Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09685784-f7f7-3436-990f-6353d789309c.roa
File: 09685784-f7f7-3436-990f-6353d789309c.roa (raw, json)
Hash identifier: a+Nwyn3gH/clSfFAzvD5SyQiWEgDOF6i9CxN3vGBg48=
Subject key identifier: 42:11:60:99:04:F3:B8:21:59:C6:3B:8E:3F:E8:C2:E3:2E:55:75:AE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849029E5839415C83988598CE20
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09685784-f7f7-3436-990f-6353d789309c.roa
Signing time: Wed 26 Feb 2025 11:24:29 +0000
ROA not before: Wed 26 Feb 2025 11:24:29 +0000
ROA not after: Tue 27 May 2025 10:24:29 +0000
asID: 30036
IP address blocks: 107.167.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:9e:58:39:41:5c:83:98:85:98:ce:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:24:29 2025 GMT
Not After : May 27 10:24:29 2025 GMT
Subject: CN=8ee5deee-1bb5-42af-ad62-d647745c016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:f4:5a:d5:ec:28:10:d4:63:28:da:ef:57:
5c:bb:44:bb:8f:c4:a2:bb:57:3f:75:1b:64:f7:ea:
58:53:30:20:d1:99:0c:5e:c0:a5:02:7d:56:3d:a4:
70:f3:ba:d8:41:59:76:5a:c4:74:3e:54:b4:3e:4b:
33:9a:cb:12:c2:09:a4:a5:3e:11:6b:83:bb:ee:c6:
25:72:34:ac:08:f9:a9:3f:4b:1e:5a:4a:02:c7:90:
1f:2b:a9:05:bb:fe:4e:da:9b:a5:3d:dc:47:6c:1a:
6a:79:51:cb:85:d5:5f:86:09:dd:1a:10:3b:a0:81:
04:a1:95:0a:71:54:51:25:e7:56:55:be:de:4e:6e:
e3:9a:57:ec:ce:38:d7:e2:82:9c:e9:e2:b0:ce:20:
0f:0c:a4:c1:4f:7d:43:11:93:5f:9a:94:e4:bd:69:
25:93:bd:50:bf:ac:29:9d:97:e1:aa:09:a0:2f:59:
69:59:d8:c0:af:cb:ac:2d:b5:48:c9:06:1f:08:4c:
e9:08:a6:17:9f:f7:25:ef:39:ee:b1:12:85:fe:95:
44:f9:1d:a1:74:21:ae:2f:53:58:93:ba:be:d5:62:
6f:67:7c:72:f1:d1:62:25:ec:61:95:30:07:02:2e:
07:4b:0d:8c:93:c8:d0:ba:e5:6b:2a:e2:cb:cc:23:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:11:60:99:04:F3:B8:21:59:C6:3B:8E:3F:E8:C2:E3:2E:55:75:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09685784-f7f7-3436-990f-6353d789309c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c2:f6:0a:93:6c:ba:22:0c:d4:0d:9b:ca:70:50:90:1a:d6:
15:ea:77:74:ed:70:da:a2:24:9e:3c:12:fc:19:95:3c:18:10:
f9:32:70:c2:e1:3d:72:d1:a7:a5:73:68:e2:9d:ff:f3:9b:1b:
4f:67:ad:53:59:11:b2:d1:e2:38:c0:fe:cf:49:3a:e4:6e:33:
95:12:f5:c4:d3:6e:80:9e:16:56:59:f6:7d:aa:08:53:b3:52:
96:60:15:30:0b:fc:9c:2c:ca:f5:5d:d2:07:c0:e6:b2:9d:3f:
2b:20:02:9f:e7:19:c6:d3:4e:58:e1:1d:5c:1a:8f:d1:43:ad:
a9:8c:bb:38:42:75:66:2d:77:03:b0:68:c3:17:16:61:c4:57:
b9:cf:04:85:a7:f5:10:52:1b:c6:8d:a6:13:49:d8:06:c3:b6:
54:21:a8:1e:74:b9:2c:bb:cf:bf:2b:e1:b8:b3:5e:c6:de:50:
94:76:ef:24:ac:3c:d6:ab:d7:77:49:12:76:ab:b9:42:43:39:
30:ef:b4:5e:b8:36:ee:5c:43:16:b0:b8:58:40:41:d4:d3:58:
7d:07:29:67:18:3a:45:8e:cf:29:74:4b:3d:98:9e:c0:18:8b:
4c:1f:70:92:d7:41:53:b4:20:48:84:3e:06:a5:38:73:74:02:
79:1d:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:50 2025 by rpki-client