Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/cc88854c-7418-3ee3-9e49-c66c21fff613.roa
File: cc88854c-7418-3ee3-9e49-c66c21fff613.roa (raw, json)
Hash identifier: L7L8ilid2WK466IXopHIQogordPOTXPMxRsR8llEcTI=
Subject key identifier: 44:FD:BA:63:61:86:5A:85:AF:16:A4:2B:99:AB:27:1E:A0:87:76:E9
Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial: 010D0C9F43285848F9269BC623B88861AB58DC80
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/cc88854c-7418-3ee3-9e49-c66c21fff613.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 4134
IP address blocks: 66.102.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:9b:c6:23:b8:88:61:ab:58:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=1c65a96b-c59c-4ff7-8630-cd936f878a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:db:e2:d6:be:af:20:04:1a:04:8b:12:32:
4a:26:75:18:d2:70:4e:53:b1:e9:00:82:03:a6:f4:
bb:50:44:4a:17:09:41:6b:72:44:f0:f9:d0:87:48:
15:8d:83:2a:b7:29:d3:a0:1d:ad:5f:a5:bf:05:f7:
f0:3f:83:bc:53:f1:b9:8b:61:d7:17:d3:6d:a8:52:
ee:1e:bf:c9:c8:82:d8:9c:e0:02:33:2d:b5:53:96:
a8:2c:65:71:05:b0:d1:94:d6:df:01:c1:cd:09:b7:
91:1b:20:98:f4:a2:69:64:64:35:67:2f:40:a4:0d:
69:ca:10:4a:b7:5b:04:b3:54:81:9f:eb:d1:2f:ed:
41:b0:33:6f:d7:12:f5:bb:00:51:27:1e:cb:97:3b:
8c:5c:08:a1:b4:2e:a0:93:6d:2d:24:fe:d7:1a:7c:
c2:e3:c9:7a:a5:ba:d7:37:8e:3d:a7:7d:0a:eb:37:
d2:81:38:35:77:62:22:a9:1b:1e:c0:e1:29:34:18:
1b:c2:e7:cc:32:ec:b0:f9:13:26:5e:5c:f5:82:0d:
41:4f:e8:26:f9:eb:f5:8f:97:0d:b0:70:55:85:04:
5e:d9:04:56:94:33:e9:c3:34:5f:c0:aa:03:d7:53:
60:d3:2b:e7:d4:4b:31:26:0d:7e:45:27:cc:e3:cc:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FD:BA:63:61:86:5A:85:AF:16:A4:2B:99:AB:27:1E:A0:87:76:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/cc88854c-7418-3ee3-9e49-c66c21fff613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
X509v3 Authority Key Identifier:
keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:bf:24:f2:3d:c3:13:86:71:0c:8e:7b:71:10:31:34:56:ef:
0a:54:f4:34:4a:0d:fa:91:d3:8c:91:65:b7:2a:38:32:24:22:
b1:1a:fd:d1:f3:87:a4:c3:54:f7:e6:fc:83:0e:21:3f:a7:60:
2e:fa:4e:28:30:3c:8e:7a:70:4b:91:d5:7a:e2:d7:bd:48:7c:
ae:41:d0:90:b3:94:70:eb:84:98:3a:dc:84:64:8e:cf:ec:fd:
2c:15:c5:9a:5e:8d:82:f5:f5:61:40:05:5b:f9:6a:ef:a7:70:
2a:eb:c1:3a:bc:bd:7f:29:74:a6:85:28:c7:94:86:1c:5d:93:
73:34:99:f7:b1:87:ef:a9:eb:ee:1e:3b:8d:ca:a0:83:ab:b8:
c1:8c:93:79:2a:10:c6:21:4c:86:f0:e3:8c:9c:f2:a0:2e:9e:
9e:00:d0:60:e6:91:3a:9a:5e:02:cb:4a:f5:37:7f:6f:a3:08:
f3:74:48:15:02:af:64:47:d3:8b:13:d4:dc:ad:b0:1f:1e:6a:
a4:f6:1c:76:6e:83:af:e8:11:3c:da:83:b8:e4:b4:e1:eb:ad:
91:7f:db:5f:66:b0:cf:b3:60:5d:6c:16:cd:95:12:5b:47:06:
0b:41:25:f9:49:dd:a8:70:91:c2:33:df:1a:bb:a2:11:46:57:
ac:75:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:08:24 2025 by rpki-client