Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2da9af95-009b-37c1-b96c-68f6a4f79a14.roa
File: 2da9af95-009b-37c1-b96c-68f6a4f79a14.roa (raw, json)
Hash identifier: l0ye0WPSjn3+KfbDdlvNRR+Niu6wgUtkclvbql6b0kU=
Subject key identifier: C1:84:B7:EF:F4:FA:3C:A6:D5:76:7E:05:6E:D4:CC:35:08:F1:D9:31
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827AD282C1E0900CAC6EE9E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2da9af95-009b-37c1-b96c-68f6a4f79a14.roa
Signing time: Tue 10 Dec 2024 01:12:18 +0000
ROA not before: Tue 10 Dec 2024 01:12:18 +0000
ROA not after: Mon 10 Mar 2025 00:12:18 +0000
asID: 13335
IP address blocks: 108.162.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:ad:28:2c:1e:09:00:ca:c6:ee:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:12:18 2024 GMT
Not After : Mar 10 00:12:18 2025 GMT
Subject: CN=63288240-76d1-42ed-8bc3-e9e1bd14965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:13:d0:18:3e:89:14:28:2e:6a:ec:5b:e4:
67:4c:80:56:f4:56:8e:1e:47:d5:12:b1:04:17:94:
88:53:6e:b3:08:24:5a:61:5c:0d:cf:3e:1f:9b:8c:
f8:07:e5:88:b0:0f:2e:e4:80:84:09:f6:ac:e7:d1:
ec:1d:d2:1a:bc:cc:13:cb:79:7f:85:ba:1d:93:ee:
e6:25:98:34:56:49:be:64:c7:24:27:4b:04:cd:6e:
2d:9d:65:ff:ce:70:7f:57:0a:7e:37:06:df:19:99:
70:54:fb:e6:b1:74:88:c9:4b:10:d0:31:c6:b6:ad:
89:a0:d2:ce:45:37:3d:f9:d0:4c:ad:c3:fa:04:08:
8c:40:e3:58:3d:7c:ec:0d:d1:c1:33:27:43:fd:9f:
f8:d1:03:71:df:fd:2b:c6:0d:31:cd:8c:17:2f:e8:
9b:00:e7:b5:d4:7c:b8:80:d8:1f:f5:b1:61:22:30:
08:37:7c:73:e6:eb:e8:c3:12:d3:18:86:9f:1f:c6:
a2:f6:0d:35:42:2b:52:71:ad:4e:15:ff:56:34:98:
5f:e3:7c:9d:35:03:9e:97:c4:db:22:ca:64:66:e0:
92:63:00:2b:f3:95:33:f9:dd:b0:5c:3e:49:c0:ec:
70:cb:a4:14:dd:2d:ca:de:f8:f0:b2:9b:0c:f0:3b:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:84:B7:EF:F4:FA:3C:A6:D5:76:7E:05:6E:D4:CC:35:08:F1:D9:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2da9af95-009b-37c1-b96c-68f6a4f79a14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:a3:38:d2:04:52:13:1e:c1:44:6e:18:df:65:65:81:c3:c2:
eb:7a:2e:2a:8c:7a:18:1f:a5:b2:b8:81:46:82:1b:85:01:66:
b3:85:12:09:67:16:4b:52:e4:41:9c:9d:aa:d3:54:a1:c3:05:
c3:e4:5d:9c:29:8f:e0:d9:8d:0f:55:bb:21:54:74:ac:46:d7:
5f:b4:1d:f9:6c:88:73:90:32:8e:7b:e5:b0:9b:fc:f3:33:a7:
2d:5e:a0:07:8a:d4:0e:c4:df:14:00:17:9b:94:ae:04:bb:d7:
f4:54:df:f2:df:95:5b:96:e3:ce:70:90:c4:5c:1b:79:20:af:
c2:fe:2e:7c:17:b5:4b:30:e4:7c:2b:cd:4c:86:4c:80:55:ff:
57:b8:4c:24:59:0b:1e:3c:f2:9c:eb:fc:93:a4:6c:a2:11:1b:
4e:7b:45:32:ae:49:77:cf:3e:bc:8c:1f:4e:fc:12:b2:2a:ee:
c9:81:3d:02:e6:c7:7b:c8:6a:92:df:cb:ef:ab:7c:25:21:77:
b5:da:5e:04:92:c4:5f:38:f0:5e:83:fd:ae:3f:cc:d0:34:94:
c2:47:ef:10:a4:c2:d9:6a:f1:65:2b:7f:83:57:18:1d:f3:b5:
c1:fc:b7:af:b9:bd:f6:5f:d4:1a:21:24:3c:00:65:d5:1e:fd:
d9:dd:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:46 2025 by rpki-client