Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/d00f734c-b5eb-3c44-bc31-d1614e638db3.roa
File: d00f734c-b5eb-3c44-bc31-d1614e638db3.roa (raw, json)
Hash identifier: 0yX7lNdTa/FO/kAYyFTm17hSRTW4qzw5O+FU+OpUA/c=
Subject key identifier: E1:A6:2B:9E:00:34:48:59:BD:D3:09:08:03:D2:10:70:3C:CB:B6:A7
Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec
Certificate serial: 010D0C9F43285848F5BBA9F30E6B515793023000
Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/d00f734c-b5eb-3c44-bc31-d1614e638db3.roa
Signing time: Fri 21 Feb 2025 20:38:03 +0000
ROA not before: Fri 21 Feb 2025 20:38:03 +0000
ROA not after: Thu 22 May 2025 19:38:03 +0000
asID: 396982
IP address blocks: 103.66.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f5:bb:a9:f3:0e:6b:51:57:93:02:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec
Validity
Not Before: Feb 21 20:38:03 2025 GMT
Not After : May 22 19:38:03 2025 GMT
Subject: CN=bd653b14-054d-454a-8e2e-2df9a5690d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:3e:5b:c8:34:cd:f0:f9:7f:cc:22:9b:6c:
8f:b6:34:1a:36:2d:0f:25:ad:df:9f:2c:8c:70:58:
02:0b:24:05:73:5c:76:2e:97:d7:8c:c2:bc:fb:81:
d1:a2:78:b7:38:a3:02:ab:66:d7:a9:9b:f9:2d:18:
c1:87:2c:fb:bb:2a:87:c0:c6:86:05:95:18:ec:e8:
77:23:9e:e3:95:2c:5f:06:9f:87:17:cd:23:0b:f6:
a0:08:e8:a7:45:39:45:b5:9b:ca:66:6f:b5:44:35:
cd:d8:8b:13:bf:e7:ed:97:5f:00:49:98:50:29:27:
d2:32:a3:be:a9:91:44:93:28:16:bf:c2:cd:7a:1a:
3c:76:a7:7a:4c:dd:e5:5e:43:e2:fa:c9:82:46:db:
99:58:38:64:85:5d:38:ab:44:40:28:10:08:61:05:
7e:58:f1:5d:f4:af:21:73:4d:bc:bb:2d:2f:78:b0:
70:cb:c1:69:2d:98:00:6a:29:07:2c:99:f9:64:69:
18:bd:4b:a8:25:48:ba:3c:c4:55:33:95:1f:73:f8:
74:31:69:69:f0:6b:5a:b9:07:65:90:ec:27:d7:76:
31:e4:70:ae:d1:45:50:37:51:57:08:b6:cb:62:55:
a6:67:4d:3d:0a:a2:82:9c:c3:1f:ff:f1:3e:f3:c0:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A6:2B:9E:00:34:48:59:BD:D3:09:08:03:D2:10:70:3C:CB:B6:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/d00f734c-b5eb-3c44-bc31-d1614e638db3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl
X509v3 Authority Key Identifier:
keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer
sbgp-ipAddrBlock: critical
IPv4:
103.66.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:8a:74:53:2a:0c:da:49:b5:aa:dc:fd:6a:67:be:b7:6c:13:
83:94:01:61:fe:4e:2b:b3:d3:b8:ed:8b:c3:74:99:57:28:6b:
66:3e:5e:51:bd:bb:d2:9c:cd:27:d6:3d:f8:01:18:f5:f4:37:
6c:d4:e5:62:57:4e:7f:8a:76:d9:0c:48:43:02:1a:20:a8:00:
8f:fd:7b:c3:b3:a1:fe:a2:ed:c9:04:4c:b6:4d:bb:70:5e:02:
5c:27:d1:a4:a9:b3:ed:76:55:b4:24:e2:f2:d0:06:19:9e:04:
3a:c6:de:90:02:c2:16:20:0d:ae:11:fc:14:9e:57:3c:5d:d1:
26:16:5d:81:4d:fe:45:a2:03:ed:4a:8f:63:a9:71:00:c2:3e:
98:ad:45:04:de:f6:28:ef:54:c1:40:d3:ed:6e:05:90:98:f0:
23:47:3c:99:ba:64:73:af:90:a1:28:7f:8d:41:61:fb:be:85:
4f:3e:4c:cd:e3:71:a8:4b:ce:b9:68:61:46:07:ea:e3:34:b8:
56:c1:57:f2:72:e4:94:ba:cc:48:8c:98:8d:77:35:99:e1:69:
ba:84:4a:61:ea:7a:92:8a:3e:74:8c:85:b9:1f:35:44:d2:ff:
0e:ce:b9:68:32:dc:c4:20:20:c2:d8:7a:ac:14:05:35:63:af:
be:64:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:26 2025 by rpki-client