Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/f1c9a524-045c-3c51-bc0e-ddb8a0cdaf4a.roa
File: f1c9a524-045c-3c51-bc0e-ddb8a0cdaf4a.roa (raw, json)
Hash identifier: /CPGv1nmbCEEGIna0Iletg9J1UEU42f8lBFp1Hzncd8=
Subject key identifier: 87:30:97:4E:E5:F7:5E:D5:A7:FD:B1:4D:3A:0D:35:2B:3D:47:42:E4
Certificate issuer: /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial: 010D0C9F43285848854B41D74F662CC99AFA9580
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/f1c9a524-045c-3c51-bc0e-ddb8a0cdaf4a.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 40793
IP address blocks: 108.174.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:41:d7:4f:66:2c:c9:9a:fa:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=4ae26935-f2b5-48c2-98e7-64a12c9673b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:7b:d5:79:d0:4f:ab:bc:23:cf:92:c5:f9:
ad:b4:ee:e4:12:cf:91:fc:eb:c8:09:ef:5d:2e:5b:
5b:87:4e:62:83:f7:3d:42:5f:1a:6f:7f:ec:46:4f:
d7:3f:d0:73:60:19:a5:00:79:9f:6e:a8:65:2e:be:
f6:fe:cc:33:48:48:39:5a:a2:68:c3:cf:95:2d:42:
5d:d7:3e:7a:96:0c:6b:f2:8c:cd:24:43:23:2b:07:
3c:81:d8:40:fc:55:0c:a7:8f:0d:6a:2e:02:f9:52:
b2:c1:2c:fd:a8:07:4f:26:92:69:3b:12:5b:3c:08:
bb:82:69:f7:f5:0d:79:10:93:46:59:20:52:df:8d:
17:03:0f:00:83:18:d4:32:fc:05:f2:74:d2:59:87:
cf:cd:82:7f:7e:a3:b4:94:06:dd:29:39:0d:b0:54:
34:19:71:91:8a:69:1a:31:bd:d9:ae:8b:80:dc:f4:
3f:12:9a:f8:23:f3:2e:de:1b:9a:6e:29:ed:3b:b9:
b8:da:b2:e0:d7:fc:6b:7b:37:3c:ed:5a:76:37:9d:
ce:d2:c0:7f:7d:ea:7f:2d:63:7f:45:fb:9c:35:ab:
1c:61:52:2c:5d:b0:be:ac:9f:77:9d:76:cd:31:b6:
8f:83:45:84:fd:c0:44:6e:75:02:d1:6f:42:98:7c:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:30:97:4E:E5:F7:5E:D5:A7:FD:B1:4D:3A:0D:35:2B:3D:47:42:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/f1c9a524-045c-3c51-bc0e-ddb8a0cdaf4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
X509v3 Authority Key Identifier:
keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
sbgp-ipAddrBlock: critical
IPv4:
108.174.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:2e:3a:0d:95:5e:59:c9:75:33:17:d1:81:ee:9c:eb:bb:93:
d0:52:4e:99:de:ff:6d:e2:4f:4d:07:bc:66:1e:c3:f4:2b:ee:
83:55:65:94:8b:b8:d3:19:c2:13:45:f5:7a:94:a1:5a:e0:ba:
0b:b3:08:d4:ce:cb:96:01:a3:0a:07:ed:82:fb:50:ce:02:e5:
9b:65:8a:2b:26:6a:0a:e4:38:c4:4a:f7:82:4f:4b:aa:ca:2f:
8a:fe:5f:a5:fe:26:13:ac:b0:71:08:7a:7e:8c:49:67:3a:dd:
a6:9f:07:4b:9c:90:f3:5f:06:9f:d8:c4:ac:7f:ed:92:95:ac:
83:34:38:c5:65:ef:f7:1e:48:13:68:59:73:ce:34:c3:57:77:
c7:5a:e0:31:6a:eb:0f:a6:e2:a8:52:d8:6b:8d:2e:66:92:ec:
6b:fa:c3:79:9e:7c:93:96:e3:31:6d:41:c9:51:2a:2e:eb:6e:
d6:e5:e9:ca:64:eb:42:4b:51:2d:54:cb:e3:96:1a:9d:ee:61:
8c:4c:43:d0:d1:18:14:df:2f:f1:6e:8e:7c:1f:d5:52:b5:45:
bf:94:f3:a2:36:2c:f1:7a:70:a1:71:d3:ee:32:5b:9a:5b:c6:
0d:58:dc:aa:c2:e4:f1:7d:22:76:54:d5:62:2b:a6:a4:5f:11:
62:19:9f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:33 2025 by rpki-client