Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa
File: 9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa (raw, json)
Hash identifier: 2mJzCX+9cInhuQiljjFNHf24tROujQ71OyPIdN7lHPQ=
Subject key identifier: 3D:74:C7:7D:6E:50:B3:FD:8F:62:E1:01:CD:42:89:8F:1D:22:B0:68
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858491D7171389AA80FF038275780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7979
IP address blocks: 166.0.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:71:38:9a:a8:0f:f0:38:27:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=fa863328-51ea-42ed-9451-140d59ceda2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:dc:80:7e:98:d4:8e:85:6d:2c:8f:ea:e9:
1e:83:6e:06:1d:2b:78:ae:f2:1b:17:de:74:d9:88:
2c:72:f6:1f:f8:9d:e4:d4:29:77:34:15:2c:32:04:
89:66:50:1d:8e:00:23:c5:93:09:31:02:97:9d:b6:
84:bf:a0:f5:2d:f5:b1:d2:9d:84:12:14:1d:ea:6c:
3a:4c:d8:7d:a0:61:fe:b5:8b:ae:0a:ce:da:b0:c5:
3f:30:17:6f:79:81:12:53:b0:1f:65:02:d0:79:b2:
f3:2d:08:3f:a4:29:6b:a3:86:64:cf:21:40:45:f5:
50:26:9e:b1:c6:3e:f5:40:14:21:e9:f3:04:44:5d:
1d:e9:5e:9a:8b:9b:c6:5a:f9:88:d9:15:b6:99:6c:
5a:f2:ce:5d:c3:62:f6:32:2b:54:72:ee:09:32:0d:
92:8c:9f:80:94:4f:fa:06:f1:30:76:7b:dd:28:8f:
96:fa:33:1f:c5:95:be:2c:06:70:08:26:fe:da:89:
14:69:3d:b5:0c:d3:91:d6:ff:8d:e1:4f:26:01:ad:
83:5a:b7:84:20:8f:21:d4:e7:ce:24:68:39:82:5b:
9b:b9:77:d9:d5:4e:49:bf:11:4e:f4:3c:78:95:75:
0d:80:43:39:08:2b:b0:b6:dd:1d:88:b8:28:cc:55:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:74:C7:7D:6E:50:B3:FD:8F:62:E1:01:CD:42:89:8F:1D:22:B0:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:1e:19:9b:23:96:24:ee:bc:70:1e:17:85:dc:b9:2b:27:da:
80:76:1d:46:09:54:db:e9:4c:be:97:29:32:d5:f7:e0:31:f3:
ff:e9:7e:80:df:04:f4:96:19:78:58:ba:bd:17:a0:6c:af:6f:
59:2d:53:c4:62:65:dd:16:f4:03:1b:bb:dc:ad:6e:31:cd:74:
a3:4f:8a:e4:39:41:3b:d7:81:13:45:90:ab:5e:dc:19:47:0c:
03:d9:34:e2:be:3e:c9:b2:a7:a3:62:0c:71:46:17:11:83:dd:
9f:88:9d:d6:d3:d1:56:39:77:71:86:12:fd:58:e1:5f:7d:c2:
6a:58:73:cd:56:ef:c1:e9:73:63:de:65:33:9e:b1:0a:01:6a:
9d:79:2d:b4:66:c3:da:3f:09:7b:05:72:59:c6:aa:0e:af:b1:
07:e7:f3:26:da:e1:56:23:ed:5d:dd:32:c1:af:50:5e:5d:2e:
44:59:08:16:75:d6:37:87:fe:18:e2:36:68:c7:d2:b1:74:84:
a6:04:2f:f2:f1:b7:47:aa:b6:15:8e:47:54:af:18:b8:d3:64:
5c:8c:20:28:75:f3:c2:97:66:18:57:17:10:0a:aa:c4:4e:a2:
65:30:18:d7:a1:2f:3a:a7:91:6d:f9:be:9c:73:ca:32:8e:02:
4f:b0:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:38 2025 by rpki-client on console.sobornost.net