Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa
File: 906dd976-e486-3c9e-8eba-5d9aec5ba475.roa (raw, json)
Hash identifier: kFYNQZKZ6uUPaWXytZFzA4BVbMUhw93QtLO+5sQC/Ng=
Subject key identifier: 8E:D5:EA:5D:90:6D:D7:D7:B2:AA:82:0B:C5:A1:E0:2A:3A:E9:F6:48
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584902A5DEE64A6D8EC74F44A0C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa
Signing time: Wed 26 Feb 2025 11:39:39 +0000
ROA not before: Wed 26 Feb 2025 11:39:39 +0000
ROA not after: Tue 27 May 2025 10:39:39 +0000
asID: 30036
IP address blocks: 108.166.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:a5:de:e6:4a:6d:8e:c7:4f:44:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:39:39 2025 GMT
Not After : May 27 10:39:39 2025 GMT
Subject: CN=6113b1c6-ff47-4045-96fb-c48cb85dfbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:7e:14:cc:9b:5e:b1:5b:bd:10:cd:88:25:
94:55:3c:27:d3:04:71:f0:34:bb:38:05:ca:a8:b4:
f9:18:10:a0:51:24:96:36:cc:f1:d6:60:b0:a6:b2:
8d:7d:d4:8f:70:8a:cf:1b:b1:21:b9:18:23:dd:11:
64:61:36:a9:bb:98:d8:5c:06:9d:ea:55:ff:19:38:
3e:6d:ab:0d:d5:bd:fb:65:a8:1c:a0:86:9d:a5:6b:
3b:dc:74:cf:7e:bf:5e:75:f8:6e:5e:13:10:31:f7:
0e:11:19:c7:7c:9a:07:c9:84:d5:ed:a3:33:a9:83:
c9:0b:3a:4b:47:21:83:dd:68:c0:da:a8:b7:0d:6d:
2b:ca:7e:27:14:43:1f:09:b9:b4:92:ea:8e:a7:2a:
37:d4:6b:f4:76:d9:f1:d6:20:b4:cf:82:fe:b1:7b:
7d:84:07:b2:56:f6:bd:b1:4b:5c:73:5c:3d:72:76:
bf:7e:47:6b:f5:cd:c0:c5:f8:13:28:08:25:d4:83:
23:93:0e:70:fc:53:4d:6f:cd:a4:5a:9a:83:6a:2a:
84:9e:e3:66:e1:a1:2f:1a:95:a3:8a:2b:b3:9d:ec:
ec:de:9f:ce:91:13:2c:15:10:90:31:16:24:36:45:
95:8a:69:b1:c3:bd:bb:d0:e9:0a:ae:7c:1d:08:6e:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:EA:5D:90:6D:D7:D7:B2:AA:82:0B:C5:A1:E0:2A:3A:E9:F6:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:19:0f:4e:a7:3d:d3:c5:f8:e4:55:31:a6:ea:03:37:79:b7:
1a:58:47:88:33:1b:34:92:fc:f8:a1:70:2a:83:0e:1f:09:4c:
8e:62:c4:ae:98:c2:2b:1d:34:b6:de:55:cd:f6:b0:92:b0:dc:
c1:b3:d0:78:fc:07:5b:d3:2e:c8:f8:66:55:94:d4:d5:90:d2:
55:b3:04:fe:d7:a9:0c:d2:5d:f9:eb:93:6d:a3:bf:ee:4e:64:
07:8d:23:1f:3c:a9:0b:02:2a:3a:29:c6:80:78:e9:c7:d5:a2:
6f:23:e4:54:9a:c6:81:53:e2:91:15:3a:cf:8d:3b:cb:c4:d3:
a9:96:36:02:35:a5:a1:8b:98:2d:19:f1:86:f3:e8:2c:fb:17:
f5:cf:83:fb:2b:34:ca:8c:34:6a:3c:35:f0:7e:d1:2a:89:4b:
2e:70:5e:da:b2:a4:f5:3d:8e:8a:53:7b:b9:60:93:68:a0:4f:
bc:2b:e7:43:88:f0:03:f0:b4:6a:f6:50:c8:b9:c9:de:05:6f:
33:8b:dc:f1:9a:fa:cd:ad:aa:53:d6:43:9d:5a:59:a2:3e:b1:
7a:11:70:ec:51:ae:07:68:ee:ce:1a:9b:69:34:21:f5:8a:f5:
26:da:2c:93:f6:09:4c:c5:04:f3:8f:c3:de:2e:a7:22:66:b9:
2b:63:95:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:17:55 2025 by rpki-client