Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fc53a7b-4ecd-3906-ab2c-bb03feeb1432.roa
File: 0fc53a7b-4ecd-3906-ab2c-bb03feeb1432.roa (raw, json)
Hash identifier: vYv9o2uGs39gD3In7fRWeCBHhr0ExwzFWg01pe1ia6w=
Subject key identifier: FC:DA:0E:FC:AB:F7:5A:8D:2D:84:D7:8F:08:A0:E6:4B:3F:C0:58:B9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C05985971B9885F612640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fc53a7b-4ecd-3906-ab2c-bb03feeb1432.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 108.162.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:05:98:59:71:b9:88:5f:61:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=a64b9f79-10ab-45e7-9599-4fa5625ab060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:67:50:99:0b:3f:c4:88:ca:0a:dc:d2:bd:
da:87:ed:3f:57:60:ec:8c:f2:03:7e:b3:71:f1:db:
13:a5:9a:74:6c:e6:53:5e:d1:be:6f:d2:ab:27:07:
90:07:86:c8:54:d7:69:35:df:8d:63:30:bd:d8:56:
99:16:93:14:19:68:65:28:36:68:8d:af:f0:0a:53:
02:be:dc:08:3c:6f:44:b8:b0:5a:99:9f:1b:38:12:
d9:df:0b:93:58:3f:da:e9:65:ca:6e:65:96:0c:05:
c1:e2:fd:0b:14:f6:b9:5e:8e:f7:fd:dd:df:73:40:
0d:0c:6a:28:dd:b7:b8:db:64:e0:ab:1c:a6:0d:36:
b9:77:d5:9c:61:b2:51:56:80:2e:7a:06:d8:44:0c:
31:02:c4:d2:17:f1:23:72:05:b7:c1:8c:25:8b:49:
ff:6e:f0:0e:2d:0a:46:c4:7e:4d:aa:1e:44:b0:59:
ee:a9:12:96:54:bf:d8:3d:0f:2e:7d:82:df:5c:f8:
d1:93:fb:87:7b:f2:7e:59:4f:ec:e4:6d:6e:35:5e:
76:83:8b:c6:83:4e:99:49:92:a4:41:89:44:b0:ed:
90:82:41:7e:de:b5:04:96:58:72:2f:2d:16:62:f3:
bc:a9:1c:b8:ed:1f:31:13:f8:4c:2e:60:0f:36:70:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DA:0E:FC:AB:F7:5A:8D:2D:84:D7:8F:08:A0:E6:4B:3F:C0:58:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fc53a7b-4ecd-3906-ab2c-bb03feeb1432.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a7:57:cd:90:79:5e:0f:84:23:b0:40:b9:32:a8:38:f1:c8:
2b:d6:ac:d3:fc:e1:c7:78:56:fe:ac:36:d4:42:30:6d:c3:46:
f7:93:98:c3:c1:4c:83:bb:a6:74:29:47:23:89:9d:4e:31:82:
1b:48:15:33:02:92:36:a7:38:49:82:01:c7:fd:3e:fa:43:0c:
c7:0b:33:4d:88:44:94:ab:42:ba:82:d5:3a:f9:ed:3a:6a:18:
f0:bb:2f:5f:d3:8d:2f:a7:c3:1c:90:59:19:4b:e3:80:e9:ea:
e1:3f:5a:b7:76:3c:47:e6:f9:e1:81:e4:5f:a9:c2:4b:1c:db:
96:0e:01:93:d8:88:dd:6f:1c:ff:42:b8:f4:27:2d:50:12:a5:
e5:67:de:aa:42:a0:21:cc:fd:7c:ea:a6:a1:e8:67:ca:45:94:
c0:1f:e3:96:14:a0:ed:71:93:71:7a:0c:0d:bd:3e:99:d4:67:
c2:33:d4:ca:21:b3:53:e6:7c:78:bc:eb:e6:55:15:48:89:f3:
38:c8:ca:5e:6d:ca:cd:75:1a:c1:de:3f:78:d0:b7:6e:e2:60:
cd:00:71:5c:60:b9:54:aa:9a:c4:e3:76:94:f6:aa:98:8d:f1:
ce:7d:9b:b0:83:cb:d1:56:53:9b:59:41:36:0e:16:74:cf:dc:
28:0f:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:42:29 2025 by rpki-client