Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa
File: de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa (raw, json)
Hash identifier: mSCLu5U5uUIVVrUNJSoE/q4GlxJILyq4kesIsl+oEcY=
Subject key identifier: 1A:43:D0:6C:52:81:CD:8B:67:F7:78:C7:F2:6E:9B:42:64:4E:CF:D4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B16FC82FBD6D4157E3B080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa
Signing time: Tue 10 Dec 2024 01:20:56 +0000
ROA not before: Tue 10 Dec 2024 01:20:56 +0000
ROA not after: Mon 10 Mar 2025 00:20:56 +0000
asID: 13335
IP address blocks: 108.162.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b1:6f:c8:2f:bd:6d:41:57:e3:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:20:56 2024 GMT
Not After : Mar 10 00:20:56 2025 GMT
Subject: CN=cfaf9fe7-635e-4f15-85b5-89572fde1cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:44:30:4f:b4:e7:88:e7:a1:f0:fe:81:34:
50:ae:ef:18:1d:9b:27:8e:f5:96:47:ad:64:2c:18:
e2:8d:65:42:36:47:63:09:08:42:6d:f8:03:76:5c:
5a:cc:d2:77:47:f3:ef:cf:1a:87:0e:6a:b6:21:16:
5d:99:17:26:23:05:81:ed:83:e1:6b:e7:82:6e:fb:
70:04:46:25:2b:e0:f6:c0:42:f9:55:f3:b2:a6:de:
f6:91:1c:e9:bb:e7:b9:de:c2:12:d2:33:69:f1:ef:
b0:44:4b:02:c5:50:5c:61:07:76:0e:69:6a:84:55:
79:7f:57:df:5b:ae:26:d5:b0:80:f8:d7:cd:3d:ec:
13:39:e4:7c:7c:57:7f:7f:83:22:79:f4:28:9d:71:
58:5e:9c:72:72:e5:fc:8c:82:86:18:62:13:28:c2:
51:5c:90:78:f0:19:3d:57:1d:c8:bc:61:a6:26:cd:
f2:4e:e5:4e:ce:5c:14:57:c9:3a:15:52:21:6a:2d:
b3:f6:ee:f8:b7:43:49:f4:06:f2:f2:8d:5c:fa:15:
ea:6f:49:32:e5:cc:1b:00:37:43:4c:af:d7:e6:cb:
42:9f:cb:17:6d:e2:bf:26:5f:26:0f:65:b1:cc:8d:
e4:b9:3f:fe:1e:a6:33:33:b4:3d:a3:61:03:e7:ee:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:D0:6C:52:81:CD:8B:67:F7:78:C7:F2:6E:9B:42:64:4E:CF:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:35:e0:52:8f:9a:4e:40:f2:9b:d7:03:7b:61:cc:1b:f2:a7:
00:b6:42:b0:29:ee:ae:01:95:ca:89:da:22:92:c3:7e:31:8e:
d6:f6:9a:39:a1:dc:86:47:81:2a:b1:80:07:2d:b0:0f:df:9e:
0c:7b:8e:49:fa:e9:76:b2:c3:22:15:4b:1c:95:15:70:b3:ae:
c3:57:32:39:b2:a7:d2:16:ca:cb:9e:c3:15:07:c3:4b:e0:b1:
50:d1:e1:da:70:e6:99:fe:20:28:8f:94:4b:a8:18:42:4d:79:
f0:a5:bf:bd:43:ca:74:11:02:08:71:23:c0:07:ce:83:8e:c1:
48:60:3a:ad:96:fb:11:39:45:af:33:b6:a4:d5:f0:11:49:4c:
d8:23:1d:c9:c7:bd:dd:ae:97:b6:fc:38:7f:de:83:3d:7d:b0:
00:03:21:a7:ad:62:4b:74:63:09:62:2a:b4:fd:e4:38:0a:1e:
24:17:d3:e3:d1:88:c4:da:46:e5:79:d1:c0:60:c8:87:55:d9:
aa:a6:22:8f:4a:56:d8:88:5a:43:59:ad:4b:ae:59:28:3a:8c:
d1:a9:fb:8e:97:28:5f:8c:1b:88:3a:c0:c8:ff:fe:81:26:c0:
50:6e:d0:b6:33:a4:ad:dc:42:0a:bb:8e:bc:c2:e7:5d:6c:d2:
45:04:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:17 2025 by rpki-client