Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23dbca41-55d5-3a31-8c73-9dc49b82b038.roa
File: 23dbca41-55d5-3a31-8c73-9dc49b82b038.roa (raw, json)
Hash identifier: kyWeR34EiDfnfLAQ0HU+dWvFatwZYOoaNyZeOsicf3s=
Subject key identifier: 34:FE:FA:FB:B6:89:A5:D1:76:6D:25:0F:17:FF:7B:C5:04:AC:2D:72
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBC096B2080D40B50C5080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23dbca41-55d5-3a31-8c73-9dc49b82b038.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 107.178.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c0:96:b2:08:0d:40:b5:0c:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=d6cc6963-9902-4a56-953d-7ce640327947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:ff:88:b0:a8:5f:44:d2:40:43:d1:9a:6a:
4d:df:27:b5:aa:49:96:6f:0f:28:7a:14:66:af:3f:
12:59:3e:b2:e2:ba:41:7a:b2:07:97:ff:84:a3:f9:
f0:ae:e7:ec:d8:34:57:32:58:8f:c4:0d:f5:8f:bf:
12:7a:a9:ec:37:16:af:3e:37:c0:f1:d4:d6:d7:40:
bf:8a:81:83:63:31:6d:8b:ac:75:fa:35:eb:cc:f7:
40:b6:72:ef:79:c4:af:36:ed:e6:56:5a:7d:da:78:
cf:7c:03:d7:e4:ed:ba:1d:ac:32:50:77:32:85:d7:
02:8f:8f:ce:d0:8b:33:49:34:c5:7a:7c:51:16:0a:
9e:b1:80:8f:84:2f:3b:45:9c:58:17:b3:06:04:8d:
02:9d:a1:cb:c1:7c:be:c5:c2:c8:aa:89:97:a2:2a:
94:b5:ce:a8:87:9c:12:1a:e9:1b:0c:75:86:fa:66:
09:c9:ae:75:fa:42:16:44:4c:6d:7e:ff:3c:92:f5:
9e:df:85:b1:4d:4a:4d:a0:c6:b5:98:26:55:4e:b9:
e3:f7:78:d4:c2:84:d0:f2:68:d3:0a:4e:09:76:2e:
92:9c:d8:a9:44:5d:98:1a:4c:10:b5:c0:f3:05:f7:
aa:46:6c:d1:fc:47:46:17:9c:8c:1d:51:d0:06:32:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FE:FA:FB:B6:89:A5:D1:76:6D:25:0F:17:FF:7B:C5:04:AC:2D:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23dbca41-55d5-3a31-8c73-9dc49b82b038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.178.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:7e:c5:dc:9c:e2:c2:ee:f1:e1:a1:5e:fb:75:81:a9:0e:78:
65:c4:3f:be:58:a4:b7:f6:e3:22:68:09:0e:59:68:44:9b:bf:
8c:52:67:a5:7f:16:9b:41:24:8e:82:12:c4:85:c1:54:2a:1e:
e3:9c:7e:bd:cf:cf:77:81:91:c2:5b:09:68:63:79:02:3e:d9:
5b:22:ed:f0:cb:c6:75:ed:f7:be:ba:9e:1e:a0:b6:c7:4e:dc:
cb:76:ac:28:51:47:d4:c2:3a:ca:a2:0c:dd:2b:b0:2a:18:ab:
9d:9e:e1:bc:22:43:03:61:eb:44:b8:bf:f7:67:e8:ae:f6:b2:
4d:78:f1:6f:95:07:ba:b0:15:c8:f0:f8:15:48:b4:3a:54:56:
0e:66:de:59:09:de:14:17:e0:ec:14:f7:85:93:ce:22:7d:2f:
10:fb:bc:b0:d5:ed:d8:7e:d4:42:4f:02:ff:e6:0e:12:89:5d:
b0:24:22:bc:b5:ba:70:13:70:22:48:5b:e1:ed:b5:ed:7a:74:
41:ca:e6:19:da:4a:1c:68:77:5c:08:a2:ba:a6:b0:0e:ce:ff:
2b:40:86:93:3b:fc:66:6f:a0:bd:13:a7:5b:4d:67:b8:69:eb:
28:1b:53:71:a2:ee:b8:b4:87:67:06:8a:69:70:ed:0b:2c:84:
3b:79:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:53:07 2025 by rpki-client