Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8de46e9d-7d52-371b-8f10-948f69cfb1aa.roa
File: 8de46e9d-7d52-371b-8f10-948f69cfb1aa.roa (raw, json)
Hash identifier: pYwvlT5OmiNmclLAMzAixsbL5EQFMhW+szQ5AZEYyw0=
Subject key identifier: 51:12:CB:EC:EA:99:BF:A6:32:E8:E1:8F:E8:06:57:12:B2:06:79:2C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584902A5DC6B7E0F762C09E69F30
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8de46e9d-7d52-371b-8f10-948f69cfb1aa.roa
Signing time: Wed 26 Feb 2025 11:39:38 +0000
ROA not before: Wed 26 Feb 2025 11:39:38 +0000
ROA not after: Tue 27 May 2025 10:39:38 +0000
asID: 30036
IP address blocks: 108.166.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:a5:dc:6b:7e:0f:76:2c:09:e6:9f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:39:38 2025 GMT
Not After : May 27 10:39:38 2025 GMT
Subject: CN=555789ed-c55e-40bf-a1d1-86ba549e1aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:fd:da:d1:b6:6f:9b:ab:05:1f:6e:6c:b3:
5e:23:0d:3b:00:ee:8e:cc:b8:96:e9:be:cd:04:38:
79:e8:00:1e:d7:b0:59:cc:84:83:64:9b:67:3b:9d:
b2:65:d8:1b:5d:b9:89:e6:7d:0b:ce:c4:d5:df:23:
2d:18:4f:ac:0b:c2:93:e3:0a:3e:55:f7:53:38:01:
66:8f:86:d0:50:d2:c0:53:82:11:b2:8c:e2:72:7e:
44:ac:5a:82:4f:23:da:f8:73:57:43:21:bd:10:e0:
30:6b:6f:65:1a:12:09:e3:9d:5b:6c:bc:56:ee:d0:
d2:8f:7f:6e:74:bd:a6:33:e0:82:e6:a7:99:d8:43:
09:36:7c:b1:14:f2:0c:83:5d:9a:85:28:6e:0d:19:
34:b5:ff:0f:ef:ac:bc:d5:58:ed:e8:ea:17:37:e7:
60:2c:a2:27:f5:10:99:ea:10:2b:2d:83:fe:02:1d:
8f:23:06:7b:0f:5a:06:19:9d:1c:7d:28:11:d9:f2:
a9:92:dc:d7:a9:18:16:ed:1b:ff:41:a0:d6:42:bc:
d1:01:28:40:6e:c2:3a:06:05:de:f5:34:01:17:15:
d6:1a:22:7c:38:63:10:85:36:5d:7a:91:b7:de:2b:
0e:4c:dc:34:65:4f:8b:06:c1:45:57:b1:7b:8c:e0:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:12:CB:EC:EA:99:BF:A6:32:E8:E1:8F:E8:06:57:12:B2:06:79:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8de46e9d-7d52-371b-8f10-948f69cfb1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:31:9d:9f:95:eb:14:f2:08:0b:e2:91:01:60:b5:09:95:47:
aa:f3:0c:00:e5:ba:84:34:5e:db:21:83:cb:e6:23:0f:05:c2:
d2:b9:be:b3:b5:28:61:ef:e5:ef:ad:60:f2:11:0c:04:cb:12:
b5:92:8c:bf:46:1d:a7:1b:11:bf:e3:a4:52:82:90:f6:12:7b:
30:94:63:da:86:6f:21:75:8d:ad:c7:75:09:64:6e:5b:c7:3e:
69:82:a3:3b:e1:fe:74:16:15:fc:53:50:0c:fe:43:a5:d8:30:
ff:48:05:63:cc:e6:09:0c:77:ba:0c:23:04:bc:77:a8:96:dd:
c6:d0:aa:09:10:7d:69:d5:8c:8f:81:58:0d:20:cb:4e:c6:6e:
2a:77:9c:0c:06:84:15:d2:3f:10:23:f6:0a:fb:c3:a9:b4:34:
b0:d9:32:63:70:0c:69:ff:79:03:72:1b:dc:cb:70:3b:bc:6f:
e0:44:12:f5:d2:da:0f:6c:1b:61:b4:ea:c1:a3:03:e6:5b:a2:
06:0c:26:fe:57:11:2f:d2:d6:12:46:82:50:05:ad:d2:63:2e:
0a:29:16:50:a8:7e:31:c9:47:38:d3:11:4e:c4:c4:cd:d8:84:
70:09:f0:48:8d:3e:06:12:71:3c:cc:e3:67:fd:23:99:67:4c:
46:6f:86:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:51 2025 by rpki-client