Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
File: f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa (raw, json)
Hash identifier: 8EjkqjrQdC2LIGYO4sIyjUPmaVAcSBy/nhcgPHzgE5U=
Subject key identifier: EE:D0:A8:37:A9:64:93:DA:39:53:3F:D3:9B:CE:D8:8E:D9:B5:8E:3A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F22C255839F43BDE4600DB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.1.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:25:58:39:f4:3b:de:46:00:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=3c09f2cf-bb56-44a8-a2df-2037d3d5baf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:d1:33:9d:91:2a:56:2e:54:d3:a9:fa:06:
76:a4:d6:f1:c3:ed:3f:7c:0b:46:f0:b2:a4:44:7d:
0b:03:dc:fb:6b:21:42:3d:ae:e1:72:50:60:8f:ab:
0f:9d:d6:ec:4d:e7:d8:54:5d:b7:18:29:70:e6:f0:
a6:cc:07:fb:ae:b3:71:1a:e3:74:5f:50:31:17:22:
87:98:55:71:79:c4:a3:5b:94:95:8d:ea:f3:15:d5:
45:68:08:0b:61:a6:c2:b9:c8:ad:5c:6e:b1:92:56:
c2:8d:6e:0c:25:78:7c:58:ca:38:0f:c2:f6:5c:93:
9c:b6:7d:5e:9d:f1:f7:d1:a3:7d:29:b3:35:bb:1f:
8b:6c:ee:c3:2c:0e:14:7c:8c:73:35:72:fd:2d:a4:
5e:cf:c5:45:4f:f7:63:4e:8d:a5:56:79:46:ef:39:
42:c8:03:91:4a:52:a5:44:08:dd:10:b2:ea:02:a4:
69:71:83:04:c8:ff:11:b6:07:37:01:fb:d1:b6:8e:
ae:05:be:8b:45:f4:e8:ee:f8:fe:dd:c5:fc:de:3c:
1d:28:06:e8:9b:1f:56:4c:59:e4:6f:c5:da:49:b1:
a0:4a:1b:83:91:0e:50:88:87:c8:f5:ce:69:9d:8e:
f9:8e:a4:c5:58:2a:f6:10:f6:03:52:71:45:1a:06:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:A8:37:A9:64:93:DA:39:53:3F:D3:9B:CE:D8:8E:D9:B5:8E:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:fa:b1:9a:07:b9:50:5b:29:26:62:20:43:3d:c5:58:d1:67:
d6:13:1e:54:2e:97:c1:29:d4:cb:40:23:6b:28:ad:1f:34:62:
17:6e:ce:cd:17:ac:51:b5:5f:ad:c6:b4:9c:14:1d:76:7f:37:
e1:02:44:1b:04:43:47:ab:c6:98:5d:b4:73:c9:bc:9a:f0:ee:
a8:90:df:59:42:8e:f3:12:51:b9:5b:f8:f4:98:81:b5:26:61:
dc:3a:0d:cf:7c:ce:86:29:25:a9:1b:3d:7a:d5:57:a0:06:70:
a6:6d:ab:16:ff:ca:7e:e0:c7:dd:e1:14:e0:65:72:ca:68:39:
bc:51:f3:95:43:6c:79:89:8f:e3:f1:22:77:0f:de:16:93:55:
d5:9d:a7:09:43:5b:ae:b0:22:b4:79:83:67:78:36:14:f7:eb:
76:d6:ec:10:3a:3b:e6:e4:22:27:a6:69:ee:56:fe:44:17:8a:
53:06:df:58:72:df:31:80:55:70:f6:39:cc:1a:7b:b0:d3:fc:
51:01:8a:b1:b8:e8:cf:e8:df:94:59:ba:76:c7:74:68:87:45:
37:1e:98:00:dd:87:e8:cb:0b:40:7a:2d:70:37:74:39:fe:0d:
b8:b8:c5:1b:3d:a1:58:f2:04:f8:01:dd:56:d5:b7:93:3f:8b:
bb:87:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:58 2025 by rpki-client