Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2841b4a-900c-3f3a-8c22-66b1fbfa6ccc.roa
File: e2841b4a-900c-3f3a-8c22-66b1fbfa6ccc.roa (raw, json)
Hash identifier: iwwRbif0cUviNTVpW5VFyg58xdl0um4Q8Gmoz4G9AZ0=
Subject key identifier: 6E:E6:4D:E4:A0:C8:4F:AA:58:55:1C:3A:A3:0D:62:9B:A5:0B:7A:FB
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F43285848BE862FB2664388C2B83304C0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2841b4a-900c-3f3a-8c22-66b1fbfa6ccc.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 399091
IP address blocks: 107.166.112.0/22 maxlen: 24
107.166.116.0/22 maxlen: 24
107.166.120.0/22 maxlen: 24
107.166.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2f:b2:66:43:88:c2:b8:33:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=a15b08a7-ebfd-4ba9-afae-a4d572bb6076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:8d:78:39:92:bd:93:33:b3:18:28:cd:1c:
99:96:3c:a4:51:d7:65:e4:e0:56:96:a9:1d:9d:58:
b7:e4:6b:f2:96:22:8b:73:f3:cf:19:76:ee:56:c5:
8a:ed:8d:bd:b6:11:90:a6:d5:95:68:bc:d0:f1:b8:
f4:63:38:a4:25:cb:2f:51:ec:8b:4e:6a:e1:4a:ea:
0d:27:ea:9d:1d:be:c4:8f:0e:5a:cb:b6:e6:db:5c:
12:ba:34:73:cf:b9:13:69:56:51:9a:1e:03:8e:b6:
70:32:93:1d:6f:1c:d1:34:16:cf:02:20:61:2e:73:
26:a9:8e:05:5e:73:35:4b:a9:c4:e5:3c:37:93:33:
1d:ce:f1:d5:5e:80:8d:2f:4b:3a:14:e1:8f:0b:57:
10:16:cf:f7:c2:d9:e2:9a:32:2a:cd:5d:0f:5c:79:
d9:ba:96:70:a3:3a:b2:86:ee:3c:2d:03:da:5c:5b:
37:c1:38:e3:27:7a:44:01:a3:70:ac:96:79:66:9a:
c9:7e:1f:67:ce:d1:ef:f0:58:44:3c:b5:35:45:d3:
7f:7d:96:65:80:3d:8b:2d:f5:fa:3f:cc:fb:c7:70:
77:20:5d:02:cc:e3:27:7f:d5:87:56:2b:5b:2e:43:
41:97:1d:f9:17:41:7a:1b:f3:99:8c:49:60:fc:ec:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E6:4D:E4:A0:C8:4F:AA:58:55:1C:3A:A3:0D:62:9B:A5:0B:7A:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2841b4a-900c-3f3a-8c22-66b1fbfa6ccc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.166.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:0d:1e:f1:79:28:e3:b7:e4:f0:43:f7:ca:e0:15:4c:39:da:
1f:5c:8b:a8:2b:d0:b3:e3:70:02:24:8d:88:82:22:00:61:f6:
20:82:af:3b:5e:02:97:cb:17:1e:63:50:06:18:b5:d8:9a:22:
01:75:c1:37:27:bd:1c:ac:28:fb:dc:6f:48:0c:6c:73:59:9f:
6b:fc:30:4c:88:6c:d3:cf:4c:24:9b:82:a1:bb:31:1a:14:96:
70:0d:1d:e4:f0:04:67:f5:62:c7:96:9f:e4:10:22:ea:3e:a4:
17:74:d9:a2:21:73:ae:0e:1c:1b:fc:03:4b:6e:00:9e:3f:6a:
6b:d3:59:9a:09:a9:8e:bf:30:ad:e9:58:d2:bb:54:51:4a:eb:
c5:51:fe:18:1a:ae:c4:b9:cf:18:79:dc:f7:00:4b:df:d8:03:
d8:4d:50:2d:9a:ae:be:0f:0b:8a:ef:8c:ab:1d:cf:11:ea:41:
11:a3:0e:8a:45:78:b3:2f:dd:00:fc:a5:5a:db:7d:a8:c0:d8:
1d:e5:87:5c:eb:ff:86:c9:71:1e:f4:6b:be:56:ff:59:e4:fe:
48:3f:97:18:35:02:34:64:83:62:48:d5:09:83:87:65:81:ce:
89:1a:59:28:e1:65:5b:91:ee:ce:fa:de:0f:32:f3:46:6c:da:
c3:6f:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:32 2025 by rpki-client