Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
File: edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa (raw, json)
Hash identifier: nWLFunGJ+Pa+viRfYrDbb5ITl7BeD7AxiUqHcavg95o=
Subject key identifier: 42:17:BC:48:39:DF:FD:6B:7D:E5:4C:41:C3:7E:68:49:D7:75:C8:1F
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F4328584802150853E5CA8FB78E228E00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 1403
IP address blocks: 107.161.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:08:53:e5:ca:8f:b7:8e:22:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=b76cdb3d-05a8-40ec-b007-0feb599eac2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:21:ad:9a:7f:42:29:6b:8e:30:a0:a8:2d:
3b:1c:42:2b:b2:b5:bb:52:18:85:58:05:7a:af:d7:
39:26:c7:8e:2b:20:f2:5f:05:00:87:7d:b6:bb:0d:
ac:e6:62:f5:0a:4e:07:94:d8:09:1d:ea:04:e3:df:
3a:97:a8:05:01:f6:c2:58:c9:15:58:ec:60:fd:d9:
1a:04:05:54:73:a8:1d:1d:d1:5c:20:b7:68:25:37:
2e:6e:47:67:f8:45:85:d5:9a:0e:9c:7d:dc:7e:b9:
16:55:e0:fe:6a:e6:50:bb:74:c1:5c:83:98:6e:de:
51:57:0f:f3:fa:93:d3:8a:2a:ea:a5:00:7d:3f:8c:
7f:0b:93:cd:7c:c0:d9:e1:f1:9e:d4:c7:db:7a:84:
f6:b6:be:85:0b:d2:13:f2:a1:c8:3b:12:16:97:da:
86:2a:65:b7:b9:04:43:f0:c3:d5:a4:e9:a6:8a:15:
04:87:08:30:fa:63:de:d4:9b:6e:2f:51:bc:eb:3b:
57:83:bd:93:db:64:ce:32:c8:37:79:75:84:a0:60:
83:40:29:81:d2:e9:db:df:10:62:90:f0:35:19:0a:
61:51:1d:5d:6c:f7:b2:06:e8:9c:66:f5:0f:96:b2:
63:e4:b4:dd:b6:bc:05:9b:33:6c:5e:a5:de:58:b4:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:BC:48:39:DF:FD:6B:7D:E5:4C:41:C3:7E:68:49:D7:75:C8:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv4:
107.161.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:47:56:03:85:58:eb:cb:7d:ed:cc:39:c5:1c:7e:55:4f:a9:
78:f3:4c:97:b5:97:8b:dd:4e:22:66:70:9d:58:78:cf:36:a9:
76:db:f2:e3:e1:ce:4f:47:31:b4:9b:0a:82:96:6a:98:98:2f:
a7:27:4c:ec:10:d8:3b:67:0e:09:fc:37:22:c3:ca:0c:64:84:
dc:ad:31:ca:cd:c3:5f:36:a7:16:73:5d:73:9a:b2:f9:a7:cf:
d1:d1:51:3f:ef:26:ae:c4:5a:49:e3:0c:5f:5b:9a:b8:ed:37:
5d:69:df:05:8f:91:7a:df:39:d5:41:12:78:12:2e:aa:85:1f:
29:69:47:d4:1c:7f:10:9f:5b:2a:9c:60:c7:04:db:0b:6e:6c:
ed:99:7b:50:1c:44:d9:9a:a5:c5:90:f3:d2:55:7b:7b:3c:cd:
41:2e:2e:e0:b6:35:81:a4:a8:a4:a7:17:84:f2:d2:66:db:d4:
c0:23:4b:8b:d2:c5:3a:10:6f:f2:27:65:51:44:a5:bb:53:bb:
6d:6b:d2:a9:c4:d6:af:74:a5:26:6f:c6:12:55:c8:46:3f:fa:
df:ef:41:86:d5:ec:0e:24:51:c9:d4:2b:c5:28:ee:40:b4:55:
1d:a8:41:4f:65:06:66:38:6a:65:7d:e6:ed:8f:a7:09:7d:5a:
5f:a7:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:17 2025 by rpki-client