Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f35276f0-246a-3323-89f4-2e26ac333010.roa
File: f35276f0-246a-3323-89f4-2e26ac333010.roa (raw, json)
Hash identifier: 1e7ks/ZtvvRx2VfyFdYjZiQv6ueYe/M4YBMR0/+QMtU=
Subject key identifier: FF:6D:D3:A6:96:A5:9D:67:98:B0:C4:41:84:EB:7F:AE:53:B8:94:45
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849107600AFA9526D9DD111EC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f35276f0-246a-3323-89f4-2e26ac333010.roa
Signing time: Mon 03 Mar 2025 10:24:31 +0000
ROA not before: Mon 03 Mar 2025 10:24:31 +0000
ROA not after: Sun 01 Jun 2025 09:24:31 +0000
asID: 30036
IP address blocks: 108.178.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:76:00:af:a9:52:6d:9d:d1:11:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 3 10:24:31 2025 GMT
Not After : Jun 1 09:24:31 2025 GMT
Subject: CN=b9c4c691-cb73-4cd2-97ec-bc09fd2be3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:de:38:a0:02:8e:75:32:c3:23:52:e0:d9:
c3:a5:fd:c9:8d:5f:7b:ce:74:22:5f:01:c2:bf:c8:
bf:d2:f7:b3:53:fd:b5:6a:1b:d7:83:f7:f8:9e:87:
9c:0c:b4:19:aa:67:d7:5c:ce:15:b8:17:b9:28:44:
b8:bd:ec:78:b2:fb:a4:25:31:25:72:0e:fd:fa:c2:
9f:d6:e3:98:71:71:d3:7a:30:10:1c:09:f4:2d:55:
f9:46:3b:1d:10:3b:4c:26:99:4d:c2:89:b5:af:f6:
6d:22:4a:1f:f4:bd:6d:0c:86:d8:1f:75:62:c1:ea:
3b:22:fd:3e:f2:13:26:3e:74:06:97:0d:5f:7f:5d:
e5:46:fd:f2:38:82:32:79:42:be:3e:4d:7e:c7:09:
f5:c2:36:ea:72:36:84:64:23:37:24:15:4d:28:f4:
26:f8:a0:c7:64:3a:e4:c9:fa:9e:fe:bc:cc:4b:bc:
dc:d0:42:e1:30:0a:42:f5:49:2e:cc:7e:c9:8b:34:
e5:60:0a:4b:5a:f7:43:3a:3e:8b:a4:e0:5b:59:c2:
7f:71:af:a6:a1:1e:05:27:74:c9:60:1f:da:0f:de:
5b:5f:f1:ea:2c:e2:f7:13:ce:cc:59:74:68:b9:ef:
5c:27:df:38:1d:08:51:70:0d:01:59:46:c0:b0:56:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6D:D3:A6:96:A5:9D:67:98:B0:C4:41:84:EB:7F:AE:53:B8:94:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f35276f0-246a-3323-89f4-2e26ac333010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:2e:50:33:97:85:d4:ec:ea:f6:36:80:d3:bf:3e:82:ad:09:
64:db:a8:fa:55:a2:cb:a8:ad:97:f8:bd:3e:07:97:e8:c7:fc:
07:b0:75:5e:bc:fa:c1:35:2e:af:3f:20:8c:7a:09:f6:c1:8d:
9f:5a:05:a3:df:25:6f:c5:5a:be:bd:3a:6e:36:68:1d:83:e0:
b5:7a:20:31:82:03:d6:30:a1:d4:db:01:e0:81:b0:e5:f1:8e:
82:9f:fa:7e:1c:97:a1:c9:15:16:c0:78:04:09:44:03:9b:50:
16:f8:f2:b6:d0:6c:3a:73:fd:05:02:cd:2b:1f:1b:bf:40:8a:
19:64:e2:d7:d6:8d:3a:fb:fc:09:9e:49:a3:3b:0c:e6:a1:5c:
65:36:bc:5a:e5:57:bf:28:17:73:f9:ac:f9:af:84:ad:0d:55:
0d:ce:c1:e0:71:f9:59:ff:6e:0c:7c:28:61:81:79:9b:2c:bd:
57:32:8f:25:21:4c:f7:80:dc:f3:b7:11:9e:c9:4f:5a:a2:ed:
6b:72:31:82:89:34:35:1c:a0:62:04:50:ef:db:07:12:55:d7:
fa:4a:a7:2a:f2:83:c6:45:18:74:af:56:37:37:ba:ef:ad:4b:
bb:bc:f5:48:4c:dd:39:59:b3:cd:98:93:a7:3f:7e:e7:5d:bf:
6f:37:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:19:51 2025 by rpki-client