Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/417dbdf3-edb9-31ea-8083-255bd02a57b3.roa
File: 417dbdf3-edb9-31ea-8083-255bd02a57b3.roa (raw, json)
Hash identifier: dkDcyhjNuf/WyhCJTaB/Jy9od0IK27WYbqov+wRT1Ig=
Subject key identifier: 3E:65:D6:F2:D9:DA:E9:CF:E5:F2:E7:2E:2C:70:A9:AD:B1:A4:77:68
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F3911B0D38CDAF8A28F2A780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/417dbdf3-edb9-31ea-8083-255bd02a57b3.roa
Signing time: Fri 21 Feb 2025 02:00:39 +0000
ROA not before: Fri 21 Feb 2025 02:00:39 +0000
ROA not after: Thu 22 May 2025 01:00:39 +0000
asID: 401152
IP address blocks: 108.165.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f3:91:1b:0d:38:cd:af:8a:28:f2:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 21 02:00:39 2025 GMT
Not After : May 22 01:00:39 2025 GMT
Subject: CN=def6ddd9-64c3-47df-aa32-ec65c2bad3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:94:d9:34:45:16:5c:bc:f7:6d:d7:08:9a:
6e:f8:3d:2b:d5:43:ed:bc:55:73:35:04:91:0f:c2:
60:69:37:22:4a:a6:8c:6a:20:67:5a:fc:2c:86:9a:
ea:ab:60:70:b5:2e:15:07:d7:db:d4:e7:0f:a7:f6:
cb:61:c9:d6:46:1c:b1:36:49:e8:33:82:4a:e1:73:
06:d2:c0:26:35:4b:b0:2d:9b:d5:56:5f:d9:8b:23:
79:58:9b:90:c6:e8:92:b7:69:dd:5d:3f:5a:71:64:
41:e3:51:ff:45:a1:d5:1e:c6:c5:26:87:92:92:f6:
31:14:6c:8d:37:69:35:3b:64:a4:0e:3d:21:1c:f9:
6a:36:3a:cb:c4:2d:b9:44:24:c9:43:33:97:38:59:
e6:89:4d:3d:82:9b:1e:7a:f5:47:7a:aa:43:12:93:
aa:54:a8:a3:56:37:84:d2:38:4e:b0:07:c8:a7:52:
a0:b0:49:00:8e:49:5b:50:4f:bd:39:aa:a8:48:99:
17:1b:11:07:36:b2:e9:d9:1f:0e:d7:1b:78:49:b5:
d6:0e:7c:18:29:b0:38:ca:31:38:ff:2b:a8:66:2b:
67:c5:ed:0d:52:29:fc:24:4d:b2:aa:b3:05:02:63:
af:6a:1b:97:1b:98:28:5b:ee:80:94:34:73:56:5f:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:D6:F2:D9:DA:E9:CF:E5:F2:E7:2E:2C:70:A9:AD:B1:A4:77:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/417dbdf3-edb9-31ea-8083-255bd02a57b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:10:d1:65:20:a1:fd:b5:af:9f:c6:2f:93:cf:f7:cb:7d:04:
cf:d5:77:b4:ed:4d:51:35:97:bc:8b:6d:35:b8:b0:37:ce:2e:
38:a8:b5:67:1d:db:27:df:31:38:a0:a9:4c:54:1d:91:51:75:
70:79:0d:3d:45:09:58:f5:97:f0:92:37:e7:2f:3a:5c:58:d0:
ca:63:be:25:3e:41:93:73:39:70:8e:02:6b:d0:44:c0:f8:aa:
0b:6e:6a:79:c9:a7:42:62:40:96:11:c0:a9:dd:0b:ff:42:3e:
22:1c:56:6d:44:5a:53:39:96:b2:b2:5c:a6:92:35:68:db:87:
38:41:e4:8d:c9:17:e3:30:8f:a4:8d:f2:fe:d3:41:e6:4c:ba:
3b:4e:8f:c8:4a:a1:58:00:c2:1a:e5:ef:72:7b:94:dd:80:84:
8e:2c:3d:87:4a:06:1a:c0:0f:9c:f5:60:52:b2:cf:88:7c:a7:
e6:a3:94:1a:39:13:79:84:16:e0:d7:6a:86:bd:8a:8d:d7:55:
56:60:7d:a6:2f:03:2b:0c:63:94:90:47:be:19:74:c5:31:2b:
02:2c:77:7c:df:9e:04:fe:74:98:dd:9b:7c:dc:22:3e:5c:62:
d5:2f:b5:35:34:38:42:39:3a:ae:96:dd:85:d2:f8:8d:b5:3d:
04:75:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:07 2025 by rpki-client on console.sobornost.net