Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa
File: 6e3249de-4e8c-377d-980e-6a30cc94815e.roa (raw, json)
Hash identifier: DXvNbSg1pnrO4yFD+ghZ6xEqsZO3XTzsGkf2G+OG+BI=
Subject key identifier: FB:2F:06:FE:94:09:7D:68:F4:6D:23:35:22:58:F4:9A:4A:7A:C6:63
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858491C0C2433B3BCE1F9EF516AC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa
Signing time: Fri 07 Mar 2025 14:00:52 +0000
ROA not before: Fri 07 Mar 2025 14:00:52 +0000
ROA not after: Thu 05 Jun 2025 13:00:52 +0000
asID: 30036
IP address blocks: 108.161.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:0c:24:33:b3:bc:e1:f9:ef:51:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 7 14:00:52 2025 GMT
Not After : Jun 5 13:00:52 2025 GMT
Subject: CN=4d8fd216-c388-45fc-a6ab-2d3a95c66162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:ae:79:55:ea:36:3d:3d:12:e6:67:87:b6:
67:55:ee:4e:18:2d:58:85:e1:67:80:ed:6c:95:56:
6a:6d:6a:8c:44:d1:ee:1b:24:a3:fe:b3:b6:65:84:
88:45:bd:96:b5:03:f6:4f:51:10:a5:2f:b1:13:d8:
1f:e3:2b:d7:a9:ff:b7:85:ff:1e:76:a6:71:e2:fc:
86:db:05:03:45:47:a3:b1:4d:86:b8:4e:2b:34:d8:
71:7e:e2:03:24:ab:c4:3c:49:13:6f:d7:47:4d:d1:
3c:26:58:b8:72:d0:ef:07:33:e4:5d:49:f1:67:02:
89:f9:e1:7c:1b:a7:64:f4:66:22:97:35:78:bf:07:
ac:73:cd:9f:c9:5a:79:ee:f4:a1:cf:15:10:c3:eb:
c5:f0:36:d0:90:fb:d6:ad:71:0f:d7:7e:7c:82:18:
8b:40:e9:8c:ec:b1:db:d4:8f:e8:6e:e7:f6:80:3a:
c0:91:b7:93:b7:be:f5:c0:02:85:f0:12:59:1f:a8:
1a:5c:65:a7:c3:dc:10:9e:0c:a8:46:30:95:d6:39:
34:e0:03:67:ef:cb:b0:de:1e:bf:a3:82:71:1c:0b:
e4:c5:c9:08:ec:e7:1c:f1:d2:6f:ff:9e:0a:4d:77:
72:3a:f3:21:a9:87:a8:7c:67:bc:ae:8a:34:f2:f5:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:06:FE:94:09:7D:68:F4:6D:23:35:22:58:F4:9A:4A:7A:C6:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.161.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:17:a5:f3:59:01:f5:26:ff:ba:20:aa:ef:2c:83:b1:d5:0f:
b9:ad:6d:82:db:4f:8a:ba:9d:87:30:85:f2:88:6d:f3:b4:ca:
b2:4e:36:4e:fe:59:9e:05:2d:14:b4:57:f7:db:70:42:a8:4f:
10:5b:d0:c7:8d:de:41:92:c5:0b:e5:13:62:04:1e:c3:c8:b5:
04:f4:01:06:6f:e8:ac:8c:7b:c4:4a:6a:b0:b5:00:bf:df:13:
45:38:e8:63:1a:b3:38:79:96:0d:06:3a:a6:3c:c3:ab:2a:d0:
f6:bd:5d:ad:eb:8a:32:9c:e1:a2:1c:d3:2b:05:82:56:f7:16:
d5:cd:0e:f1:6f:eb:66:9c:79:0a:e3:7f:6a:c6:ed:a7:15:af:
d5:4a:ad:00:7b:9a:66:f1:64:ba:98:da:ee:5f:f7:65:19:9f:
de:9d:28:16:e7:34:05:aa:3d:c7:27:83:5e:57:fa:f6:1a:50:
07:32:f3:a6:56:40:ac:7b:24:a5:36:b8:d4:b1:7f:87:bc:99:
93:72:e3:7e:9b:b7:1e:99:b9:0b:4c:fc:f0:94:22:c4:95:fe:
43:16:5f:b8:1f:21:db:fe:ef:c1:d3:14:f7:48:fc:a7:9e:5f:
03:3f:9b:d7:25:62:3d:ee:19:8a:80:fd:6b:34:dd:77:55:05:
f8:ed:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:38 2025 by rpki-client