Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fef22114-55a3-3526-bbd0-af14b93f50e7.roa
File: fef22114-55a3-3526-bbd0-af14b93f50e7.roa (raw, json)
Hash identifier: RZTqnsJUUXp6VOHNEJxu5QyqJPWZdppADdrYx9PXI/k=
Subject key identifier: 1A:6D:0D:78:5C:D7:0D:F3:1C:67:A7:C7:58:AC:41:C3:21:99:CA:1C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858487CEB2D2877630C4678D41C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fef22114-55a3-3526-bbd0-af14b93f50e7.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 60721
IP address blocks: 108.165.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2d:28:77:63:0c:46:78:d4:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=6a7a2aa7-df31-4952-ac9b-947e91557818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:58:be:22:60:94:7d:9d:ab:4d:3d:e3:c6:
f3:99:64:8b:4a:b7:74:c9:c7:ed:2e:af:5c:a4:4c:
14:2d:49:c4:a1:fd:03:be:fe:e6:7a:56:a2:48:b5:
ef:c6:db:62:26:73:54:1c:b9:cd:5d:d4:3a:d7:f2:
2c:e2:30:4f:16:d9:38:03:87:a8:ee:57:6d:55:f7:
0c:69:d2:03:75:13:a3:f4:7c:29:44:f1:37:49:b0:
9c:0e:7b:72:c9:0e:70:57:ce:9f:f9:42:76:71:f9:
72:c5:48:d2:8f:10:cb:a5:05:1f:a5:1a:5e:00:a7:
6d:98:d2:04:da:ec:5d:89:85:7b:35:8a:6c:51:61:
69:07:fc:91:d2:9c:9c:82:5b:c4:93:46:b4:bd:8e:
b5:72:37:87:25:7e:89:28:d8:3b:96:44:1f:26:cf:
ec:84:2d:3d:03:44:ec:61:98:e7:7d:aa:4a:aa:fe:
39:67:f4:c4:0f:06:b1:ce:9f:4f:cc:69:5e:0c:99:
ab:9d:d2:03:2a:7a:92:0e:05:50:27:84:66:f7:2e:
05:9a:df:62:b0:70:61:66:4d:7e:41:7f:38:69:ad:
07:26:72:b1:56:81:d1:ad:a7:fd:20:e5:b3:31:27:
bb:10:14:ea:61:86:8a:7a:f6:05:dc:cf:02:2e:12:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6D:0D:78:5C:D7:0D:F3:1C:67:A7:C7:58:AC:41:C3:21:99:CA:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fef22114-55a3-3526-bbd0-af14b93f50e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:38:0f:d1:2b:75:db:27:18:10:81:4a:65:0c:27:83:6c:a9:
92:b6:4a:4f:11:f5:ec:b0:4f:ea:27:ae:16:d1:e5:48:c2:a6:
24:df:31:ab:20:87:39:bb:7d:a4:fa:c6:ef:6d:40:c3:ae:8f:
26:4c:2e:26:6d:6d:8c:6d:71:c0:5a:9e:1c:1f:21:5f:98:d2:
e3:79:79:d4:bb:00:2c:5b:ea:11:86:a4:5b:8d:3b:c3:60:57:
db:3e:dc:60:9f:d7:f8:dd:a3:d7:85:0f:92:c7:d5:3a:94:06:
4e:dc:58:9a:0e:af:32:6e:46:2c:6f:35:25:d2:d1:52:a0:86:
af:28:72:f2:30:cf:0b:5f:35:2c:34:7d:3f:8f:75:62:a8:6d:
1b:18:a4:5c:0f:00:48:25:c6:4c:a1:2d:6c:26:57:c3:15:be:
12:43:65:6d:e9:dd:68:70:e6:28:8c:d1:cd:82:e2:53:28:2f:
1b:1a:3b:11:f7:c1:bf:ab:93:ed:06:68:44:8f:db:07:fe:25:
3b:f3:a4:7f:30:f8:a6:d7:9a:50:17:47:03:b9:bb:5a:30:2b:
ea:ad:bb:2e:9b:4c:a9:2d:a6:44:39:23:f1:e9:90:4c:e9:f5:
b4:ef:73:65:2f:50:44:a7:b4:e1:73:b9:a4:fb:fa:81:2c:9b:
ea:01:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:32 2025 by rpki-client