Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6108eafa-eded-3e17-8a63-57e1d49d256a.roa
File: 6108eafa-eded-3e17-8a63-57e1d49d256a.roa (raw, json)
Hash identifier: 4wfGT1TxrEuyrZfyMltJXxvYDPNm8Hm8lmbIbMm/f8I=
Subject key identifier: 12:AE:9F:E5:07:6A:C1:E4:D0:0D:2F:ED:A9:84:7A:5D:41:A4:3B:9F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B1C6B081E3A89E6A8AAE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6108eafa-eded-3e17-8a63-57e1d49d256a.roa
Signing time: Tue 10 Dec 2024 01:21:37 +0000
ROA not before: Tue 10 Dec 2024 01:21:37 +0000
ROA not after: Mon 10 Mar 2025 00:21:37 +0000
asID: 13335
IP address blocks: 108.162.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b1:c6:b0:81:e3:a8:9e:6a:8a:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:21:37 2024 GMT
Not After : Mar 10 00:21:37 2025 GMT
Subject: CN=66367059-cf14-4d2f-9c3d-d1d211927872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7f:5a:fb:ad:55:e1:49:06:d6:15:ab:28:41:
47:ee:59:3d:b4:81:f3:82:ad:45:c4:7f:5a:61:76:
de:74:7a:f6:7a:35:4a:d2:d6:c6:2e:f2:93:d7:4e:
28:8c:43:ac:28:76:03:f3:7b:5e:72:81:a5:b4:06:
c2:47:86:d3:f8:e4:85:63:4d:90:de:86:a0:9b:54:
ec:3e:86:f4:bd:15:2b:6d:4f:84:b1:53:75:73:93:
3f:cd:e0:c5:00:0e:1b:a4:29:fc:a6:bb:26:69:9a:
f1:cc:07:01:ba:b8:35:a4:b2:d7:3f:b4:b2:4a:f6:
38:1c:bb:da:a5:58:af:f7:fd:2b:65:43:0d:07:fd:
68:01:cf:0f:81:af:bc:6d:5f:81:d9:1f:51:dc:87:
4e:17:d3:0c:9a:e4:ae:ae:50:2c:33:7c:c4:4f:ac:
1b:2e:86:42:b2:8d:96:8c:80:46:2e:56:3f:21:32:
60:12:37:95:b3:2a:60:07:18:5e:70:c9:3c:5e:ce:
35:a8:42:48:e0:84:92:d4:c7:d4:7a:fd:8a:75:df:
e0:4a:f5:1f:6b:7a:6b:2c:67:b4:73:c2:05:c3:31:
25:d8:98:06:46:a8:11:e2:f1:90:c5:75:e4:87:19:
5b:ae:49:e2:bf:e1:0a:ba:ce:d0:66:db:40:7c:d2:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AE:9F:E5:07:6A:C1:E4:D0:0D:2F:ED:A9:84:7A:5D:41:A4:3B:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6108eafa-eded-3e17-8a63-57e1d49d256a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:85:4e:d3:5a:88:d2:f8:74:79:5b:a4:9d:ff:85:ef:72:e4:
b2:1c:12:7c:77:ca:19:f1:e9:f6:10:a5:6e:f0:47:e0:b0:c9:
e8:db:7c:09:57:cb:d2:da:55:86:15:5d:44:3e:a4:db:0b:7c:
bc:b3:bf:fd:85:06:bc:9b:0c:06:87:6f:ec:cb:d4:1f:ba:b8:
e9:8f:42:6e:d8:da:76:f9:63:58:d0:ff:f5:20:23:57:0b:23:
4a:e5:2c:ef:3b:3e:2d:a2:96:35:38:1b:43:15:14:58:69:f1:
cf:67:50:64:86:eb:f6:2e:61:c7:70:57:af:ad:18:ab:b1:5c:
23:89:93:7b:5d:36:20:bf:bc:86:f4:c8:4c:e2:89:60:c2:f3:
67:ea:ff:aa:91:2c:84:f4:fa:6c:a2:34:7a:22:dd:ba:c5:52:
4f:6a:55:f0:50:92:3d:32:db:c0:de:56:01:01:5c:50:02:bd:
d3:23:97:69:55:43:ac:36:32:cb:4c:1b:0c:ac:a2:be:47:d9:
87:56:6b:f0:75:df:94:f7:22:59:a2:e0:66:ae:e5:f4:f5:d8:
3a:cb:92:c2:43:9c:7b:b3:33:21:b0:2c:99:f8:bc:4f:c4:40:
26:a8:56:2b:83:f3:a8:6a:d8:3c:7b:34:c1:2a:ce:38:48:6b:
82:19:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:18 2025 by rpki-client