Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/5fd8fa2b-a435-3b8e-9b81-fbabfb38d99c.roa
File: 5fd8fa2b-a435-3b8e-9b81-fbabfb38d99c.roa (raw, json)
Hash identifier: VklJG4eORNrLaSNb6/Sk1zfpHFsjUCXpwjwSC2HemAk=
Subject key identifier: 17:99:8E:E8:E1:44:9C:E6:8E:8E:6F:87:48:1C:8C:BE:7E:43:E9:F4
Certificate issuer: /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
Certificate serial: 010D0C9F432858484D75933204EF7A95755E3730
Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/5fd8fa2b-a435-3b8e-9b81-fbabfb38d99c.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 1299
IP address blocks: 162.250.108.0/24 maxlen: 24
162.250.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:93:32:04:ef:7a:95:75:5e:37:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=1e07de73-26ea-4c1c-970d-ec4a8bc9cd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:86:5d:c5:9f:db:38:2e:22:06:fd:8c:d8:
8c:ed:da:17:7f:d4:4a:59:d8:15:3c:ec:c4:e6:7d:
c9:9f:dc:20:25:61:75:6a:09:df:94:c0:c9:9c:7f:
1b:39:0d:10:a3:94:01:ef:cd:9b:b6:8b:09:9d:c5:
2d:ab:d8:f7:63:6b:ee:1b:16:a9:ac:93:49:31:11:
20:00:f3:b0:bd:04:1f:69:8f:c2:ff:45:fe:02:a9:
6a:54:da:17:69:1b:7f:6f:29:23:54:0b:8e:e6:06:
1c:4a:53:7d:f1:7c:e7:0f:d8:0a:75:f4:c7:ab:d2:
2d:c8:78:2c:d2:9d:01:a9:ba:87:dc:1d:89:24:1d:
c7:af:ff:1e:79:ca:4a:a9:57:79:4d:b1:2c:0b:6c:
d8:2a:74:e5:10:b1:c8:2e:85:ad:52:19:b9:d2:4d:
88:ce:02:11:be:2d:e4:52:b2:f7:cf:31:b6:5a:bb:
f4:59:5a:13:70:41:cd:b2:a2:f0:7d:95:0f:df:e3:
2f:f3:2e:53:3d:b7:f1:8f:9b:e8:7f:85:4e:af:98:
78:5e:81:3d:79:2d:2e:34:70:7d:a2:cc:0a:a3:c1:
e2:91:ac:29:0b:49:14:68:a6:69:e7:9a:6a:f8:a7:
c7:9d:c2:8b:fa:bb:f3:22:b0:8d:32:a5:63:30:69:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:8E:E8:E1:44:9C:E6:8E:8E:6F:87:48:1C:8C:BE:7E:43:E9:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/5fd8fa2b-a435-3b8e-9b81-fbabfb38d99c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl
X509v3 Authority Key Identifier:
keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.250.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:cb:3f:9c:75:c2:9a:31:0f:ac:77:3e:3d:d6:3d:bd:57:97:
a0:ca:cb:55:00:09:44:ac:69:36:e8:68:c4:72:3e:ce:e5:2b:
bf:d6:64:5f:13:b4:c0:6c:7f:8c:bb:a0:06:92:9b:57:36:db:
38:e8:0a:3c:c7:13:82:86:26:cf:31:76:37:0a:50:7f:e7:c0:
1c:5a:cf:82:f9:34:83:b3:e7:29:09:02:fd:0d:3f:2e:f6:43:
c5:08:c4:f6:e8:91:d3:81:54:28:92:f2:16:57:fe:d5:59:92:
ea:02:1a:10:0f:69:a5:41:c4:94:8e:bf:89:16:5b:14:97:4e:
c7:34:85:9d:02:12:b7:13:c4:ec:0b:32:68:a5:43:7a:f6:e5:
ce:50:f4:56:85:7e:0d:de:13:b3:8b:d7:19:8b:6b:c1:bc:04:
0a:ab:32:26:0c:06:07:83:3a:24:bb:4b:4e:bf:13:d2:d7:06:
ed:a5:7c:5a:1b:a0:ef:73:f6:0b:f7:eb:68:48:cd:a1:fb:08:
c1:3d:62:0d:8e:03:af:91:19:26:b5:52:db:14:f5:17:ed:ab:
da:b0:ec:95:58:aa:37:75:08:d5:f9:aa:fb:56:d0:ec:8f:21:
c3:e2:79:d9:8b:3c:d0:f3:82:fb:c4:0e:07:cd:10:96:d6:65:
56:4f:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:36:41 2025 by rpki-client