Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa
File: c2732a11-37c3-37c2-9591-4654376ee597.roa (raw, json)
Hash identifier: 3SHq/PRVQl/7oYu22zZguP5oCeForQW5/KZCrdpZBtw=
Subject key identifier: AB:3F:87:BB:46:CF:8D:37:87:C4:82:81:A1:A8:E4:EB:E3:40:74:A2
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848D7A64F284753DB4B5B836580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 40676
IP address blocks: 108.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:4f:28:47:53:db:4b:5b:83:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=2ae3c6aa-9e2a-42d7-8408-9a5da9fe5f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:cc:5f:dd:f4:8a:01:76:78:4e:98:06:01:
54:76:0f:ba:5f:4c:e5:52:2c:96:15:be:3a:e4:14:
56:88:e7:94:b4:b0:65:f4:b8:58:65:79:79:81:34:
58:25:da:bc:0b:4c:63:91:d0:84:65:d1:36:69:73:
7f:01:21:c2:e6:40:fd:61:6e:ae:d8:06:ba:bc:49:
34:55:a5:d3:cb:de:63:a2:b7:6a:aa:1e:ce:29:dd:
07:d3:43:1c:3d:44:b0:fc:e7:04:9b:75:64:cc:cc:
6a:9b:46:b0:fa:f4:a7:be:c6:eb:78:38:5e:9b:de:
a2:33:a6:fc:2c:1b:b9:a9:12:3a:e1:b1:15:7d:aa:
12:a8:8a:f6:4d:c9:3c:b7:8c:d7:84:a2:4b:f5:78:
ba:fb:cf:3a:26:f0:7a:5f:bb:94:c2:89:ae:86:41:
9c:ad:43:72:44:90:c5:a5:5f:40:a4:b9:95:08:4c:
19:88:de:79:7e:be:d5:f0:24:5d:ee:40:41:2f:da:
a1:27:15:b1:6b:ce:90:4f:65:fc:82:09:08:c2:2f:
21:3e:8a:0c:31:84:5b:f3:69:b0:38:c5:71:e2:78:
1d:8e:47:4b:5e:65:7c:ee:f4:7a:69:86:15:f3:0a:
fe:06:f1:1c:8f:ea:4c:76:bb:1b:b6:cf:7e:ab:e8:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3F:87:BB:46:CF:8D:37:87:C4:82:81:A1:A8:E4:EB:E3:40:74:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2732a11-37c3-37c2-9591-4654376ee597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
108.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:11:db:c0:32:1b:05:77:c9:a7:9f:70:2c:1c:e8:f0:ac:57:
2e:ea:47:5c:d1:2e:ac:ab:c0:97:f8:8a:6a:11:af:35:ef:d0:
b3:89:f0:1f:44:7a:05:6d:d9:9b:75:bf:f8:10:bb:bb:76:0a:
be:17:e0:c7:50:a7:c3:70:07:06:5b:ba:86:d5:f4:e5:de:79:
03:7a:b9:a4:96:18:e1:25:61:02:c1:99:00:a1:0d:b6:ea:4d:
4d:f2:8d:ab:e4:e2:fe:ca:d5:51:39:a1:02:0a:23:4a:c8:c4:
9f:75:54:c2:ac:66:23:cd:f1:0c:99:d6:4d:9c:f7:60:1e:22:
b9:d2:91:42:c9:24:da:f9:79:a9:f3:10:8f:98:bc:27:cd:d8:
70:06:02:7e:ac:5d:14:bf:f7:da:86:72:99:21:92:9b:9b:e7:
b2:9e:ed:ee:e0:be:68:6a:54:27:f5:d2:ee:d8:1d:e0:a4:17:
73:4c:3c:22:61:ea:5b:31:72:9a:89:30:e4:e7:03:d8:96:e5:
23:a5:5c:bd:7e:a7:de:b9:ad:41:68:79:82:5a:e2:3b:26:ff:
96:48:f3:7f:6d:65:8a:cd:6d:22:0e:e9:bb:28:f6:22:ef:2b:
ae:00:b4:d6:7a:62:83:ad:7c:c3:1c:e9:f8:05:be:d3:53:fe:
00:22:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:15 2025 by rpki-client