Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fdb07d1-12c6-3817-946f-f886bc11bd77.roa
File: 0fdb07d1-12c6-3817-946f-f886bc11bd77.roa (raw, json)
Hash identifier: CTwuE6329bjMl8j5RET5wGQltvyvPnMvtS7/tmajvYU=
Subject key identifier: 57:BF:76:A8:C6:90:AB:C2:AD:68:A3:E3:34:6B:8E:50:13:FA:49:F2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBBE7B58355B9A3F6A5700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fdb07d1-12c6-3817-946f-f886bc11bd77.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 107.167.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:be:7b:58:35:5b:9a:3f:6a:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=69cd98a0-7b0a-4f17-b0a6-e275d7393b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:26:91:dd:48:e6:a6:33:60:43:e0:c8:f2:
87:87:9a:e4:b8:19:20:49:d3:7d:27:2d:54:c4:e1:
cf:bb:da:6e:0e:88:ff:0c:ea:f4:ba:e3:e2:a8:e1:
b2:bc:4b:ee:9a:51:8b:be:4d:ca:8b:64:d8:50:74:
e7:2e:0d:6f:d6:bb:1d:84:7d:d2:de:54:2c:73:bb:
24:5c:5d:dc:36:5d:f7:c0:b5:fe:53:fb:26:7e:bd:
ef:6d:12:8c:89:46:1a:56:c6:ab:02:90:fe:d4:5f:
4b:f2:e3:ab:8c:55:00:84:70:6d:34:9c:ca:cf:70:
f6:f3:5a:7b:23:7a:b4:d5:de:1d:e4:f0:35:e9:55:
fa:a4:63:17:ab:eb:3c:85:7e:8a:8d:ab:f5:bf:29:
8a:e6:f5:22:b5:57:fc:0c:68:ba:97:ff:19:18:09:
26:5a:64:20:e8:85:d1:94:8a:5d:f0:bf:47:5d:74:
7b:40:b4:7b:74:bd:3f:df:69:32:6e:2d:79:f4:16:
f6:58:0f:a2:57:fe:65:31:1f:44:c8:23:dc:1e:2a:
0d:9c:e6:ce:ed:fe:ec:2d:e6:c2:3a:57:3e:17:58:
83:88:6c:6f:00:73:4a:8e:69:67:20:fd:bc:e6:57:
db:c0:d8:ec:b5:f8:6f:94:26:39:e5:da:bb:0e:91:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BF:76:A8:C6:90:AB:C2:AD:68:A3:E3:34:6B:8E:50:13:FA:49:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fdb07d1-12c6-3817-946f-f886bc11bd77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:e8:9b:74:a0:6f:7c:68:51:f8:e1:c5:38:4c:8e:9c:5d:48:
a3:2e:a7:95:f4:61:3f:d3:8b:04:f7:5a:0d:6c:28:b6:14:c3:
08:d9:06:02:d0:56:e4:ab:c4:7d:92:66:a5:b3:6e:19:18:d2:
25:60:a7:0f:90:c1:88:02:d2:ab:b6:e1:80:58:7e:d7:b0:ab:
33:01:c7:8c:bf:00:41:ca:86:80:d7:32:34:1f:f4:d0:7c:4d:
ee:29:23:54:c5:6e:9e:2f:8e:e5:1a:2d:a2:a2:2e:7f:4c:df:
49:82:18:d6:05:c8:1c:0e:09:38:aa:e1:9e:85:83:2d:0b:b3:
0b:b4:aa:00:9b:99:50:56:70:c1:d5:24:37:80:e5:7b:98:ca:
03:db:0f:ad:f8:ac:a5:c7:1f:2c:b2:fc:ab:08:5d:38:75:84:
9a:a8:72:2f:ee:02:2f:0a:52:14:ec:43:9c:39:61:d6:67:92:
fc:25:42:6a:db:84:71:e6:88:b4:08:3c:10:d4:d8:6b:88:a2:
c7:32:6b:48:65:b7:35:f4:c4:84:4d:2d:58:41:e9:c3:7e:67:
1b:91:95:ba:c2:e6:37:d1:08:77:fd:a9:9e:de:16:cf:02:15:
ff:c6:c6:80:cd:69:05:fe:26:ca:c9:aa:81:a8:45:7a:6a:3e:
8d:b7:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:11 2025 by rpki-client