Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa
File: 00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa (raw, json)
Hash identifier: jS5idDBAoAm6dqKvrM+CSIlj/zub7l9XzQz8/U6EOSo=
Subject key identifier: 3B:E1:4E:89:24:A6:A7:D3:04:34:83:7E:46:65:A6:0F:A3:12:9A:A5
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849029E6B5B260FAADA198F3380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa
Signing time: Wed 26 Feb 2025 11:24:38 +0000
ROA not before: Wed 26 Feb 2025 11:24:38 +0000
ROA not after: Tue 27 May 2025 10:24:38 +0000
asID: 30036
IP address blocks: 107.167.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:9e:6b:5b:26:0f:aa:da:19:8f:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:24:38 2025 GMT
Not After : May 27 10:24:38 2025 GMT
Subject: CN=6dc149ea-c13a-4b14-bf3a-82e2035374ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:4f:d9:56:8a:da:69:d9:ef:a2:a8:f6:25:
95:6e:8a:b9:91:c8:51:e8:63:cf:d4:d1:56:4d:19:
7a:50:60:70:e4:50:80:38:94:0e:a7:2c:74:8c:c4:
ed:fe:64:ac:37:24:67:70:ad:4e:89:9f:17:1e:fc:
ca:9c:ff:2c:b2:c2:09:a0:d9:13:76:10:fc:47:28:
99:02:6d:9b:70:93:22:9c:81:db:c8:95:92:e8:e1:
61:1c:33:9b:e0:d4:82:53:8c:09:e5:19:25:64:69:
67:7b:2a:49:44:03:8e:bb:a1:c2:06:13:36:94:dc:
37:62:94:9b:44:fc:68:c7:c1:32:f6:f0:c7:ba:77:
c5:4f:83:18:d0:98:39:4b:28:07:6c:a2:43:3b:a1:
0e:08:ed:77:24:15:d0:1e:5b:26:be:27:b4:44:fd:
90:11:80:c4:49:cf:b7:78:96:95:12:94:c1:97:bd:
32:1f:e4:96:46:d9:91:2b:db:d8:15:89:06:62:12:
ae:7b:3b:a3:e4:c0:6b:b7:32:5a:92:5e:1c:dd:b2:
2d:01:d0:68:55:43:38:7a:77:d5:9f:b4:14:6f:5f:
e6:58:24:73:8a:6e:b2:7e:a1:50:e2:84:e4:17:fd:
f4:1d:fa:6c:f6:ee:2a:63:9a:57:ba:9b:c3:36:fd:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E1:4E:89:24:A6:A7:D3:04:34:83:7E:46:65:A6:0F:A3:12:9A:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:53:0d:b4:bc:77:09:9f:9e:4c:54:e4:dc:29:fe:ed:f2:32:
61:9d:45:26:74:f8:1e:67:a3:a5:d0:0d:2d:b3:bb:60:30:7d:
9d:24:6a:3c:8b:54:42:d7:1d:ea:d9:e0:4e:b2:93:64:19:8b:
79:86:63:85:49:e7:22:c9:8b:f2:00:84:a6:08:e6:02:e0:89:
b9:9f:77:ec:8f:5e:dc:1b:bd:e7:5d:71:b7:17:7b:40:93:0b:
47:53:22:34:bb:97:a8:83:8f:8b:12:e8:26:d5:4d:ea:cb:13:
08:2b:ad:69:49:60:2a:aa:7c:83:ca:e5:95:7c:c2:64:f8:3f:
e9:5f:b6:02:41:c0:7b:69:0f:0e:ce:1a:05:ea:7c:ac:d3:37:
55:b4:6f:b9:f3:69:47:ab:6e:c7:c7:c7:63:39:74:ac:c7:04:
ad:d3:4c:00:a3:c8:04:3c:50:61:cb:67:38:8f:ef:c2:6e:37:
d1:4b:2e:34:16:7b:a3:ba:2e:88:9c:cb:cc:bf:00:45:4c:22:
63:ed:8e:dd:a3:a9:e1:c2:ba:81:dc:34:99:49:e5:73:30:e9:
2d:04:5a:7b:76:40:ea:23:89:a4:a3:bc:c9:b8:d9:59:6f:4e:
41:32:e3:63:fd:3c:a4:d5:30:01:b5:67:60:0e:67:09:a8:6f:
92:ee:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:40 2025 by rpki-client