Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fad3f5b0-50a0-3f98-97fa-15114e46f4c0.roa
File: fad3f5b0-50a0-3f98-97fa-15114e46f4c0.roa (raw, json)
Hash identifier: Y5x972+lIW4qOotXARJDeGEo6gR6EDdK83h+Jg00Fj0=
Subject key identifier: 19:B6:48:82:1A:A1:12:70:BB:23:B6:CE:AC:05:B1:12:3F:16:8E:9A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848FDE6F767003BBE3AD5F7D600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fad3f5b0-50a0-3f98-97fa-15114e46f4c0.roa
Signing time: Mon 24 Feb 2025 18:51:46 +0000
ROA not before: Mon 24 Feb 2025 18:51:46 +0000
ROA not after: Sun 25 May 2025 17:51:46 +0000
asID: 401152
IP address blocks: 166.0.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:e6:f7:67:00:3b:be:3a:d5:f7:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 24 18:51:46 2025 GMT
Not After : May 25 17:51:46 2025 GMT
Subject: CN=623df53e-9025-4bd4-95ac-eb7404eb984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:73:0f:a5:55:f5:0a:97:71:d5:78:ef:da:
85:ca:ad:74:5d:85:ac:2d:8c:03:72:2d:62:13:c7:
1a:c6:f1:1a:22:83:e6:5c:0b:32:c0:db:09:32:fe:
21:86:43:e2:31:34:10:39:d9:9b:e6:55:46:e5:dd:
1a:62:85:e0:5a:e1:3b:f8:f5:7c:96:03:ae:67:b0:
b7:2f:7f:0e:93:48:d2:de:3b:a0:d9:34:4f:ef:91:
86:ea:3d:02:56:7e:54:b8:b5:2f:17:51:3b:73:ed:
69:17:5c:3b:1a:65:3c:95:fb:ca:70:6c:dd:70:6d:
35:75:3a:2b:02:f6:b9:1f:13:b1:75:9f:16:0e:93:
72:3c:c4:25:d4:f6:50:82:01:45:c3:82:6a:5f:85:
07:13:22:1c:ab:25:67:d7:8d:8a:92:72:b1:d2:dc:
9e:f5:d7:64:ee:05:1d:4e:77:10:61:58:0c:ef:8a:
08:02:25:c2:b5:8e:6a:35:36:87:72:4e:15:72:7c:
3f:8d:db:0b:17:73:20:72:d6:8a:c2:13:55:9f:e7:
fb:9e:4b:7f:5a:95:ca:22:43:a7:4b:de:2e:39:69:
fa:2b:0d:9a:7a:a0:02:69:13:12:e7:46:10:86:2f:
8b:c0:b7:62:29:73:1f:83:21:41:ab:d1:d0:5b:2e:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:48:82:1A:A1:12:70:BB:23:B6:CE:AC:05:B1:12:3F:16:8E:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fad3f5b0-50a0-3f98-97fa-15114e46f4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:41:b3:c6:a4:44:f2:a2:13:fa:d8:66:fb:34:ab:40:bb:9e:
35:ba:e3:01:95:b5:81:5a:57:62:f9:99:d9:89:ac:f6:a2:34:
d9:21:5c:a4:cc:58:ad:30:c6:20:5f:84:54:2e:b7:6b:27:1c:
37:f8:8d:37:19:d9:76:15:68:26:cf:4b:89:68:d8:25:1e:60:
e7:68:43:c8:c4:42:fa:7a:e6:d6:a8:99:aa:a8:d6:07:a4:7d:
35:36:11:43:08:4e:a8:71:60:71:c0:e4:ca:ba:bc:f0:41:64:
b4:c7:f3:02:90:48:eb:12:d8:b2:63:31:a5:63:af:29:16:90:
e8:92:d0:c3:51:74:3a:24:dc:00:70:39:71:6d:d7:14:66:df:
30:0a:83:5d:24:1a:c3:d2:ac:4e:2c:ae:68:a4:34:d5:23:22:
1a:a1:c0:1d:7b:3c:f6:13:09:97:1c:d9:8b:d4:31:43:42:cf:
96:4c:de:08:90:ce:87:30:49:cb:3a:63:24:59:3d:94:1b:d2:
b4:36:95:79:85:3e:f0:29:05:e9:04:2b:04:91:48:9d:3c:eb:
e7:5a:77:64:d1:5c:47:e9:aa:35:29:56:a1:38:81:86:03:5f:
f6:d6:6a:88:3e:37:d7:70:01:f9:82:2a:65:b1:76:50:5d:ea:
02:9f:7e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:19 2025 by rpki-client