Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa
File: e28dc1da-cf85-3290-ba33-6973d3a63483.roa (raw, json)
Hash identifier: 2l2Cm0hSQsT5lzWcykvLWbVLApaM+GbGQknWQcRURjE=
Subject key identifier: D4:3C:98:7A:24:93:B4:39:91:D7:C7:93:61:12:72:86:45:53:99:40
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285848F4F69BF5BBB480F51DD7EF80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 62651
IP address blocks: 108.171.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9b:f5:bb:b4:80:f5:1d:d7:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=568e1afa-5324-4815-9726-cee237a442b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:ea:f8:14:7b:a8:e4:c3:7a:b5:6a:17:3c:
5c:27:04:9e:bf:27:a0:ba:0a:47:6c:02:41:68:2f:
c3:e8:d7:bf:d3:76:c8:6b:63:7f:b5:aa:02:90:fd:
b6:21:9b:08:98:9d:9a:bc:12:18:27:f2:f3:42:b4:
5e:5d:80:80:29:fd:87:4e:80:66:67:2b:19:05:5d:
19:b2:40:d3:a8:08:02:cd:3b:2b:1d:5b:4f:b7:2b:
94:b1:b2:f8:e5:f8:fd:35:b5:e8:1d:e8:12:4d:01:
19:04:f0:9b:f6:e2:29:41:2d:b8:00:ef:40:cd:5f:
11:29:52:bf:8d:50:36:06:f7:dd:e9:1b:34:e9:5f:
38:b2:d8:32:75:bf:4a:41:02:a0:a0:1c:3a:ae:5d:
c3:6d:e5:93:1c:6a:12:49:16:38:34:81:88:59:7d:
b1:59:a1:c9:0f:fe:9f:36:54:2a:56:9f:2b:24:eb:
b4:a8:fc:59:a0:80:ee:8b:f7:3a:bc:92:1d:82:cb:
be:43:c4:41:4d:7c:d7:b7:a2:c6:46:5f:f1:2e:07:
0e:d4:2d:e2:4d:c3:49:c0:16:ac:b3:1b:9f:2d:79:
da:09:ee:d3:10:33:6b:e5:c6:95:75:16:52:87:48:
d7:51:88:b2:ad:42:c5:b1:55:c9:27:91:d5:7c:84:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3C:98:7A:24:93:B4:39:91:D7:C7:93:61:12:72:86:45:53:99:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
108.171.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:be:c1:6f:e2:d5:fa:71:9f:39:2b:e2:20:3c:30:61:ab:18:
cd:35:09:62:56:62:fe:09:b2:df:8a:01:e0:df:ac:ec:72:a1:
e2:9c:d0:c5:07:40:9f:a3:04:9f:54:8a:dc:37:b1:55:05:c1:
f8:ea:3b:43:f8:2c:21:15:a0:d1:6a:53:75:ea:43:79:ff:98:
1d:1f:af:60:87:4e:03:2d:e8:db:1a:96:10:05:2e:ca:62:95:
19:e2:23:38:ce:43:29:aa:2a:ff:bf:d6:eb:25:ef:fb:3b:75:
33:4a:ab:7f:33:33:a3:31:b3:11:29:da:45:02:73:f4:1a:66:
5f:b8:86:f3:b6:97:03:6c:72:57:98:12:eb:ca:9a:5a:dc:7f:
ae:90:c2:5f:51:a1:e7:32:4e:c6:c7:7f:55:14:05:8b:b4:7e:
47:58:3b:8c:e9:ec:9c:39:05:ce:59:cb:7e:4a:04:a6:5c:44:
93:95:a9:df:24:fb:bc:5a:d5:03:e2:73:c3:e0:b3:ab:a8:cd:
e1:2b:8b:3c:ee:87:87:9d:71:c0:3c:47:61:29:05:5d:cc:51:
02:90:0e:a8:05:5a:7b:07:d8:9c:b7:6b:4d:8e:7b:d4:f2:56:
a4:88:3d:de:0e:0f:44:bb:ee:56:b1:b8:14:02:0b:5b:fe:91:
78:21:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:03 2025 by rpki-client