Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa
File: 4a3559bb-abec-3940-a565-ccc20c2855b0.roa (raw, json)
Hash identifier: gJ9hD8l4WJVdlcKFs0c0bijkcK8WMQ2RwO2Tk//gGyY=
Subject key identifier: C6:97:C4:5F:62:03:1D:7A:A8:11:81:B9:EC:C1:FC:CB:85:7F:41:25
Certificate issuer: /CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
Certificate serial: 010D0C9F43285848E2D101D8D4DFF16EC6D40380
Authority key identifier: F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 36352
IP address blocks: 167.253.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:01:d8:d4:df:f1:6e:c6:d4:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=206ab3b1-6fd0-41e1-9f66-8b230b631cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:38:67:0c:18:b7:cf:81:81:63:6a:c7:73:
76:af:95:7e:4d:f9:a2:c9:5a:30:cc:db:81:61:65:
b3:87:72:06:2f:ba:ee:05:25:9a:c1:66:32:07:63:
4e:b6:cb:e9:38:1e:14:aa:da:6f:f1:32:aa:8f:75:
2d:3e:39:32:51:51:f8:10:89:50:64:ea:9d:ef:62:
77:82:cd:be:33:22:bf:de:74:fa:83:11:0e:ed:8a:
cb:92:f3:bf:7a:c5:32:04:86:35:13:8f:47:a1:04:
d3:f2:59:32:b3:26:35:25:1f:07:8d:2d:9e:40:ca:
0e:e4:90:08:c8:41:83:2e:94:31:ad:cb:59:c8:de:
a3:d4:28:9e:02:09:86:ad:10:f2:e4:17:90:3a:dd:
77:df:0f:7e:34:2c:79:04:da:5a:d7:98:1b:3a:16:
0d:00:e5:c0:76:79:c4:98:1a:6a:b1:b2:9a:bf:87:
36:6d:14:a7:b0:d7:dd:79:39:95:86:51:88:26:0f:
ba:c2:16:ff:73:06:2e:93:9d:7a:72:c0:82:60:b7:
ba:53:d8:53:a3:a8:3e:d0:68:f5:c5:3a:cc:1c:c8:
92:29:e2:08:d2:f3:96:7a:9f:e9:ba:ea:1d:2a:d6:
81:0d:25:74:46:1e:0c:55:5b:3e:8d:52:64:4f:49:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:C4:5F:62:03:1D:7A:A8:11:81:B9:EC:C1:FC:CB:85:7F:41:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl
X509v3 Authority Key Identifier:
keyid:F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:da:06:b0:87:cc:dd:2b:22:59:78:db:6e:91:74:9e:8f:36:
b5:f4:1d:34:e5:7a:72:50:1b:f7:92:46:97:0d:70:54:f9:3d:
84:44:e2:02:38:a8:f6:86:7f:b6:66:1c:a8:a4:62:0e:51:c4:
dc:50:a7:f0:56:45:1b:c7:17:6d:38:4b:84:20:5f:35:e9:b1:
7d:62:25:df:d4:20:75:10:b7:87:fc:ec:af:37:d3:b4:9e:4f:
9c:5a:a5:a4:cf:24:d8:f7:e9:46:42:1e:2a:65:f0:58:32:28:
5f:ab:39:90:4c:df:b4:c0:93:57:e8:52:5d:f8:ee:82:3a:4d:
ed:e2:f2:14:d7:d1:08:e6:ed:14:12:2f:7c:f7:27:c7:b1:2c:
11:ad:05:bb:a6:53:f0:83:5c:ba:82:62:69:b1:ab:a4:8f:80:
de:79:a0:de:71:78:a9:da:fb:93:a0:be:eb:20:2e:ce:04:fb:
21:f2:ec:a7:3a:d4:b8:d8:67:ca:17:0e:b0:3e:e2:83:a0:65:
46:07:55:72:d1:25:72:84:4f:37:43:80:84:ee:a5:b2:e0:3a:
e9:0c:92:3e:3f:3d:60:94:3d:ca:8c:83:32:98:2d:f0:e2:ac:
b7:76:46:32:65:32:8e:14:a0:31:3b:fe:f3:93:f1:3d:ac:59:
c9:23:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:55 2025 by rpki-client