Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/138415a0-5b7e-31ea-8bf1-c65ebaafd948.roa
File: 138415a0-5b7e-31ea-8bf1-c65ebaafd948.roa (raw, json)
Hash identifier: KCNuN9XakYYgQeo9Fvn9nOu0atShH1/ZOPiPPj4IUHo=
Subject key identifier: 24:33:D0:EE:9A:70:E5:03:A2:B9:DF:AB:56:4D:B0:A0:8E:F2:A6:81
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F43285848E59BBAA2FB4D3BEAC74F1FE0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/138415a0-5b7e-31ea-8bf1-c65ebaafd948.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 7018
IP address blocks: 107.166.16.0/22 maxlen: 24
107.166.20.0/22 maxlen: 24
107.166.24.0/22 maxlen: 24
107.166.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:ba:a2:fb:4d:3b:ea:c7:4f:1f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=e09352b2-20ee-47e5-b10b-951d4643056f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:5e:dc:c8:ba:32:c7:d7:0a:aa:28:98:1d:
b5:e8:c3:a9:50:ef:9e:fe:c1:45:d9:9e:aa:1f:93:
73:04:b2:4c:6b:51:d6:a6:25:dc:ef:57:98:97:67:
78:df:9a:45:58:1f:db:89:27:86:e1:51:21:e1:1f:
c6:e7:cf:fa:4d:d2:2c:16:d6:98:d9:5a:33:12:14:
5d:32:ad:26:da:0b:40:d4:fb:29:89:1f:b0:ee:17:
d0:1b:9c:8f:65:34:21:d0:8b:e2:f4:2f:ae:0d:39:
a3:e7:55:61:f2:3a:0d:53:f3:4d:a4:57:9f:66:b7:
98:56:5b:e4:a4:55:89:f9:5e:c0:d9:61:93:a9:7f:
2f:d7:09:0d:0d:ad:19:61:d0:b4:82:cf:b6:e6:e6:
94:d5:78:42:80:2c:50:66:50:73:c1:ce:9c:a8:69:
cd:bb:1d:20:51:c9:93:09:24:4e:9e:d8:e8:7d:05:
cb:0b:0b:7a:39:23:fa:ef:30:bc:18:f4:04:c9:0e:
02:c2:6c:76:e8:66:58:81:93:7c:78:2e:e1:48:76:
db:7f:4b:b2:5b:33:da:5e:44:f3:a8:80:16:79:87:
55:dd:05:f1:8f:8d:e7:c3:b8:5d:ad:6c:1e:8b:79:
6a:2b:36:36:65:76:7d:ab:73:01:c1:3d:e9:93:49:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:33:D0:EE:9A:70:E5:03:A2:B9:DF:AB:56:4D:B0:A0:8E:F2:A6:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/138415a0-5b7e-31ea-8bf1-c65ebaafd948.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.166.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:fa:2b:72:f2:52:5f:e4:91:7d:49:d7:b3:f2:ae:4e:43:20:
2c:fb:b2:55:81:9e:3e:87:33:a6:85:a8:78:34:a2:c5:09:07:
88:8c:d3:5d:e6:8b:c4:e5:69:2a:1f:f5:13:95:7e:7a:c2:86:
3b:0e:10:90:b1:76:5f:50:60:a0:db:61:86:b0:20:6b:65:57:
ad:ab:73:a6:f1:da:1c:22:4f:23:1b:a8:a2:71:c7:15:ec:dd:
2f:0a:3b:e1:70:57:45:5f:d7:b5:e5:79:d0:e2:9e:64:16:e8:
ba:32:59:e7:e3:89:ae:27:ac:8c:a6:f2:5b:4d:12:cd:d0:7c:
04:f0:25:91:d0:ca:fd:cb:71:a1:81:10:da:a3:ce:e0:bb:a4:
57:37:44:57:13:eb:e5:6a:24:20:df:68:d8:e8:f3:85:62:59:
b7:96:1b:cf:a9:b0:7a:66:e3:3c:84:17:08:25:59:ef:58:de:
b5:7d:2e:e8:e6:d8:92:fa:a3:85:44:dc:66:57:eb:86:ad:41:
02:7f:4d:5c:a8:dc:18:65:71:2e:8c:e4:86:d2:49:93:bc:ce:
92:ce:5c:b6:55:aa:5b:13:db:9b:91:a7:a6:f0:78:5e:cc:08:
ef:4f:38:08:84:b1:ce:83:14:b1:2e:fa:e6:5a:c0:ac:2a:f7:
7c:55:bf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:28 2025 by rpki-client