Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cedce60-24a7-3db1-941a-c4453e83a0f1.roa
File: 0cedce60-24a7-3db1-941a-c4453e83a0f1.roa (raw, json)
Hash identifier: SrKT/SslcihqpmjrJ0XCbKwWZ7v470GPZikn5n1zcmA=
Subject key identifier: 0C:90:51:5C:6B:72:34:83:D1:CB:59:41:C7:44:55:1A:4D:61:62:7E
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858495423604999A515E1A976C6C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cedce60-24a7-3db1-941a-c4453e83a0f1.roa
Signing time: Thu 27 Mar 2025 16:13:00 +0000
ROA not before: Thu 27 Mar 2025 16:13:00 +0000
ROA not after: Wed 25 Jun 2025 16:13:00 +0000
asID: 30036
IP address blocks: 108.166.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:54:23:60:49:99:a5:15:e1:a9:76:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 27 16:13:00 2025 GMT
Not After : Jun 25 16:13:00 2025 GMT
Subject: CN=dbd65c84-35cc-4ef4-a731-a1e191feb901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:39:17:04:bf:dd:41:7e:99:5d:30:c3:ae:
c1:ac:5f:c2:95:28:94:c8:e8:85:a2:6f:16:89:47:
98:0f:09:d4:d6:9a:f5:6e:10:b5:73:66:c5:95:1d:
97:12:55:73:49:07:ff:0b:31:dd:7e:9a:a5:f8:7e:
3f:0e:e9:ac:31:d4:0a:e7:7d:49:ad:f6:01:25:bf:
d5:73:1f:e6:8e:14:04:d7:98:49:77:f2:e8:48:c6:
2a:90:9b:d5:d3:45:66:ae:0b:93:77:d5:d8:26:ea:
3f:fc:f6:2f:2b:5b:d5:26:3d:f2:5f:26:fe:14:4f:
22:c6:c6:5a:50:55:6d:0e:3c:42:ad:74:7e:49:a6:
f3:50:18:85:00:b3:1b:df:b3:6a:e3:6a:a1:0b:1f:
d4:f4:75:d2:04:f1:4d:54:79:75:33:9b:56:57:df:
8e:d4:52:95:91:9c:06:f0:49:7a:0c:68:a5:67:ac:
52:40:ea:50:e7:59:6e:c7:d3:4f:dc:b4:07:85:0a:
72:88:4b:27:53:7d:2a:10:42:30:c1:dd:36:7b:d8:
9f:a6:6d:e1:16:ef:68:51:21:f0:d0:a0:9d:55:f7:
15:66:a8:3f:88:e6:ec:43:03:66:8d:03:83:bb:f5:
91:7a:b4:77:ef:04:70:52:67:dd:38:82:dc:b2:87:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:51:5C:6B:72:34:83:D1:CB:59:41:C7:44:55:1A:4D:61:62:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cedce60-24a7-3db1-941a-c4453e83a0f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:ca:e4:b0:49:d9:43:0d:39:30:e6:ef:d5:c4:1b:74:c3:6c:
87:b2:41:ee:d3:b3:9a:78:9a:bc:8b:fe:cb:8b:e7:07:09:de:
4f:7b:bb:7d:7e:b8:d3:ab:57:91:39:12:7a:e8:58:96:e5:73:
a5:bf:3f:88:e5:ae:c5:55:d6:1f:1a:10:4d:b0:a2:ae:ff:e1:
88:90:6b:2d:28:b4:18:81:f3:36:e5:8f:d2:67:d0:dd:27:53:
18:99:9c:f9:2a:cb:e3:d0:80:ef:e1:6c:e4:4b:95:9f:5d:83:
8a:fa:7e:61:96:05:ce:45:eb:d3:53:bb:75:5a:40:69:e9:0b:
4d:e4:74:2a:78:d1:89:ad:12:58:9f:41:5d:a1:c1:54:a9:17:
e2:9c:ab:00:02:c1:5d:d8:d6:f0:eb:dd:e7:9a:ef:5d:3e:19:
3d:e1:04:42:f4:57:76:ad:c8:04:91:82:18:3a:82:6d:a2:e8:
9e:8d:33:5b:25:b6:db:f4:1c:60:03:15:3c:a5:e7:4d:5d:da:
2e:a5:05:bf:bb:8e:9f:fc:08:c4:64:a2:4e:52:ed:70:91:2e:
31:15:e7:5f:3f:3e:70:48:e0:0b:19:03:31:1f:af:ab:f3:76:
71:6d:9e:99:a4:f6:7f:f2:af:14:ba:ea:d6:a4:33:3b:1a:1d:
2b:ce:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:29 2025 by rpki-client