Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ace72af-d707-33be-b8a9-717e54492808.roa
File: 4ace72af-d707-33be-b8a9-717e54492808.roa (raw, json)
Hash identifier: C96PH98uC7YNoBEvQDxY4JTJbJQV/pmcUfVz6SaNFC8=
Subject key identifier: 01:15:21:65:AF:D1:2A:A7:78:E6:58:82:38:62:D4:A0:AA:D3:6A:50
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C0273E111F1E918B48480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ace72af-d707-33be-b8a9-717e54492808.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 108.162.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:02:73:e1:11:f1:e9:18:b4:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=14de6c3a-4b85-40c3-af3e-3ca8411c4e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:ad:51:d1:cf:04:0f:24:c3:a6:3c:9c:e0:
0c:6c:d8:0f:b6:ba:7a:f9:32:fe:4b:2f:fa:3c:f5:
74:03:98:28:7c:1b:02:bc:01:e7:d6:19:0d:64:0e:
d5:64:21:03:1c:77:56:57:34:12:06:62:a7:57:b9:
d3:5c:e7:f2:d5:66:e0:10:a9:8d:01:fa:f3:6a:a4:
d1:26:72:f9:0d:3c:0c:45:7a:4b:12:b7:3b:8e:0d:
f0:4a:f3:ab:71:91:27:b8:02:83:f3:ae:7d:92:30:
d4:86:67:d2:16:ea:c5:e9:c8:39:ff:de:3b:68:1a:
5b:d9:2b:b5:e3:f0:00:1d:2a:b9:eb:66:c6:b3:86:
5d:0a:c1:fd:85:15:18:86:77:1f:b8:a9:41:d9:68:
18:66:7d:1e:ec:49:d8:91:fe:6d:7e:5d:fd:37:3f:
b3:c1:7f:99:06:19:58:6d:64:75:3e:9b:c1:de:c2:
70:16:ab:cc:ec:46:77:5a:6d:79:b0:bf:cb:91:2c:
43:62:69:19:e9:08:02:0b:37:5a:4e:6a:7b:ed:22:
e1:ec:94:47:51:79:f5:85:40:29:88:d2:85:b5:e3:
7b:4f:91:6b:40:90:5e:2e:27:d5:b0:b3:ed:38:79:
df:ea:3f:23:2d:59:35:66:f0:31:45:72:ec:44:aa:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:21:65:AF:D1:2A:A7:78:E6:58:82:38:62:D4:A0:AA:D3:6A:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ace72af-d707-33be-b8a9-717e54492808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:70:02:62:f9:40:03:ae:e2:2a:44:ae:a8:c7:7a:70:44:75:
88:2a:9c:fb:b3:2c:eb:10:48:49:0f:96:b1:ce:dc:72:b4:83:
b3:1a:4e:c1:2c:cb:ae:1a:84:02:8c:61:a7:79:ca:55:d2:5f:
c9:db:30:76:f3:0c:b7:ac:29:1b:fa:fa:ab:69:d8:c3:f2:40:
45:6f:82:26:9a:9f:42:d4:08:1f:54:d8:9f:c7:03:6a:6a:c6:
34:a8:de:92:3a:c1:ca:da:72:5d:38:7a:5d:40:7d:2d:01:21:
07:c9:cf:a7:69:be:1e:ba:52:67:44:da:d4:3c:51:bc:c6:d2:
1f:84:75:02:1a:9c:bd:8c:e3:c0:09:5e:59:26:62:21:9e:1e:
a4:08:60:49:ab:76:1c:41:f2:0d:52:ab:7f:b4:b4:76:22:e9:
15:48:8b:67:4a:da:e5:0c:9b:ab:48:d0:97:00:ac:e7:ff:d4:
79:a7:b3:5b:a7:dc:48:32:5a:f6:3c:14:b7:71:4c:17:d8:32:
49:c6:8b:3f:83:17:18:71:ed:69:e0:0d:79:4c:c7:d0:a8:51:
bc:0c:ec:d9:c2:cd:e4:ad:ec:a6:15:d3:9a:9f:81:c0:28:54:
cb:a6:9a:32:e4:23:a3:fb:3f:0e:bc:42:f3:9d:ef:b3:a9:28:
a5:ce:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:49 2025 by rpki-client