Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a48d047-020d-3a7d-a62c-e9fb60d6e703.roa
File: 0a48d047-020d-3a7d-a62c-e9fb60d6e703.roa (raw, json)
Hash identifier: IChS/BCrQtF4jp6Xf0kf4t7h2m2EuPQE1AxzTEU3mIQ=
Subject key identifier: F3:40:B7:6F:63:D9:F2:7D:95:FA:5F:49:2C:CD:11:97:08:29:69:60
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584902A5E393D35E931AC5469300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a48d047-020d-3a7d-a62c-e9fb60d6e703.roa
Signing time: Wed 26 Feb 2025 11:39:41 +0000
ROA not before: Wed 26 Feb 2025 11:39:41 +0000
ROA not after: Tue 27 May 2025 10:39:41 +0000
asID: 30036
IP address blocks: 108.166.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:a5:e3:93:d3:5e:93:1a:c5:46:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:39:41 2025 GMT
Not After : May 27 10:39:41 2025 GMT
Subject: CN=30bf7a92-566a-4433-a142-09c5b7f464ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:e7:b9:44:d2:6e:60:19:a9:c5:a0:9e:5e:
68:61:2d:d5:24:13:c7:54:ec:f6:b1:c5:02:d4:56:
2b:be:59:5e:3f:ac:07:e3:c3:62:96:3c:af:aa:73:
5f:d7:33:31:6d:0c:75:8b:b9:61:cc:01:e4:1b:ea:
72:6a:63:a1:42:b6:99:88:20:e7:f9:10:25:e1:95:
8d:6f:f9:b2:7f:af:8e:2f:ca:83:cf:52:7d:72:25:
6d:9a:5e:83:a5:fe:22:6f:71:52:95:3b:80:df:5b:
f4:cb:cd:65:42:85:d0:d8:9c:e6:9d:df:d0:b2:87:
de:ca:d3:93:08:ec:b3:b9:77:54:03:64:66:e8:f7:
19:6c:ae:93:6e:72:fb:43:62:1d:14:9b:46:0e:91:
b0:c2:5c:17:83:ef:6b:e8:70:e8:8c:1e:23:57:5c:
52:3b:a7:41:ba:0f:a6:62:3b:d6:99:45:15:ad:d4:
db:bf:25:29:75:bb:68:ff:63:c9:86:48:86:8b:d2:
b4:93:92:58:79:ff:f9:0a:48:b8:3e:c1:50:75:08:
1d:63:81:47:86:84:51:83:53:db:3a:e5:ba:ab:d3:
0b:ee:a2:d3:e0:13:77:34:ec:b2:23:01:4d:9b:7e:
3d:09:d3:b6:a3:05:93:80:c8:e2:3f:f6:4c:de:e4:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:40:B7:6F:63:D9:F2:7D:95:FA:5F:49:2C:CD:11:97:08:29:69:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a48d047-020d-3a7d-a62c-e9fb60d6e703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:95:80:e4:91:58:88:ae:cc:26:4c:e9:01:22:26:0c:fc:d4:
9e:76:7b:d1:cd:e0:b5:3a:05:a4:9d:08:6b:1e:a0:11:fc:2f:
f4:ad:8a:45:a2:29:a2:f2:e6:0e:45:60:fe:37:0a:92:73:a6:
d8:ef:5e:a8:f3:7e:46:46:54:5a:c8:1c:59:1b:1c:26:ad:00:
3f:32:30:42:46:57:95:7b:52:d0:3d:b5:8c:4b:1a:8f:68:97:
50:04:3a:7b:14:50:11:61:05:4e:3f:1f:06:b4:7b:ab:f4:3a:
39:a8:4f:bb:04:65:fb:0e:ce:df:b6:01:e2:c7:69:e6:71:40:
87:ff:b0:1d:a7:50:e2:f8:6a:37:b1:54:d8:e5:aa:ee:e5:8d:
7e:79:af:19:1f:30:46:a8:22:7d:5c:7f:ce:78:6f:4e:02:76:
e8:6b:4b:d7:56:8e:a7:70:3a:f4:4f:96:bc:86:0e:7f:40:69:
6f:e6:c2:25:9e:53:57:16:d3:d7:0a:d8:5e:ea:5c:3c:83:ef:
07:e8:9b:47:07:cb:c2:a4:f3:af:ae:83:aa:71:d3:57:c6:bb:
74:48:fc:bc:fc:ad:a1:a4:2a:b4:64:77:ba:c9:ab:a2:c9:d7:
f9:56:96:a9:69:02:78:8a:e7:a5:8e:c6:9f:13:51:fd:6e:9d:
78:03:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:25 2025 by rpki-client