Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa
File: 57d3021b-d699-3504-9528-d82afc503970.roa (raw, json)
Hash identifier: 7BS/79Pz3rw4W29eivfI+NqdotlUliOn6JzIXvnUWbM=
Subject key identifier: C3:17:D8:7D:5D:5B:2D:F3:96:1B:E5:1B:DF:67:AF:F7:18:4B:39:F6
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858487755D0DDD361E1579453597C
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 22781
IP address blocks: 108.171.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d0:dd:d3:61:e1:57:94:53:59:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=bbfeb17d-bfa3-4b06-a2b1-5e896e7d1f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:5d:b6:bb:2f:ab:a9:54:ce:88:de:3f:31:
0c:23:07:f9:5a:92:73:33:42:f7:8e:09:84:8c:58:
f3:88:eb:42:7f:2f:60:a8:bd:60:10:f1:3f:7a:69:
6b:cf:3c:ad:59:03:21:20:da:af:41:6e:94:c7:a4:
72:8f:7b:15:1f:8a:36:63:79:90:b9:b3:29:69:0a:
6a:b2:21:2e:ed:fe:11:9d:a6:e6:b6:63:41:c2:dc:
16:d2:3d:3a:4d:c4:4a:89:e7:2b:39:58:23:13:93:
a7:3a:1f:ba:e5:1f:60:bf:12:cc:85:92:c7:3c:32:
6f:26:fc:bd:db:25:df:a8:e4:83:8f:3d:8b:e0:4c:
4b:04:a6:e8:8c:58:30:56:e7:84:e4:36:ed:43:bd:
19:15:aa:dc:52:44:7b:11:1e:f6:e7:93:51:8a:da:
72:df:40:b6:eb:a3:fa:08:e1:c1:c5:66:56:d4:c1:
75:83:a1:af:79:ff:d8:b5:76:7e:1c:8d:d1:ba:36:
cf:e1:78:9b:a1:a2:c1:da:e9:96:77:dd:c0:34:0c:
1f:a7:f2:6e:b9:e2:3d:e3:fe:fd:f3:14:6d:62:47:
60:76:1e:b0:53:54:b6:21:9d:e4:4c:06:d6:5e:c5:
b3:0e:ee:fc:9e:74:92:80:a2:a5:e8:47:4f:27:d6:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:17:D8:7D:5D:5B:2D:F3:96:1B:E5:1B:DF:67:AF:F7:18:4B:39:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
108.171.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:8c:69:46:f9:9a:99:42:c3:ed:ea:34:b6:73:b0:02:5e:30:
2a:3d:fc:8a:bd:2e:50:d0:f8:3d:1b:98:97:ad:46:2d:3c:e2:
ea:1e:e3:48:17:55:fc:de:f7:8d:4d:81:91:47:ca:a5:00:09:
01:24:a3:c7:35:68:a7:12:a2:45:f5:4d:6f:b4:8d:b0:4e:9b:
1a:d2:10:29:db:09:ad:b8:de:2d:26:0d:83:78:f0:b7:f9:64:
a7:2f:48:49:23:1b:2c:eb:f1:4b:b2:95:6d:23:b3:ea:1c:44:
58:b9:de:b8:28:9d:50:a0:55:72:92:e3:9e:86:f7:b4:6b:ad:
a3:7d:56:fa:53:d1:43:60:14:25:88:c7:7f:12:79:54:9f:e9:
ad:9c:22:ee:71:b9:19:3b:fb:f0:c8:9a:1a:70:58:27:88:48:
65:98:53:b8:b3:5a:63:f8:14:ba:be:f4:ef:b5:93:92:01:ef:
82:76:84:bf:65:2a:ab:63:df:6c:0a:3c:57:69:d0:0a:ae:a5:
5d:2e:84:78:4f:18:c6:c6:46:8e:ea:a2:e0:11:7e:26:5a:89:
8f:1e:79:83:4b:36:b3:a7:5b:df:ab:45:70:49:61:65:52:56:
e9:ef:ff:f1:08:13:b5:a6:da:6e:4b:d3:b1:8f:7a:98:a3:43:
8e:f0:28:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:16:08 2025 by rpki-client