Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa
File: de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa (raw, json)
Hash identifier: yEG/vXP74fsd2VYOKwBSOYJIfyDTA+LGjS19d2NsMn8=
Subject key identifier: EA:A7:62:DA:1F:67:8C:8D:B9:1A:95:C0:AC:67:8B:DE:97:F6:07:71
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C05D6B0C532410529ED00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 108.162.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:05:d6:b0:c5:32:41:05:29:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=38b012eb-c013-48be-b0b4-67bc391b4f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:f6:b3:09:37:8c:64:a2:ee:8e:4c:76:f3:
3f:c9:cc:75:cf:f9:40:7d:c2:cd:e0:7f:5a:1f:d4:
c6:19:eb:2f:6a:dd:f0:8b:47:cb:c3:76:e8:ac:df:
20:93:76:9c:82:73:db:dd:e7:00:eb:22:d4:9c:1e:
7c:05:7d:b2:44:35:a3:eb:55:8d:25:cd:1b:33:55:
65:8f:09:e6:2c:cf:c3:a2:cf:c4:2a:85:cb:c8:f3:
f1:fa:5e:bf:49:fe:ee:ac:75:40:56:fc:f8:e7:e9:
1c:53:64:8a:69:17:2c:95:8c:7c:6a:6e:cc:22:aa:
a5:2b:27:1e:f3:ac:19:5f:fc:a3:0f:b2:59:b3:d0:
75:b7:0b:78:b9:83:9a:be:f0:17:96:24:62:48:56:
cb:eb:17:97:86:83:ec:de:f0:6c:d4:e4:68:31:19:
bf:d3:7e:6c:36:25:43:75:bc:d2:cc:14:b6:14:76:
01:94:b2:c6:ed:d2:0e:04:ea:10:e2:23:68:f9:ab:
08:73:51:c3:fc:a5:29:bf:98:b9:6b:1d:61:0f:20:
ea:cf:ba:8d:76:af:88:75:bc:b8:d2:04:39:cc:89:
11:5e:a0:43:57:05:5b:c8:fd:df:d1:ed:26:6b:8e:
b0:c0:8e:bd:e7:27:e3:f3:59:33:be:fb:0b:84:54:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:62:DA:1F:67:8C:8D:B9:1A:95:C0:AC:67:8B:DE:97:F6:07:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:17:41:6d:ef:74:47:4a:0f:74:4c:49:d4:4b:62:2f:4c:bd:
93:60:8e:94:a4:ed:58:b5:eb:c2:57:76:75:9d:aa:bd:1a:e3:
ea:93:4b:39:b9:52:ef:76:08:6d:1c:cb:35:af:7c:47:34:fe:
3c:58:4e:f1:e4:44:d5:5a:47:38:ee:9d:fd:ed:b7:84:a2:3a:
16:3e:d3:85:0d:b1:bd:4b:68:4e:cc:97:25:87:53:7f:ac:bd:
23:e0:66:61:ff:5e:81:e9:ea:72:bd:9b:c5:0f:97:88:c0:62:
10:b5:e5:af:32:ce:d8:8d:b4:88:71:83:eb:4f:93:f9:9e:04:
56:76:96:7f:23:43:54:38:be:4e:21:b5:88:11:02:99:b8:20:
46:00:a0:ba:0f:f6:63:97:7a:19:18:35:a5:4c:98:71:32:64:
7b:04:ab:6c:df:f5:a2:b5:00:65:85:d1:25:73:9c:f6:60:0f:
ca:b4:20:bd:64:eb:9d:10:c7:fc:4e:25:b0:4d:0a:cd:d9:76:
e0:8c:b8:a9:12:cb:03:9f:81:8b:e3:c3:81:21:3f:e2:4d:92:
86:37:fc:c0:54:75:da:24:d5:31:f2:d4:3d:b0:cc:6e:43:e0:
e4:10:a5:e5:62:41:9a:5f:23:50:c6:dc:d6:b2:db:94:c6:8e:
73:bd:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:05 2025 by rpki-client