Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/37d9d671-ec07-3de3-98d9-df700690e3da.roa
File: 37d9d671-ec07-3de3-98d9-df700690e3da.roa (raw, json)
Hash identifier: hjkkmqV1brK0ZEQINItDq+PG2NknIJU87Hp6DD0Jmsk=
Subject key identifier: 3D:5C:F8:1D:24:91:D6:07:35:26:E1:61:C2:B6:B8:20:A9:64:0C:CD
Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial: 010D0C9F43285848EC96972AD409B722FED31900
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/37d9d671-ec07-3de3-98d9-df700690e3da.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 4809
IP address blocks: 66.102.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:97:2a:d4:09:b7:22:fe:d3:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=cbd22b14-1f1e-4ef2-8940-3204de14ae3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:1a:47:63:a1:af:06:a3:cb:47:a9:33:30:
1f:54:f2:34:c0:86:c5:00:a7:32:ff:4d:e2:d7:ea:
d9:4c:96:78:49:2e:c0:31:1a:ac:19:40:fa:06:6b:
68:ef:29:b1:56:ae:43:3a:9c:c9:3d:4c:df:00:7d:
fb:35:86:89:64:67:f8:dd:98:bd:e6:2b:90:b7:65:
5f:5f:9b:7a:44:b9:a9:3e:2d:03:07:5c:0b:83:0b:
34:e2:9a:55:ef:8c:cd:98:d0:b2:6f:21:64:79:05:
cf:e4:c8:e1:6d:67:5b:35:fe:28:4c:fc:5e:04:26:
e9:be:b1:bb:f6:4e:cb:16:37:cc:b7:ba:4c:cf:80:
c0:4d:21:28:44:d2:37:a2:f7:17:9d:c3:49:00:9e:
4b:56:9a:70:33:c8:c5:55:f0:fe:e0:38:99:dc:78:
fd:7e:15:5c:d9:00:86:f3:84:bc:99:2a:ce:f2:d0:
54:be:99:72:34:00:a5:94:59:57:d0:b0:4b:1b:0d:
03:0f:e9:9b:ea:70:15:c4:3c:2b:58:27:64:5c:83:
34:09:5d:57:af:fe:bb:be:e2:4d:c2:97:42:6e:3b:
e1:2b:65:ce:6c:b6:4a:d7:08:f9:68:44:c0:50:5b:
78:8e:63:fb:0e:28:3a:af:94:fa:8b:a4:2e:c6:fd:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:F8:1D:24:91:D6:07:35:26:E1:61:C2:B6:B8:20:A9:64:0C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/37d9d671-ec07-3de3-98d9-df700690e3da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
X509v3 Authority Key Identifier:
keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:e9:e5:81:fa:68:be:9d:4e:1e:73:92:80:17:1f:96:33:16:
2a:fc:b6:6d:48:8f:26:0a:e0:22:f0:00:30:a7:26:98:7f:7f:
18:4e:ab:74:83:e7:12:16:7b:fa:54:34:18:cd:9c:0e:18:eb:
0d:b1:04:61:3a:23:8c:4b:4e:61:a4:e8:af:68:f5:da:93:f7:
8c:13:8f:5e:f1:b2:1f:2e:b1:91:2c:41:ed:7f:ab:d0:23:5a:
c0:c3:e8:6d:98:1c:5d:ad:7a:45:17:9b:dd:fb:31:b5:b8:b7:
cd:4a:46:93:1f:b4:44:73:51:e0:57:7f:33:2d:7d:bb:f1:45:
4c:da:66:3f:5c:26:15:ef:2f:4a:52:01:6d:5f:38:6b:ad:c1:
86:52:e0:c4:9c:06:cf:3f:70:24:d0:e8:8f:ae:12:fe:f4:5a:
50:a4:e3:61:b0:28:05:9b:dc:da:29:be:75:ee:e3:c3:29:31:
06:8c:43:d4:74:cd:05:0b:00:49:f6:a1:3e:78:a3:84:0e:cf:
b7:6a:31:3a:b9:24:f7:db:53:ae:80:70:5f:ef:46:74:26:06:
87:63:5e:2f:9c:9f:4c:b0:b9:56:f6:74:64:73:b6:07:63:c0:
65:d9:19:37:07:75:ad:ff:2c:d3:bf:67:77:ef:fb:b5:c5:75:
84:63:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:08:27 2025 by rpki-client