Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ee8e724-28dc-31b4-afc7-2df16aa4ddec.roa
File: 8ee8e724-28dc-31b4-afc7-2df16aa4ddec.roa (raw, json)
Hash identifier: zBh/PjklmdSHuB6/5mPTgAzXtxhNIPGeMHr8EOIn6bs=
Subject key identifier: EA:DE:1D:23:C6:A4:E0:A6:63:01:55:07:D6:55:F5:3B:1C:79:56:08
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827AE51C3BBC142D45BA4A380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ee8e724-28dc-31b4-afc7-2df16aa4ddec.roa
Signing time: Tue 10 Dec 2024 01:14:39 +0000
ROA not before: Tue 10 Dec 2024 01:14:39 +0000
ROA not after: Mon 10 Mar 2025 00:14:39 +0000
asID: 13335
IP address blocks: 108.162.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:ae:51:c3:bb:c1:42:d4:5b:a4:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:14:39 2024 GMT
Not After : Mar 10 00:14:39 2025 GMT
Subject: CN=588d274f-01bb-4941-b329-935c8816d7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c0:cf:e6:dd:91:f1:4d:5e:db:7b:98:91:12:
17:67:d8:ac:4d:68:a8:88:0a:cd:8e:44:41:cf:3d:
fb:a5:ff:80:5a:31:e9:01:50:14:1a:f5:db:13:fa:
85:b5:c7:83:49:7d:d3:cb:a9:d8:64:2f:4a:b2:03:
49:aa:5a:8a:c0:e1:f3:e6:69:ec:40:98:7f:73:d6:
36:0b:e8:da:17:d6:aa:1e:6c:10:16:4f:7a:ff:2c:
ba:19:46:77:5e:f7:5e:5b:f8:18:81:be:20:a2:5f:
9d:7b:de:b5:8c:38:cf:3e:8a:a4:ff:3d:0b:db:f2:
85:08:80:f3:31:cc:6c:03:46:e6:62:fb:18:30:a7:
c7:35:2c:06:91:f0:77:1d:b1:4f:13:f7:3c:b0:58:
28:23:04:2b:2c:f3:18:76:ab:c3:0d:a1:96:f2:14:
9f:e5:1e:97:e3:e4:46:0d:5d:65:b3:e0:5b:6e:0b:
e7:5f:07:f6:a5:7d:d0:ad:95:8f:5a:cb:0a:ad:e0:
75:c7:de:97:35:92:e1:1c:f5:d1:d2:08:9e:12:46:
c1:3d:ec:ce:ca:ca:3c:73:d7:01:0c:96:6d:e4:45:
56:28:67:a6:1e:e5:d7:a8:77:84:86:f9:ee:ba:7c:
92:6b:81:47:20:cb:cd:16:20:e8:e0:09:4e:c7:77:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DE:1D:23:C6:A4:E0:A6:63:01:55:07:D6:55:F5:3B:1C:79:56:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ee8e724-28dc-31b4-afc7-2df16aa4ddec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:8f:5c:dc:99:ee:ab:85:9c:35:5b:29:d6:06:47:1d:91:48:
48:a8:39:2c:71:66:be:fd:e5:6f:53:cb:be:52:a3:37:14:c6:
13:74:9e:d8:23:c3:75:c2:56:cf:08:2e:8c:a0:40:21:fb:57:
5f:5f:cf:7b:17:cb:11:fa:80:e2:2a:1c:2e:e9:16:c8:7a:38:
56:ea:d0:03:b1:5d:44:e9:ee:41:e9:77:c2:c9:ad:65:15:fa:
0d:0b:c1:eb:7a:ef:52:5d:d2:12:dd:ef:22:86:01:7b:b8:33:
90:87:34:54:70:7a:b3:d1:61:e0:4e:2b:ee:28:73:b7:e6:43:
62:75:48:44:49:ef:ad:c2:03:eb:73:69:91:11:9e:10:64:ba:
9a:f7:a5:0b:75:df:f9:f8:2b:8b:17:52:33:f0:0f:75:f6:17:
07:21:83:d6:f7:ca:ab:ae:58:0c:48:61:4e:6a:f3:c1:e6:63:
1c:80:05:d8:29:9e:82:19:23:81:3d:24:b8:b7:04:fa:3d:2e:
00:41:55:b5:f6:ef:83:6a:69:fb:ea:3a:32:b9:bf:01:b6:59:
a4:98:8e:f3:a1:55:24:a1:9f:f3:0b:98:cd:0f:b1:75:0b:d4:
3e:51:dd:9f:22:5c:68:48:6e:35:6f:f3:17:d7:d8:40:d2:cd:
68:56:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:55:21 2025 by rpki-client