be:c0:3f:7f:f3:19:97:6b:6b:90:5d:ea:2a:bf:41:47:5e:
76:92:db:b9:bd:e5:3a:64:f8:55:75:34:f1:45:15:e6:43:35:
8d:f7:3c:b8:6a:db:d3:41:ef:17:a0:14:94:32:16:16:06:7a:
2e:b9:8a:a6:ef:5d:3e:42:96:f9:60:c8:62:c4:00:20:d7:5b:
38:13:8c:d0:31:2f:db:82:f5:c2:32:2e:68:7a:f7:e7:4d:47:
97:68:5e:b0:4f:38:de:8c:35:e9:6f:4d:63:8e:c8:41:12:74:
6d:00:13:b9:58:79:77:7b:0e:cb:8c:b7:ca:3f:8d:1e:1a:d4:
83:a8:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:44:53 2025 by rpki-client