Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa
File: c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa (raw, json)
Hash identifier: sAY4T6GEANj5lIeRf7YyNU4AWFcsUyP+Dmlp/DAO+XU=
Subject key identifier: 9A:D4:00:4C:D1:AF:6F:5D:B3:81:A4:9C:0C:8C:6B:77:E2:45:1D:FA
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848DBFEE57469E15C85205F9200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa
Signing time: Wed 12 Feb 2025 15:22:30 +0000
ROA not before: Wed 12 Feb 2025 15:22:30 +0000
ROA not after: Tue 13 May 2025 14:22:30 +0000
asID: 30036
IP address blocks: 108.166.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:fe:e5:74:69:e1:5c:85:20:5f:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 12 15:22:30 2025 GMT
Not After : May 13 14:22:30 2025 GMT
Subject: CN=64199b89-1fb7-4c85-8ddc-cff4aca94ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:55:2b:b2:29:fb:86:f8:09:f9:e4:fa:09:
cf:5b:f4:d5:83:3b:58:48:e8:39:5d:3e:1e:06:2b:
07:bb:6e:89:07:1f:58:ad:65:5c:ff:62:c7:75:43:
a2:d0:ba:ad:48:5d:de:f0:0f:ae:a4:74:41:d7:9d:
55:45:02:ff:3f:d6:b5:fd:01:43:0f:fc:b5:37:33:
b5:56:27:0c:11:c9:29:91:18:54:a9:26:33:27:8f:
3b:57:4c:21:b9:09:30:7c:8e:8c:46:49:00:16:a1:
56:50:dd:76:a3:ed:b9:86:2c:e9:e3:9f:e0:20:ad:
18:84:26:74:0e:71:8a:2a:9e:3e:47:4c:22:1a:a0:
d1:1d:6a:c3:8d:6b:64:95:cc:a3:30:5e:94:61:07:
d5:f2:b7:6a:65:d2:8a:4e:7e:7f:ce:c6:c2:2a:e1:
5c:b0:b8:06:e1:97:fb:59:88:3a:68:d5:56:f6:ec:
14:1c:19:00:61:57:73:13:e7:d4:35:3d:aa:30:05:
8a:e7:c1:4a:a3:80:68:8f:9c:fb:3e:f9:0d:46:c9:
30:a8:67:6a:21:1d:41:d4:0b:09:c6:ef:59:29:6e:
9d:1b:b1:0b:16:7f:28:1d:9d:6d:4d:59:6f:86:aa:
d5:3f:ef:49:f0:2e:7d:ae:ca:13:3a:14:13:c7:ad:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D4:00:4C:D1:AF:6F:5D:B3:81:A4:9C:0C:8C:6B:77:E2:45:1D:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:bd:64:df:60:e4:40:57:3c:87:cd:48:b0:30:9e:73:4f:5f:
2c:ad:ad:2c:d5:c3:22:49:a0:69:c9:d5:6f:85:5d:94:32:b3:
82:f4:3e:50:09:a3:66:0e:26:d4:0a:2f:16:37:0b:df:bd:6c:
43:bf:ec:6f:1c:6f:af:84:3e:89:82:10:56:f6:20:3a:3b:de:
f7:c9:bf:95:1d:ac:36:30:06:5a:62:4a:f7:f3:14:d2:5a:27:
98:5d:b9:53:00:5a:9d:3c:ea:83:ee:21:12:e4:4b:3a:d4:c9:
e1:62:0c:fa:2a:5c:5b:01:08:c9:dd:03:f1:49:3b:23:71:a5:
d2:88:5f:30:27:1b:8a:9c:bf:ad:57:e7:80:40:48:e5:53:cf:
71:eb:b5:9f:23:41:c6:7a:a1:d0:b2:f9:f3:47:50:49:93:dd:
b2:3f:aa:23:7e:4d:bb:b8:23:75:c1:d6:bf:77:45:92:e6:13:
30:6b:90:4e:8c:68:93:0a:9c:c9:ae:6f:ab:36:36:8b:c2:77:
02:8d:6c:82:4c:91:35:a8:b6:30:8b:8a:0f:84:a0:c1:e9:a8:
57:26:3b:26:3f:f4:98:e7:2e:d8:ca:9a:e3:2b:3b:4e:48:2d:
6f:26:29:94:42:7f:b8:be:77:09:7c:e6:6e:cb:59:31:11:f3:
57:78:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:39 2025 by rpki-client