Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa
File: d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa (raw, json)
Hash identifier: 2vn/EIZ8kX+kyxxVL57+RzJHl9DmoVWKTTrjc10Q+MM=
Subject key identifier: A5:AB:57:0E:42:4A:99:7E:15:4D:6A:66:F9:2A:FA:59:40:5D:64:80
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584981D45364212FD25264366B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 400810
IP address blocks: 166.0.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:53:64:21:2f:d2:52:64:36:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=1f1f27b4-b392-4fa7-8784-666cc6e8626f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:f6:2e:6b:cb:34:5e:45:cf:fe:bc:58:82:
ea:73:c0:9b:52:8b:e7:91:a0:86:ed:0a:0a:cb:41:
1e:5d:b2:bd:93:66:b5:b7:1a:5e:d5:56:23:73:0b:
a3:52:0f:00:2e:d6:69:66:e3:1e:f5:ba:bc:a5:28:
03:2d:ca:52:87:39:dd:c9:d8:d8:80:2a:8d:74:e3:
7c:0e:05:01:bc:eb:f8:5b:86:7a:79:ed:66:58:68:
40:fb:5e:5c:ff:e2:3b:d5:a2:5f:4a:0b:56:ae:02:
69:a2:78:1d:76:8e:d7:54:5c:1b:4e:e0:68:90:5b:
5c:be:72:09:80:4f:59:f6:5b:89:a7:04:79:88:b8:
c4:f7:32:c4:97:9c:3e:40:7a:4d:b3:8a:f4:1d:cf:
a8:06:91:6b:09:f4:32:70:ce:66:83:60:75:98:c7:
10:2b:d1:a0:2c:19:19:f0:dd:71:f7:a2:b6:62:8c:
90:86:c8:75:66:02:6e:59:ab:bb:c3:34:38:31:32:
64:23:d4:0e:ac:23:a2:d4:93:ee:f7:78:a1:86:ba:
8a:66:fc:74:84:4d:48:eb:11:51:86:ad:74:32:79:
7c:9f:c6:78:33:29:d2:4d:cd:e9:dc:17:d7:18:a8:
63:45:f9:50:9e:e9:8b:04:6e:d8:71:8f:1e:a3:24:
94:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:57:0E:42:4A:99:7E:15:4D:6A:66:F9:2A:FA:59:40:5D:64:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:3c:15:a3:8c:42:ed:5f:d5:ea:fa:b1:5f:9d:65:64:64:a2:
ef:61:22:d1:4f:fd:f7:89:98:4d:4c:48:79:4c:ae:88:22:5f:
e0:01:60:e8:e7:4a:b1:89:f7:96:51:13:89:75:af:39:59:f2:
e2:c8:4e:5f:ac:62:32:84:50:49:81:28:ec:f0:94:aa:b5:b1:
b3:a3:56:72:0f:d9:f9:44:de:0f:fb:57:9e:00:cb:5a:b0:fb:
e6:33:06:18:4e:6d:27:52:ac:18:d6:c4:3e:19:79:48:c7:7f:
8d:88:34:85:b7:e4:45:f6:00:ec:0b:46:d5:84:ab:5e:af:32:
c6:f4:7b:11:11:9d:00:37:9b:70:92:6d:ec:b1:fd:60:de:4a:
eb:b1:43:6a:e0:84:3b:0d:e2:54:13:fc:71:2e:5e:0b:83:4f:
0f:84:88:c9:ca:d3:ad:0e:7c:9e:1d:89:75:01:9f:55:97:5d:
3a:43:48:e1:7a:bd:10:53:a6:07:3c:94:8d:cc:6f:cf:e2:8f:
5f:d2:b3:0a:8f:05:95:4a:52:1f:9a:b6:86:88:72:34:8a:cb:
48:29:51:4e:26:30:c5:08:3a:fb:a6:f2:07:da:79:d4:7d:a7:
82:04:80:2a:66:f0:a6:22:62:ca:42:73:80:7c:12:ad:df:41:
7c:a1:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:44 2025 by rpki-client on console.sobornost.net