Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/1baebdf9-c73a-3b30-890f-367325e218ba.roa
File: 1baebdf9-c73a-3b30-890f-367325e218ba.roa (raw, json)
Hash identifier: 9MPIOaTesmk5i1fCewOLUY8ieLEjD8f8MIeuJLY+m+8=
Subject key identifier: 87:3C:E3:68:C7:73:79:4E:C8:11:30:1B:86:18:03:AA:5C:66:39:43
Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial: 010D0C9F4328584847E02AFB700A9BDFEFB37F00
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/1baebdf9-c73a-3b30-890f-367325e218ba.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 108.179.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2a:fb:70:0a:9b:df:ef:b3:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=288c3520-cf15-4690-94f6-77f44039f027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:74:4c:71:a3:9e:10:b3:93:eb:3b:1d:aa:
09:eb:f0:62:78:d5:8e:f2:ab:9b:a6:83:ae:01:fa:
a3:cd:72:a8:a0:b5:03:19:e5:9e:3f:f8:96:ce:9f:
74:ac:85:d2:e7:c1:89:ee:b2:4f:4a:f7:86:99:07:
ec:a2:b0:03:2c:c9:5f:b3:1c:5f:65:c1:2f:21:9d:
d2:e6:c0:2c:73:75:bc:d7:ac:b1:43:48:c6:f9:55:
02:34:4f:59:aa:d1:ab:a1:d3:9c:a3:37:dc:ce:6b:
7c:bb:07:03:5a:81:16:b3:26:5b:e0:36:91:f7:4b:
c7:c9:a4:20:47:a3:99:41:31:27:71:e1:d6:1d:a1:
8f:d5:22:56:d8:9c:83:b8:9c:be:af:71:33:49:10:
ac:ef:66:ce:45:dc:c8:13:9a:4f:c6:ca:74:ef:09:
f1:e3:e4:0f:b9:8e:4e:4f:2e:eb:2e:e8:6c:00:6c:
10:b1:ab:e4:4b:52:2f:70:00:54:fa:1c:37:8b:98:
a9:a3:bf:95:9a:e2:be:7a:ef:17:42:93:3e:9b:0d:
b6:91:55:46:c6:46:ba:3b:d1:f2:a3:18:46:20:8e:
ee:00:57:af:74:59:3a:00:4c:b6:be:b6:a8:62:c6:
45:12:e5:9c:67:ee:bd:17:bc:02:30:39:ad:5b:22:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3C:E3:68:C7:73:79:4E:C8:11:30:1B:86:18:03:AA:5C:66:39:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/1baebdf9-c73a-3b30-890f-367325e218ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
X509v3 Authority Key Identifier:
keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
sbgp-ipAddrBlock: critical
IPv4:
108.179.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:77:75:ae:64:ea:f4:73:b2:99:b0:5c:39:25:71:55:a2:df:
c6:0f:2e:ad:d2:6d:90:cc:f7:d2:52:ca:c1:44:f1:19:c8:72:
42:1d:bf:8e:1b:23:67:3b:70:28:dd:d0:93:5f:44:0c:77:c7:
ba:0e:da:7b:7b:a6:c3:f6:7a:a8:ad:0a:b9:8e:f2:33:d2:4b:
72:80:51:c3:37:41:e1:c3:0f:4d:f1:31:13:54:20:30:c9:80:
a8:bd:fe:78:62:b4:2b:3b:54:e1:6f:46:42:7c:be:57:48:62:
4d:cb:c2:c6:59:ea:6b:8f:ff:a6:de:46:a1:79:d3:99:7f:fa:
32:87:e6:e7:92:d8:5f:51:b4:26:26:b4:58:61:50:d8:51:3c:
0d:ac:f5:66:c8:71:27:99:7a:3a:3a:c9:36:8a:0d:cb:51:d8:
59:88:8e:43:79:92:83:d0:6e:4a:dd:28:0f:2e:be:8b:7c:27:
6d:cc:a8:3c:38:30:bd:cf:b6:36:af:6a:9f:56:c8:1b:26:c3:
bf:ed:4b:19:39:fd:61:98:91:cf:e2:2a:f3:5c:aa:34:80:16:
05:c6:80:bf:2e:86:2b:c0:5f:b8:0c:a2:66:e8:fd:c7:a0:e5:
98:0b:14:bc:f0:f4:f6:9f:23:3b:e2:da:53:65:35:66:80:f9:
20:8d:76:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:12 2025 by rpki-client