Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d0288f3-657d-3a3d-a3c2-4e84809945f9.roa
File: 6d0288f3-657d-3a3d-a3c2-4e84809945f9.roa (raw, json)
Hash identifier: BHS46icvzisN9LeUfNQ9YM3SpL5Qi3ItGvcIyJVeGgU=
Subject key identifier: A6:85:72:1E:1B:3B:07:7B:DC:4D:AF:C1:53:1E:93:E1:EE:B1:5D:43
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C41B82EA13A1D76C66F54250
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d0288f3-657d-3a3d-a3c2-4e84809945f9.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 210356
IP address blocks: 108.165.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:82:ea:13:a1:d7:6c:66:f5:42:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=28fe2489-7633-4fa4-ac06-04b9dd958a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:51:f1:5b:7c:78:ad:49:4f:9a:33:ee:bc:
30:5c:d8:18:5b:fa:85:b3:0c:88:36:eb:6f:00:e3:
1e:7c:a4:12:2d:3f:7a:2e:0d:30:6b:e1:1b:ae:b1:
a4:96:14:a1:3e:6c:f5:48:78:7a:33:21:43:cf:1d:
fd:f5:b3:b0:f8:88:e1:1d:de:1c:c1:48:91:2d:48:
06:2c:a3:01:25:be:96:6f:57:3e:e7:0e:b5:0c:82:
49:60:b1:ca:25:82:b8:57:91:30:db:6d:a7:ec:0a:
98:8e:8d:1d:3d:e8:2f:13:45:37:c2:c2:57:f7:80:
9a:73:13:5c:47:d2:a6:8b:0f:db:13:a6:8b:87:d9:
e1:a7:4e:ac:43:64:30:0c:b5:d7:f4:52:b0:4d:03:
d8:42:a8:0d:39:7a:39:b5:41:6f:2b:a0:47:1c:9f:
ff:86:20:15:6d:9c:36:92:26:96:a1:2f:68:a3:6b:
49:b0:a3:79:92:46:93:d2:a2:35:5c:a5:56:5f:ce:
b2:d3:29:42:0f:66:ab:07:86:83:02:82:fd:d3:b0:
4a:b8:d4:d5:89:5c:77:7f:a5:51:f9:2a:1b:55:b9:
86:9b:74:05:1d:44:d2:2c:df:24:62:71:50:d9:b0:
d1:a4:22:0d:09:f1:8e:47:1a:a1:05:f1:69:7e:c0:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:85:72:1E:1B:3B:07:7B:DC:4D:AF:C1:53:1E:93:E1:EE:B1:5D:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d0288f3-657d-3a3d-a3c2-4e84809945f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:2d:bb:eb:c4:3f:f2:fa:85:9f:c5:bb:9c:ee:46:08:75:09:
21:ce:41:cf:09:22:c7:25:43:8c:78:32:10:91:56:dc:98:da:
c1:06:88:48:ce:58:c6:a9:6c:07:48:29:42:2a:07:31:25:b0:
03:5d:c3:d2:0a:46:fe:25:17:4f:51:71:3e:2a:a9:56:db:2c:
1c:8e:3a:f0:65:c6:85:3f:b5:b2:0b:75:9e:31:97:f6:61:e1:
83:17:f2:f9:f5:5a:ab:26:d0:4f:f9:b4:f9:3a:74:e5:3f:b4:
f5:4a:81:52:68:40:8e:09:2d:82:39:62:c9:f9:6e:e6:3a:a5:
04:ca:64:ce:f5:bf:88:92:96:ac:26:76:70:b4:22:b1:47:74:
44:1e:61:2d:ef:33:bf:62:f4:e7:ef:9b:70:47:80:85:08:07:
20:39:b4:cc:51:8c:19:5d:f9:a1:b5:88:a1:f6:3a:0c:25:fb:
37:4e:69:40:8d:b5:c8:bc:b6:da:c0:e7:25:c1:bb:82:96:d5:
9e:39:38:70:2b:de:ce:b9:24:42:c0:4d:f0:5e:75:d9:3f:7e:
02:70:72:01:57:d3:e1:92:81:17:70:76:df:cd:f3:de:68:9e:
3a:37:8c:e4:d4:0b:0e:48:fd:c6:a5:a0:32:79:e6:66:c1:64:
31:f1:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:33 2025 by rpki-client on console.sobornost.net