Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c57040a-21fd-373d-8b33-4e16f3470c09.roa
File: 3c57040a-21fd-373d-8b33-4e16f3470c09.roa (raw, json)
Hash identifier: EttUa5eYTC+fgqh7Cf9sKgRsP7aMwhL2wAcgQ64Z1c0=
Subject key identifier: E4:D5:D7:4F:7B:88:2B:1E:F5:8F:16:30:E3:21:05:7E:BF:A2:37:48
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858491076495EB8097838F97956C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c57040a-21fd-373d-8b33-4e16f3470c09.roa
Signing time: Mon 03 Mar 2025 10:25:05 +0000
ROA not before: Mon 03 Mar 2025 10:25:05 +0000
ROA not after: Sun 01 Jun 2025 09:25:05 +0000
asID: 30036
IP address blocks: 108.178.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:76:49:5e:b8:09:78:38:f9:79:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 3 10:25:05 2025 GMT
Not After : Jun 1 09:25:05 2025 GMT
Subject: CN=fcd7ce6c-035d-4fbe-897d-b8a4128c5e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:ac:16:cb:29:27:07:c0:5b:c5:99:80:b8:
7d:82:70:5a:ad:3d:d9:fd:82:c4:73:15:eb:6d:28:
19:8a:12:f0:79:0d:6a:d0:60:4a:ad:6f:48:8a:ad:
e2:a5:7d:36:93:45:9d:e0:e5:86:b0:13:a8:6d:31:
58:4d:77:6f:2a:ff:8b:da:1f:cc:a8:5e:25:82:e3:
bc:2a:81:fe:b8:dc:7a:6f:6a:3a:eb:c8:32:69:63:
b4:c8:31:b6:a4:47:cc:da:e4:7d:5a:5c:b6:d1:4f:
cd:48:69:a8:8d:f2:69:b2:16:42:81:1f:6a:89:e1:
a6:a1:a0:35:77:f3:e5:60:2f:7b:3a:9e:b7:d0:80:
dd:f0:4a:c4:06:a2:cb:18:9f:ff:31:41:eb:bc:fa:
a4:11:24:6f:de:8a:88:ac:29:76:3d:32:8f:21:c5:
84:2f:d8:c0:c8:4c:ec:58:f2:9e:76:56:d7:12:cb:
41:6c:f9:e5:13:f0:22:de:9b:0c:ff:91:a4:ea:09:
b4:ae:25:9e:7c:9c:c4:cb:0b:ac:79:45:6e:82:06:
e9:1e:ff:21:92:1c:18:7c:30:f9:87:05:33:ca:28:
65:29:11:f0:1a:72:4e:06:92:ad:8c:f6:23:e2:aa:
a6:67:35:4c:9a:d9:fc:2a:ec:f5:6a:24:d9:df:ce:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:D7:4F:7B:88:2B:1E:F5:8F:16:30:E3:21:05:7E:BF:A2:37:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c57040a-21fd-373d-8b33-4e16f3470c09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:12:36:8d:76:cc:21:7b:22:cc:a7:2c:bf:35:9d:fd:7d:23:
68:e2:b3:20:da:0b:11:e1:be:fc:96:85:92:fc:d6:26:ac:ba:
f6:51:fa:e6:4c:46:c9:22:dc:63:ee:75:fb:97:2d:ea:4f:ce:
b7:ee:e2:71:99:7e:4d:51:cc:07:1f:e3:17:57:99:f4:54:ed:
6d:83:8c:76:e1:35:67:7a:12:c0:22:0b:95:42:1b:0c:cb:94:
af:ff:04:50:4d:43:a2:8c:6b:11:72:62:76:b2:aa:f2:ff:c3:
e4:3a:4f:8f:e0:2e:96:e6:41:80:93:ad:da:cc:d6:d6:0a:8e:
8b:75:c4:c9:e2:3b:b6:56:48:fa:fa:59:bb:c8:2d:38:fd:7e:
be:83:b5:70:60:c8:be:5d:aa:43:37:68:6c:dc:0b:b8:4d:50:
78:8e:7d:e5:80:8b:3f:73:53:2c:dc:c2:cc:51:63:81:85:53:
6b:5b:b4:fb:b8:0c:03:fa:04:30:5d:93:66:a6:95:62:2a:aa:
39:a7:0d:97:50:24:20:04:98:6b:7a:f4:0b:fd:9d:72:fd:a8:
15:48:b3:0d:41:b3:7c:3d:bc:02:7e:8a:49:ff:9f:5a:24:1c:
75:2a:da:c6:d0:1c:a6:c1:cb:a2:00:c1:26:f9:67:cd:86:6a:
fd:79:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:54 2025 by rpki-client