Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa
File: 43f0c32a-4c18-3924-b3cc-013a54cd1812.roa (raw, json)
Hash identifier: vy7ZcZRG3kTQ+QJpWCyVyuG/xF8l13LyW5/bukTGSCI=
Subject key identifier: 1F:72:FE:01:56:6F:21:FD:C5:A0:F7:5C:C3:13:35:CD:5E:A3:BF:F5
Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c
Certificate serial: 010D0C9F432858494EFA291095E3BCB46951D700
Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa
Signing time: Tue 25 Mar 2025 19:50:55 +0000
ROA not before: Tue 25 Mar 2025 19:50:55 +0000
ROA not after: Mon 23 Jun 2025 19:50:55 +0000
asID: 396982
IP address blocks: 108.174.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:fa:29:10:95:e3:bc:b4:69:51:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c
Validity
Not Before: Mar 25 19:50:55 2025 GMT
Not After : Jun 23 19:50:55 2025 GMT
Subject: CN=daf08591-1f57-44c6-823a-00bdb6c01f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:80:15:ae:1f:56:f6:df:85:de:41:b6:37:
50:dc:69:70:f8:f9:81:32:a5:be:33:5d:a0:b4:c6:
99:92:f5:40:9e:f1:ba:93:c4:2f:45:61:b7:28:db:
c7:b1:d9:32:47:99:94:87:2e:70:49:47:c1:33:27:
87:13:2c:2e:d1:a6:30:e7:ac:57:8b:08:b9:c1:c2:
5c:a3:8a:70:30:54:e3:6a:80:45:7b:35:dc:07:72:
da:31:3e:36:87:8c:0a:48:ec:bd:7a:c4:a6:c2:8c:
f0:de:86:80:fb:c1:1b:b1:66:5d:d3:1d:f6:e3:11:
71:6a:8b:16:c4:52:91:9c:ab:d5:0d:58:9d:a6:cc:
db:ab:fb:4e:1c:2d:ea:9f:26:56:86:a2:10:ae:75:
2a:03:64:1f:7a:1f:3a:1f:6d:64:6a:2a:be:c9:42:
5a:1c:78:44:1f:e2:83:88:fe:13:40:59:8b:b6:9a:
66:0b:1d:f8:47:91:c7:1a:54:89:8f:ec:88:5c:bc:
85:f9:73:0e:5c:4e:53:f9:56:e1:22:8b:55:30:74:
7c:20:21:b7:98:2b:47:a4:d3:93:4c:49:24:f8:10:
45:6e:a7:03:b2:41:56:c1:c8:f0:65:6a:91:c0:2f:
d0:08:60:a8:e4:fe:f1:07:49:52:a8:0c:be:03:aa:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:FE:01:56:6F:21:FD:C5:A0:F7:5C:C3:13:35:CD:5E:A3:BF:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl
X509v3 Authority Key Identifier:
keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer
sbgp-ipAddrBlock: critical
IPv4:
108.174.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:8f:d8:35:a7:88:3f:ed:ed:82:29:e9:63:b4:a1:b2:14:5e:
bd:78:5b:47:7f:cd:13:6d:68:81:59:eb:14:d1:19:fe:0c:9a:
33:ca:ff:27:68:74:fb:77:a7:3b:4a:8d:1f:2b:a9:c2:88:73:
a6:c3:58:01:e7:bc:f0:bd:c4:d8:f7:21:f3:d0:ad:59:6a:34:
c2:af:6e:41:a1:4f:08:34:9e:e4:c4:f2:f1:fc:08:8d:90:6a:
56:d5:b6:c6:93:bf:fa:d3:4b:a3:c8:42:79:25:dd:ff:43:44:
a8:7b:40:c6:1e:31:3d:21:38:6c:07:7b:ac:86:c2:f4:5e:b5:
2b:a9:15:31:db:57:10:1d:78:5d:d9:d1:78:12:a7:9a:74:6d:
ef:e2:7e:10:53:ab:70:f8:c0:10:40:58:2e:2a:9d:13:4e:55:
7e:e9:6b:42:e1:59:d0:d1:5b:98:a9:27:7f:48:fb:f7:53:db:
64:21:92:44:43:e3:33:da:94:84:36:b9:54:39:7e:3f:e3:6f:
73:da:b6:5e:de:82:7e:52:de:78:fd:50:48:a4:96:42:d8:83:
19:94:d6:50:7f:dd:42:27:d3:43:b2:bb:0f:92:a0:eb:cc:a7:
70:83:3f:43:e0:c9:0f:0b:c8:3a:b5:ab:f4:4e:66:ab:07:93:
ed:61:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:52:51 2025 by rpki-client