Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa
File: d4a5e9c1-d838-365f-9553-97009a7b5512.roa (raw, json)
Hash identifier: ErrcDJSWacEGr4fB1IacPa7Sz16NSPNyBh05zA5EcdE=
Subject key identifier: 94:D8:11:20:10:FD:48:7F:81:91:A4:5F:D1:66:C2:53:0B:5E:CF:7F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBD98933E78733E26ADD40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 108.59.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d9:89:33:e7:87:33:e2:6a:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=084192fb-a691-4254-b870-de836cb71a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:6b:92:dc:4f:99:f8:7f:8d:e4:b7:8c:f5:
85:7d:ad:e6:5b:d5:6f:71:d4:2e:3d:1a:fd:42:97:
ce:a8:b1:2d:ff:e8:14:64:b4:56:76:78:31:58:aa:
59:00:4f:df:84:2c:44:4d:f0:79:6b:0e:e0:74:3d:
06:f1:c2:b0:37:d9:29:34:e1:50:0b:e6:48:2d:9f:
74:19:a1:a4:d2:85:0a:a9:74:1d:f9:16:d9:c8:3b:
06:96:4e:2e:db:a0:80:07:68:3c:5b:5b:36:c0:20:
f7:ce:66:f6:89:18:86:db:6a:70:9c:d2:19:3e:07:
03:46:fa:0f:8e:ef:40:cf:bd:03:95:49:99:8b:b9:
00:74:4b:c0:f9:a5:b7:20:f4:72:08:bd:cb:7c:7c:
ec:3c:e5:a5:ae:1f:b1:38:12:6b:3f:63:2c:36:c0:
23:df:bd:3e:9a:55:de:be:9b:6a:84:50:84:ed:ef:
13:c7:2e:a2:ce:37:8a:db:e9:cc:0e:fb:c1:23:6e:
ac:31:33:ce:7d:27:0c:14:b3:92:3c:4f:b6:07:37:
44:e6:b4:9c:9b:e7:86:07:d5:53:ee:cf:cf:fb:b6:
09:44:16:99:58:b0:44:1e:3c:44:b7:6f:68:83:0b:
d5:e3:57:d3:b1:c3:82:85:25:48:82:c5:8d:ff:32:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:11:20:10:FD:48:7F:81:91:A4:5F:D1:66:C2:53:0B:5E:CF:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:43:37:5b:6b:fe:fd:cf:d9:fa:05:a3:ab:9b:7c:0b:0e:c9:
61:28:95:dc:a2:d4:a5:e2:17:3e:fd:ec:90:43:1c:f8:4b:fb:
60:b8:a0:b9:6e:38:38:cc:ce:20:47:84:cc:3d:fb:5d:9d:75:
f6:e0:74:05:d7:21:7e:bd:6d:c0:2e:12:6f:09:05:5e:9e:d9:
bf:1a:fe:3a:72:55:69:86:c3:86:f1:a7:3d:9e:92:19:3d:08:
db:a4:71:39:f9:7d:f1:c3:45:a2:da:43:a5:90:f5:9a:b4:d8:
e8:42:8a:3a:b0:86:c6:d4:b7:6b:4f:53:f9:21:64:80:d8:5f:
62:d8:f5:e0:e2:b8:12:33:1c:a5:31:cd:e0:60:bf:49:11:74:
b7:ad:29:5d:42:03:eb:08:55:77:db:7e:76:89:33:4a:38:7e:
a1:fe:3f:ed:5b:65:80:68:d7:90:ec:90:b8:85:8b:97:ac:0a:
60:68:61:3f:f2:9f:26:dc:81:0d:66:ac:b4:6f:6a:d1:12:56:
22:7b:ce:f5:66:42:98:dd:ab:ed:99:8e:82:c0:00:44:98:c1:
ac:fd:51:be:fa:f6:15:ff:60:d0:7f:a5:de:17:bb:f1:98:93:
c2:e4:39:1c:31:35:19:3d:05:c0:5a:f4:dc:77:f2:b6:5f:7c:
d9:30:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:21 2025 by rpki-client