Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb253aeb-5d57-3eaa-9bb0-c7593533db70.roa
File: bb253aeb-5d57-3eaa-9bb0-c7593533db70.roa (raw, json)
Hash identifier: R1+qD4O7K8b9O05cogjasaHdNIbgsGQgqcDeSeg1B9Q=
Subject key identifier: D8:9A:2F:72:E7:60:0F:24:73:3E:B3:20:D7:24:E6:86:F1:00:25:97
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848D0ABBEBED9CE20714932C500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb253aeb-5d57-3eaa-9bb0-c7593533db70.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 204957
IP address blocks: 166.88.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:be:be:d9:ce:20:71:49:32:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=71302ffb-b737-45f3-8fcd-19e795db46a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:7a:9e:af:86:06:1c:8e:63:50:66:10:df:
00:54:8a:4f:9f:f7:77:e5:55:41:29:09:7e:cb:c4:
eb:58:2a:e3:92:87:3e:59:98:27:35:fb:cc:5d:cc:
43:ad:ec:2e:d0:6e:95:94:86:f5:be:e9:6f:e6:db:
07:42:bf:9c:5b:95:d8:e7:09:3c:13:2b:ad:6c:b5:
e5:b5:75:2a:d5:75:c7:82:c6:88:28:3c:74:83:aa:
33:2e:56:1a:1b:69:ef:61:81:83:58:c7:2b:fd:48:
e4:a0:0d:08:51:a9:43:a9:2c:c6:dc:4f:6b:b5:db:
8f:17:22:13:b7:68:68:b9:eb:12:53:80:4c:ab:16:
6b:f5:c4:79:3a:9e:02:1e:a7:e9:a2:61:d1:fc:c0:
6f:02:b7:a2:e8:44:82:be:13:68:67:35:a7:f7:1e:
f9:7c:7d:00:85:d7:6d:4a:41:4c:82:c1:48:8c:0b:
96:7b:34:f9:ce:f0:c2:58:07:23:a1:90:f0:13:8e:
0e:6e:9d:0c:d5:d5:9d:2e:2e:25:be:5f:15:38:24:
93:78:66:82:70:d1:56:d8:e1:ec:15:30:bb:40:51:
2a:df:8f:63:0f:29:e1:23:fb:66:dd:23:17:47:02:
a6:82:08:31:67:3c:dc:f5:74:50:50:32:c2:d0:88:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:2F:72:E7:60:0F:24:73:3E:B3:20:D7:24:E6:86:F1:00:25:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb253aeb-5d57-3eaa-9bb0-c7593533db70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:7a:30:5e:15:c0:1c:23:22:6a:eb:1e:7c:f5:a5:72:0d:1c:
8e:c1:87:a8:4c:d7:81:c3:9b:a6:5a:4e:0d:de:7a:e9:4e:0d:
6e:fa:c4:52:ec:fc:ad:d3:dc:e9:0d:b0:41:0f:1c:38:88:df:
7b:54:09:2f:a4:ed:40:d7:5a:ae:f0:22:c2:f7:b2:5f:de:98:
ab:1e:b8:79:29:9c:ef:6f:a9:ee:4c:6d:b6:bd:49:03:53:a6:
53:42:07:f2:a5:93:8f:56:ab:cf:2a:40:98:1f:99:80:0a:74:
aa:3a:7f:e6:7c:6c:3f:29:b2:f9:9a:b7:61:6f:57:89:29:53:
1c:48:ff:c4:63:f5:91:89:c3:79:df:a1:c3:94:f7:93:2a:a8:
80:47:a6:ce:2d:40:cb:21:f3:57:c4:2f:45:32:1c:7c:03:86:
62:17:eb:a3:82:3d:e3:0e:be:19:49:02:a1:7a:6b:40:b1:2c:
c7:a1:bd:aa:4a:1f:27:d9:5d:11:1a:45:7c:0f:01:6c:19:ab:
fa:32:71:3e:fe:b6:74:67:dc:cf:d4:e2:be:e2:ef:87:4e:da:
5f:80:e7:74:44:92:9e:ee:23:57:80:c8:a1:84:22:85:03:40:
3d:10:ce:3f:a7:86:23:9d:7b:01:e6:f1:f4:b7:3f:eb:2e:76:
4a:36:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:20 2025 by rpki-client