Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36f3ae61-d72c-3948-b50f-508c610e5e75.roa
File: 36f3ae61-d72c-3948-b50f-508c610e5e75.roa (raw, json)
Hash identifier: f/Z5WCfnMh68PRW+ADS6DGe18Uld+c+wr+eH29FXi1k=
Subject key identifier: 98:6D:B2:AF:86:E3:5E:2A:9C:6D:B3:4A:64:46:17:1D:CF:79:65:E9
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584902A5D7D0F8C395F2DC15F8E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36f3ae61-d72c-3948-b50f-508c610e5e75.roa
Signing time: Wed 26 Feb 2025 11:39:36 +0000
ROA not before: Wed 26 Feb 2025 11:39:36 +0000
ROA not after: Tue 27 May 2025 10:39:36 +0000
asID: 30036
IP address blocks: 108.166.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:a5:d7:d0:f8:c3:95:f2:dc:15:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:39:36 2025 GMT
Not After : May 27 10:39:36 2025 GMT
Subject: CN=6706bbb4-c2a3-4a73-a22e-5b297150e47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:b7:b7:ac:c7:6e:74:30:18:62:ae:53:fa:
0a:90:1b:98:7d:34:3c:88:d8:d1:5b:4c:f5:64:a7:
fc:f1:0b:c5:0f:a2:4e:30:e6:c3:32:6a:20:93:8c:
ba:32:5a:f7:de:12:92:a6:1c:3b:bf:37:4d:aa:e5:
44:46:74:79:18:2c:69:89:3d:fe:fc:a1:d6:d1:44:
4b:71:d5:be:59:dd:ee:03:50:79:3f:81:8a:db:04:
28:f1:b9:29:d5:b8:1a:55:f6:24:a8:b8:77:01:da:
71:9c:53:b2:c1:d5:40:96:47:92:d0:cc:26:aa:bf:
25:0b:5c:9c:46:73:e0:bc:19:76:51:d9:9d:15:ef:
e1:ed:7d:5a:a9:c1:2f:86:a7:32:93:43:f1:85:ad:
66:96:83:07:13:22:03:92:1b:e5:27:f8:db:4e:e8:
8e:5a:d6:7f:bf:e8:54:6d:73:d8:11:e9:d6:ef:67:
5b:1e:f1:43:6f:76:5d:ae:43:ae:23:f0:7e:69:9a:
6b:0e:17:5b:4b:a0:81:4c:8a:69:93:6c:42:40:10:
5f:bb:6d:ea:3c:32:35:86:a6:62:07:80:47:6f:f1:
87:82:5b:1d:61:f6:93:f5:75:8f:3d:a5:67:b1:55:
b9:fb:50:45:80:c3:b2:fd:c8:be:62:67:49:12:67:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6D:B2:AF:86:E3:5E:2A:9C:6D:B3:4A:64:46:17:1D:CF:79:65:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36f3ae61-d72c-3948-b50f-508c610e5e75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ca:1f:d8:fb:1d:5d:09:19:a7:71:3a:56:90:1c:e6:2f:33:
98:b2:3b:26:95:d2:8e:91:0a:ad:07:a7:73:eb:3f:bd:88:fc:
77:3b:08:fd:2a:ae:70:ec:18:6d:ce:79:82:ef:db:10:55:2b:
a3:45:8e:8d:b0:36:e9:5e:56:a4:b2:b1:61:8d:db:ec:54:e2:
15:10:d1:86:24:90:5c:55:bd:f7:e3:40:55:3d:04:7a:7d:d0:
02:67:42:1f:bb:fa:a0:5e:20:21:06:45:28:96:ea:3b:10:01:
54:fb:95:1d:48:e8:f6:65:2e:1f:8c:ed:0b:ec:07:e9:51:64:
57:dc:35:d9:73:2b:6d:93:ae:b6:39:d9:6a:97:40:91:73:52:
19:05:76:bb:84:03:b1:82:32:74:53:d8:49:35:28:3f:b8:ca:
d6:b4:a0:57:04:48:e7:20:cf:ac:18:40:e8:0a:96:59:c5:c0:
bd:27:b0:d3:9e:70:98:d6:ac:e1:88:c8:3a:4e:6d:da:64:ef:
24:81:14:ac:6b:6e:6c:e3:bb:cf:53:d9:64:e3:82:94:15:0f:
12:e0:f6:93:34:7b:0b:96:cc:48:ea:ff:89:35:b2:93:e7:3d:
7d:c6:89:85:d9:20:c8:7b:9e:40:9b:05:b3:8a:82:18:58:8d:
36:d3:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:49 2025 by rpki-client