Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e596bd5c-3262-3cdc-8290-5dbfcedef796.roa
File: e596bd5c-3262-3cdc-8290-5dbfcedef796.roa (raw, json)
Hash identifier: /AsO6bEqgnFZ3GPIKXf/li1lhbl0XbJlA6xTsa1+Aa0=
Subject key identifier: 83:F4:E8:F6:E9:A5:1E:4B:7D:41:37:2D:F6:F7:C9:4F:62:2D:9C:31
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584902A5C95620664E97C849A200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e596bd5c-3262-3cdc-8290-5dbfcedef796.roa
Signing time: Wed 26 Feb 2025 11:39:29 +0000
ROA not before: Wed 26 Feb 2025 11:39:29 +0000
ROA not after: Tue 27 May 2025 10:39:29 +0000
asID: 30036
IP address blocks: 108.166.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:a5:c9:56:20:66:4e:97:c8:49:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:39:29 2025 GMT
Not After : May 27 10:39:29 2025 GMT
Subject: CN=25cd45d7-e432-452d-9215-8e31209c919e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:ea:62:f9:e3:05:87:bf:ad:64:a4:5d:9a:
40:b8:b6:a0:64:09:02:db:2a:9d:3d:de:11:8c:e8:
c8:89:2f:72:da:06:e4:7c:77:25:99:fd:c9:f4:4c:
82:bf:89:79:30:25:e0:bc:65:8d:e2:be:2a:81:e5:
84:95:a6:f1:7f:2b:c8:93:a1:02:33:0b:78:01:c4:
bb:44:9d:ab:1e:9b:1d:cb:b2:f0:46:f8:17:be:29:
86:56:8b:99:d2:90:60:73:14:2a:cf:f4:84:bd:18:
b7:fe:a0:e0:fc:e4:51:83:0e:d5:bd:34:7f:03:a6:
78:b0:a8:65:a0:f1:14:f9:ec:c0:18:ac:0c:81:2c:
3b:60:95:fd:fc:e1:29:82:47:0b:07:b5:a2:bd:e9:
26:d3:ae:39:01:0e:46:31:66:c3:17:1b:b0:ea:27:
f5:d6:9a:33:66:56:5c:a9:be:53:f1:3c:9c:1b:94:
fa:0c:86:cd:f9:4a:3e:33:76:bc:7a:88:04:02:78:
13:ea:87:d2:15:69:c7:1e:ea:d4:9c:7d:bc:19:20:
91:7b:35:03:27:9a:0c:a3:30:72:20:90:a6:17:f8:
16:9d:bf:b2:f2:2f:a6:4f:8b:87:b8:c6:d5:51:6e:
04:92:cb:0b:10:78:96:59:42:4b:2b:ed:b1:25:6c:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:E8:F6:E9:A5:1E:4B:7D:41:37:2D:F6:F7:C9:4F:62:2D:9C:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e596bd5c-3262-3cdc-8290-5dbfcedef796.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:68:56:da:d2:22:30:30:91:5e:69:c9:f0:83:68:e4:34:8d:
5e:da:36:bb:b6:8d:41:4a:87:17:6d:23:2b:51:7e:8a:fe:8b:
bf:d9:c4:7f:37:b9:42:c5:4a:40:4b:a6:d7:f4:4c:87:98:15:
0d:be:dd:55:2b:50:63:be:d4:c0:33:60:bd:50:a0:f8:06:2a:
b0:aa:7d:99:91:2d:5a:49:5e:c9:9d:df:4f:d8:e1:b5:3a:c2:
21:cc:a2:37:54:b0:48:42:47:7e:8b:30:fa:38:13:20:e4:4a:
3a:87:1f:ba:94:57:09:a2:d8:f4:d0:d7:75:e1:d1:f4:8f:54:
38:66:10:c8:f0:8c:1f:c9:9b:65:a3:7f:e2:a5:55:f8:5b:03:
6d:4b:17:de:e0:70:70:7d:52:ad:1c:b3:b6:37:84:26:78:a0:
d7:69:28:b5:07:b2:aa:6a:d1:40:78:0b:81:82:e3:10:96:d8:
a5:84:3a:0a:68:92:c0:fe:d4:fd:77:26:fd:65:15:e6:dc:0e:
4f:b0:e6:4c:e5:36:fd:2e:4d:d9:ac:04:49:2d:96:80:16:44:
b3:26:d6:33:68:e5:44:2e:61:f3:ef:22:0f:03:09:05:02:4b:
d9:a0:bc:5a:d8:da:0b:82:56:f4:24:2f:9d:39:2d:01:85:9d:
39:5b:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:46 2025 by rpki-client