Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53d1b730-5c0a-3be3-a28e-d5a2dea3d7b7.roa
File: 53d1b730-5c0a-3be3-a28e-d5a2dea3d7b7.roa (raw, json)
Hash identifier: oOV8i0sLNb0SPuJtULdRKfotl95v4tW9ahqWpgMSS1U=
Subject key identifier: AC:B1:D9:CC:6E:79:C4:57:14:52:45:A9:64:28:2C:1D:42:2D:22:8B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584940BD0F3FF2D3867EEAB2DD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53d1b730-5c0a-3be3-a28e-d5a2dea3d7b7.roa
Signing time: Thu 20 Mar 2025 17:26:29 +0000
ROA not before: Thu 20 Mar 2025 17:26:29 +0000
ROA not after: Wed 18 Jun 2025 17:26:29 +0000
asID: 401152
IP address blocks: 108.165.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:bd:0f:3f:f2:d3:86:7e:ea:b2:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 20 17:26:29 2025 GMT
Not After : Jun 18 17:26:29 2025 GMT
Subject: CN=d6b17968-1468-404e-ad86-7c5675cf09f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:bc:5e:a2:1f:84:23:03:a2:0d:d2:96:b7:
c9:ec:f3:a3:b0:58:a1:ae:cf:12:17:7f:65:9c:64:
f1:8e:26:cb:de:0b:35:ea:92:73:13:74:7d:fd:70:
04:78:17:66:eb:c5:23:f5:71:0d:b7:70:f2:65:55:
cf:40:89:21:bf:ef:f8:22:38:a6:37:ec:9b:6f:5b:
c1:05:57:91:7c:bd:0d:7a:84:9c:5e:cb:1c:df:72:
1a:30:ff:30:0c:b9:92:6c:8d:48:71:4d:40:fb:e7:
b9:02:3a:f5:92:32:2a:06:8c:b5:91:26:4d:c7:b6:
95:34:60:3f:d9:7d:7f:da:59:16:74:7a:1f:bd:9a:
e8:fa:14:65:59:7b:c5:38:e9:da:52:86:4e:6f:b9:
b9:c5:84:59:c3:d9:c2:33:ae:cb:c7:d9:cf:1a:9c:
88:94:69:ff:b9:8e:de:d1:b7:1d:60:1f:71:b6:91:
53:b5:74:4f:3b:82:83:1e:9e:e0:af:a9:2d:19:df:
12:9a:f0:ea:ed:ca:80:1e:54:14:99:1e:0a:e3:6c:
a3:b7:7f:6a:aa:55:b4:1d:2d:68:ab:bb:5f:1b:61:
14:8c:cc:0a:2d:3c:8e:2d:0f:86:f3:a5:a6:71:75:
16:a8:2b:b4:34:94:b6:43:b3:6b:2e:f9:ac:b9:90:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:D9:CC:6E:79:C4:57:14:52:45:A9:64:28:2C:1D:42:2D:22:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53d1b730-5c0a-3be3-a28e-d5a2dea3d7b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:a5:a1:c0:c9:62:2b:bc:89:09:d1:4d:70:54:e8:ae:0f:9f:
2d:64:6f:8d:a1:81:23:91:b1:77:8e:a4:a5:a0:fb:15:93:db:
4a:04:02:95:0d:9f:87:65:ca:bd:21:0e:69:30:c6:cf:13:97:
74:dd:3d:b8:ca:44:99:2f:6c:f7:93:57:e1:50:80:da:bb:f3:
a8:e6:a9:5c:38:08:06:64:2b:c7:0e:43:4e:41:c4:49:cb:a6:
2b:f0:40:97:a4:40:b9:41:20:db:7d:0a:b1:e6:9d:ad:a3:d3:
b0:43:97:d6:9a:04:e7:b9:aa:53:04:45:02:b9:0f:bf:2d:8a:
6f:f6:0f:25:2d:69:04:aa:83:f5:27:ed:ed:39:16:49:72:b3:
60:30:58:88:e1:06:85:ed:c1:1a:64:62:67:66:ad:51:e2:e6:
e9:b9:e0:15:02:4f:58:1d:be:8a:8f:ba:8c:61:3e:2d:a4:88:
97:68:ce:4b:50:c5:4c:9c:4a:8a:ce:11:e9:af:60:82:b4:7e:
7c:24:b9:90:ba:14:09:f3:a7:64:ac:4e:3a:fc:08:84:b8:6b:
ff:b5:72:08:d3:21:0c:c8:85:8d:44:4f:68:f7:e6:43:dc:64:
cd:e0:88:7e:9a:26:4d:f2:ac:80:21:f1:85:a5:75:77:e7:b8:
e4:d9:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:08 2025 by rpki-client on console.sobornost.net