Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f9ebf773-fc6a-3ed3-8ee3-11b33eca2638.roa
File: f9ebf773-fc6a-3ed3-8ee3-11b33eca2638.roa (raw, json)
Hash identifier: K7Tz31Zc2OnB9ZVc9zQLCxTpovcVGvDdJ/l4UU4hO0k=
Subject key identifier: 4E:7F:6A:2F:70:E1:CC:C8:76:4E:14:A8:57:76:B7:AD:DE:F2:7D:E7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A996304C01930E9CA2FB2000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f9ebf773-fc6a-3ed3-8ee3-11b33eca2638.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 21859
IP address blocks: 108.165.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:30:4c:01:93:0e:9c:a2:fb:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=2ffb7e8b-cdca-4416-9b91-0ad073cb3756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:66:ab:23:65:86:d8:81:1d:36:a9:bc:79:
90:da:82:9f:31:ad:f8:78:3e:25:b4:5e:95:cf:0d:
a5:b0:ed:01:54:6a:8f:8c:1d:43:b3:d9:a2:08:80:
9c:a0:f7:a0:76:cb:01:a1:ae:e0:34:5f:53:24:a8:
3a:d4:f8:72:9d:d7:2f:4d:57:a2:e9:ad:d1:0b:fd:
e5:ac:8d:c3:d8:11:28:00:ae:a8:32:0d:53:7b:ee:
90:3c:76:bf:d8:5a:b0:94:59:08:40:cc:0a:db:51:
ec:28:1e:33:3c:21:a1:34:7a:dc:3a:56:67:70:68:
ec:30:71:3d:d7:f6:a7:2d:08:71:9e:a0:3a:ef:d8:
f4:5d:a4:e4:ea:6c:63:05:34:04:13:0d:d2:f5:92:
79:f2:01:33:4d:7f:0a:cc:6a:70:f3:49:01:2b:2f:
b6:4d:ea:d8:5e:18:1d:f8:69:3f:36:37:a8:79:43:
40:75:36:92:cb:32:cb:4d:a3:9a:d3:34:e1:19:f7:
b9:1f:e6:0d:4a:82:7a:9b:02:2e:82:11:f7:dc:23:
80:2b:67:d5:c2:1f:e9:bd:d4:9f:55:39:2d:9c:f0:
1c:fd:6b:ed:81:70:18:a8:09:8e:8b:9a:bd:27:9a:
2f:ac:cf:4c:75:d8:a6:97:38:7e:27:26:f5:89:61:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:6A:2F:70:E1:CC:C8:76:4E:14:A8:57:76:B7:AD:DE:F2:7D:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f9ebf773-fc6a-3ed3-8ee3-11b33eca2638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:bd:b4:13:54:18:ab:23:a9:57:ce:78:23:01:b0:c6:b8:7a:
d8:90:0b:22:da:ef:50:47:da:8e:27:a1:03:97:b2:9f:f3:5c:
71:05:c4:ce:ac:09:4b:2d:b8:1b:d6:59:33:77:3c:d3:ae:45:
ed:6c:1f:1d:44:6e:bd:47:d1:35:d6:2e:aa:31:28:54:c8:c8:
d8:82:72:5b:77:12:a8:ec:13:07:37:c2:4d:91:cd:74:59:17:
4b:d8:c1:66:af:49:09:84:83:46:5d:85:3c:3d:e0:95:14:cc:
25:2a:c3:83:5c:d2:f0:7a:d2:c3:c5:a6:eb:87:8f:66:8f:94:
5f:d7:ab:e7:4c:17:6b:ac:c9:2b:77:7f:33:01:f7:e2:08:60:
3c:e5:70:2e:8f:ca:10:5a:3f:da:1d:79:c2:4a:90:34:1c:d9:
2a:f3:e3:ba:bb:ac:39:e7:d6:ba:d5:0a:51:fa:7d:ac:d6:09:
ec:d0:00:df:cb:7b:93:01:71:13:5d:10:fe:91:1a:62:ba:c6:
73:a7:9a:c9:6a:b6:2f:f3:8b:b8:3c:03:3c:fd:33:21:2a:6b:
db:fe:e6:e2:17:1f:dc:62:60:31:5a:8b:b0:b0:d1:bb:a3:4f:
b8:27:cc:16:cf:de:3e:9a:b4:f1:ae:8a:c6:9e:e8:86:ba:70:
c9:52:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:47:42 2025 by rpki-client