Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f240dd2c-d132-32a4-b20b-f202731983b0.roa
File: f240dd2c-d132-32a4-b20b-f202731983b0.roa (raw, json)
Hash identifier: 6syR3fyW3qU3Z8mBKtl6qIW6aE6qmB+QXc8OCUsJ7iw=
Subject key identifier: 26:E9:60:16:03:01:E3:D4:97:9F:30:05:A1:43:FF:9D:FF:68:70:C5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858491246C631EDCE3C8FE716ACC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f240dd2c-d132-32a4-b20b-f202731983b0.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 61317
IP address blocks: 108.165.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c6:31:ed:ce:3c:8f:e7:16:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=cd12754c-76d4-4dd1-acd3-36f140fecd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:ef:59:3b:1d:79:32:97:4d:b4:6e:62:64:
11:da:80:6e:c7:93:64:8d:f3:01:14:43:ec:87:c1:
c1:b1:4b:a1:41:6d:55:a3:a6:c9:b7:34:50:22:2a:
5a:ce:4c:9e:af:68:6b:f9:93:1a:1f:a6:51:17:69:
2a:93:73:ef:39:c5:4f:13:86:fb:6b:8e:a7:32:2c:
71:47:dd:00:fd:96:4b:d8:ea:ac:81:9e:a9:06:ee:
1d:d9:78:4c:16:18:d7:9e:a8:09:ff:00:b2:b3:ca:
2e:9b:61:40:57:19:53:6c:4c:87:10:60:7c:c1:c1:
c1:a6:3e:4a:6d:7d:a0:1b:75:f9:0b:db:00:91:27:
a0:ac:7d:05:20:d3:0a:45:0d:b9:dc:e6:8e:c2:b1:
54:3d:07:22:55:77:19:6f:39:37:f2:d6:0a:e0:c5:
7d:bb:0c:72:a8:a1:6c:b0:cc:fa:f2:24:5e:95:11:
80:65:66:2b:fb:05:d9:a3:e2:60:de:a9:39:10:05:
2d:b9:88:97:4f:74:e4:ba:e1:56:53:d1:47:d5:41:
88:e8:0e:8e:fe:6e:77:4f:d3:ac:1a:70:de:47:5f:
13:83:12:65:2a:ee:7c:56:11:11:f2:0e:13:9c:44:
17:d5:fb:12:f0:63:dd:a0:c4:9c:71:36:03:fc:8b:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E9:60:16:03:01:E3:D4:97:9F:30:05:A1:43:FF:9D:FF:68:70:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f240dd2c-d132-32a4-b20b-f202731983b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:98:8a:f0:41:14:19:5f:81:93:48:54:61:fd:65:2d:31:68:
69:b7:03:27:7a:14:b1:97:a9:4e:8b:01:0b:7a:de:8c:cf:3e:
9f:3b:f0:dd:f6:b8:3f:24:6d:5b:51:f7:11:d0:92:2d:17:c7:
fb:fe:62:16:9a:5a:c2:0d:ea:e2:89:e9:aa:0c:da:4b:fa:a2:
53:88:b3:00:0e:6c:76:c9:25:10:5d:b3:74:bd:dc:a0:36:60:
39:5a:e0:bc:2e:f4:2e:d0:5c:be:71:40:ab:1b:c1:1e:03:31:
ba:08:25:b1:cb:e3:ae:7a:ff:6a:77:6b:c0:f6:4f:9b:75:91:
e8:b0:c6:64:e7:d0:7d:49:e7:43:12:6b:cb:19:61:c9:24:63:
50:02:66:74:3b:dc:c1:6f:3e:3b:7e:dd:5b:84:d5:d7:3f:0a:
a7:49:d9:77:c0:f3:24:33:ce:b5:b5:47:72:29:e1:59:a2:79:
6a:73:16:e6:03:f7:53:de:b4:d9:2a:cd:03:98:c0:87:40:a9:
f5:20:50:8f:43:92:d7:1f:7c:7c:88:62:82:fd:13:69:4e:de:
e3:6e:cf:27:8f:1a:43:25:16:07:fb:67:a8:b5:0f:0d:8e:ef:
b1:26:56:ba:a1:be:1d:ed:41:7d:c9:be:b4:89:9b:00:d0:3f:
c1:29:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:31:40 2025 by rpki-client