Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb3967ac-db0f-3973-83a2-7bfb7e825424.roa
File: cb3967ac-db0f-3973-83a2-7bfb7e825424.roa (raw, json)
Hash identifier: OawHH7tYNjo4bTNkKOu+6VxbjimCov0cR3zYIUuvcrw=
Subject key identifier: EA:87:32:C8:B7:3F:F0:F2:49:51:F0:51:48:F8:82:01:F9:E3:66:A3
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849106E86EA2B67230DEBCB0580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb3967ac-db0f-3973-83a2-7bfb7e825424.roa
Signing time: Mon 03 Mar 2025 10:09:27 +0000
ROA not before: Mon 03 Mar 2025 10:09:27 +0000
ROA not after: Sun 01 Jun 2025 09:09:27 +0000
asID: 30036
IP address blocks: 108.178.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:6e:86:ea:2b:67:23:0d:eb:cb:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 3 10:09:27 2025 GMT
Not After : Jun 1 09:09:27 2025 GMT
Subject: CN=374bfba5-9692-403d-8b81-0eee7c0b1322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:0b:a9:31:18:88:25:18:8c:6a:5a:31:db:
45:ce:33:38:52:ed:69:a4:86:e9:f3:b0:e9:6a:7c:
b9:dd:6d:bb:55:84:3c:18:56:2c:7c:a8:c1:e3:6f:
0b:d6:ae:d9:13:90:c0:81:83:d6:95:e9:51:96:6f:
ec:7b:74:1f:6a:0c:b4:51:a9:c6:dc:bf:3c:44:54:
78:48:5e:b9:cf:10:90:51:9d:3a:4d:84:d2:d8:13:
61:a3:bc:f5:f8:db:8d:96:8d:c7:82:ce:7d:16:58:
68:0b:0f:1d:d8:42:e7:51:52:45:89:6f:fa:ee:c7:
dd:1d:c2:f0:a2:d3:73:3d:39:27:f0:c0:a2:74:ae:
2a:b2:dd:93:64:e7:92:59:99:5c:7c:76:21:fa:7f:
a1:95:09:4a:a1:ff:18:c2:36:0e:85:94:32:17:8b:
6b:f7:1c:18:87:bf:7f:eb:88:b2:d8:b5:c4:a3:b4:
45:92:a8:e2:04:d5:8e:ba:5a:2f:96:dd:ba:9a:ff:
26:2f:71:08:18:78:85:c5:b5:6a:d6:b8:27:5b:4f:
e8:07:fe:5d:c0:fd:f1:73:80:2e:02:ff:3a:c8:9e:
3a:a2:e4:2b:c3:b7:1f:4d:27:e6:35:60:19:56:d7:
bb:e9:a1:de:2e:e6:56:c9:27:a8:0e:69:4d:93:ed:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:87:32:C8:B7:3F:F0:F2:49:51:F0:51:48:F8:82:01:F9:E3:66:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb3967ac-db0f-3973-83a2-7bfb7e825424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d5:f9:c7:21:cc:11:85:3f:ce:e8:74:c2:71:e3:bd:ca:5b:
49:f7:1b:3a:bf:6a:e6:27:42:8b:5d:f8:42:c2:38:31:4e:6e:
ba:66:74:ca:37:d1:24:84:06:fc:44:b7:9b:0d:f4:36:b2:fe:
e9:7a:a7:b0:f0:78:67:3d:a5:51:03:3b:43:5d:b7:24:0c:f9:
7d:c6:10:8b:45:3f:d3:3f:3a:1d:50:d7:97:f7:be:d0:ea:b6:
29:36:7e:52:3c:6d:ee:18:47:27:87:2b:43:d7:83:4a:92:b5:
bb:47:74:b3:06:75:8f:a9:1d:00:ab:84:4a:a9:37:15:d7:9d:
72:7c:ae:4e:bd:0d:0b:5b:99:aa:d4:11:dc:03:ae:d9:13:36:
1b:af:3e:34:73:70:7c:28:3a:dd:5a:50:a4:59:17:4f:9e:20:
79:cd:88:3b:43:cb:91:83:e9:b3:fe:c2:7d:75:8d:a1:53:1e:
cc:45:48:99:e0:a1:a9:2c:db:5b:58:49:eb:e2:20:ab:75:af:
b0:e1:3b:b9:41:02:a9:7b:85:e3:65:d0:03:43:c9:3f:2f:f1:
8b:67:40:dc:ea:76:f8:1a:17:c6:58:1e:f3:8e:fa:63:21:66:
12:13:60:b2:6b:ff:94:b9:51:39:67:ef:c8:be:ec:a4:86:ab:
8c:5a:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:44 2025 by rpki-client