Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa
File: ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa (raw, json)
Hash identifier: DnQKKvdPUhK7UTxUzMAmmO9rly/IE7o0Wtc4IagFB1k=
Subject key identifier: 5A:DC:67:E4:B9:F3:66:CD:47:A8:BB:33:0A:B4:4F:0F:8E:B5:ED:63
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858491C0C24E46974AAE8BCE452C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa
Signing time: Fri 07 Mar 2025 14:00:52 +0000
ROA not before: Fri 07 Mar 2025 14:00:52 +0000
ROA not after: Thu 05 Jun 2025 13:00:52 +0000
asID: 30036
IP address blocks: 108.161.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:0c:24:e4:69:74:aa:e8:bc:e4:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 7 14:00:52 2025 GMT
Not After : Jun 5 13:00:52 2025 GMT
Subject: CN=d5051f10-fdab-47d9-a1b6-5f559a946f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:b0:e7:27:f6:d4:9d:50:d9:0a:2d:a6:51:
f5:0f:cc:48:7e:a0:e6:d3:c0:93:4d:3f:f3:ea:3e:
03:bf:ca:ff:8d:5c:72:ad:91:68:5b:02:9e:8f:ef:
c8:7d:a5:be:f7:53:d4:b0:db:35:71:76:a9:8c:e6:
cc:4f:a0:63:23:07:0e:77:72:b2:f6:bf:6b:92:73:
ed:45:4b:a9:20:6c:cd:29:dc:16:d5:fd:8b:99:d1:
3a:dc:77:e7:44:15:67:84:40:e8:75:71:7f:9b:cc:
97:91:d7:51:3d:8b:72:69:e6:a7:39:7d:d2:84:c2:
13:98:b7:a7:55:7a:27:38:9a:42:dc:2b:78:dc:e9:
4d:56:e9:19:ef:f2:a9:49:99:9e:cf:a6:0d:92:d4:
b3:44:a5:c1:b2:80:f0:38:b3:78:77:8c:53:23:d9:
0a:1a:3f:db:fa:34:47:f5:60:99:e9:32:f3:e9:a8:
64:98:b5:48:60:e6:32:08:5b:af:be:9e:e9:7f:85:
7f:2d:40:c3:7a:19:2d:f1:ad:9f:35:ab:54:9d:9e:
15:4f:5b:fe:e0:89:7f:de:15:2e:6b:84:f0:bd:35:
e5:ba:bd:a1:6b:c8:2e:f0:17:67:50:76:d1:a1:a4:
dc:dd:54:77:2b:7a:56:5b:92:7d:18:3b:ab:44:df:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:67:E4:B9:F3:66:CD:47:A8:BB:33:0A:B4:4F:0F:8E:B5:ED:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.161.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:3b:d9:ff:d5:5e:84:89:47:66:47:85:5a:88:e6:dd:a1:14:
4c:3c:a8:75:3e:af:43:10:10:36:7f:fa:3b:57:e7:7d:5e:06:
f6:ff:25:8e:9c:91:24:1f:e3:6f:75:5e:8f:f9:45:0b:04:02:
21:fb:8a:50:94:f6:1e:f6:e1:32:0a:23:b0:e0:9b:66:87:bc:
2d:f4:0b:30:06:98:25:fe:b5:b0:9d:8b:cb:45:ae:54:d6:bf:
5f:75:6f:27:b9:73:88:6a:d8:8f:22:18:1f:f1:af:4d:fb:bb:
fe:c7:a0:ef:c5:6a:4f:a3:ad:27:6c:4e:fd:32:dd:27:41:60:
98:be:23:b1:17:b4:9b:e7:84:58:11:f4:8d:99:ee:94:d9:ce:
e7:18:e1:9d:2f:6b:0e:dd:c9:1d:39:13:44:ab:3d:f4:2e:9b:
d9:7a:cc:a4:55:4d:7b:9b:4a:63:d8:20:4b:b0:4b:72:a2:83:
ce:03:78:c6:8f:16:e8:bb:dd:3d:79:2b:43:d9:d5:52:f2:77:
6b:3f:09:c9:e6:eb:74:fc:4e:68:f1:0c:83:d2:f5:13:be:66:
d1:ad:58:60:7f:ea:45:8a:52:3c:13:f3:4c:2a:7f:5a:b5:fa:
19:de:c3:4f:a3:e9:91:e3:74:b2:4b:58:77:68:d3:d4:79:0e:
fc:e7:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:23 2025 by rpki-client