Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/76028751-035c-3651-88e2-a1d009ea9b7f.roa
File: 76028751-035c-3651-88e2-a1d009ea9b7f.roa (raw, json)
Hash identifier: yL515f6MAxTBrwI66us4MgonSsRnBDFx6Sob/qab7wc=
Subject key identifier: 94:7E:5A:F7:F5:6E:1C:3B:93:54:26:10:00:AB:5E:77:30:D2:A8:0B
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285847EFEF896928D3E9AD6D2A2B00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/76028751-035c-3651-88e2-a1d009ea9b7f.roa
Signing time: Wed 20 Nov 2024 02:00:39 +0000
ROA not before: Wed 20 Nov 2024 02:00:39 +0000
ROA not after: Tue 18 Feb 2025 02:00:39 +0000
asID: 140952
IP address blocks: 108.171.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:ef:89:69:28:d3:e9:ad:6d:2a:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Nov 20 02:00:39 2024 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=bd66bc2a-66ed-4b1b-97b9-d7489aa5e933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:f1:fb:19:e9:59:15:66:c4:26:e5:d8:6f:
00:f2:1d:c6:1b:02:eb:45:ed:78:bf:8d:fd:11:17:
ab:3c:21:6f:57:fd:9d:09:aa:50:e6:07:c4:0f:05:
0e:78:00:8c:86:94:61:14:a7:4b:7f:85:c4:ab:04:
c5:05:a3:6f:8f:37:91:af:32:de:2a:b7:e4:99:e9:
e8:b8:8d:4e:a7:67:4e:0b:56:96:e9:f4:b9:20:23:
7c:eb:be:4f:41:ce:52:df:a3:c1:cb:f7:f5:c3:26:
c5:35:a5:7a:9d:ea:3d:ff:ee:eb:f7:ba:d9:ec:73:
fe:7f:fd:ff:e7:98:1a:22:71:a8:fc:67:d6:75:a4:
93:b2:68:16:a4:1b:a2:73:cf:03:be:67:ca:6f:07:
0e:ab:47:86:8a:18:d9:38:41:97:81:5a:a0:c9:bb:
47:46:cd:71:cc:ed:99:a4:88:e8:c6:c3:a4:1a:d3:
e3:c7:b2:0b:d4:28:c5:1e:87:bc:04:24:cb:e2:61:
c7:d7:d8:a1:e8:b4:e5:c5:e6:e8:24:1f:c8:e1:3f:
c9:e6:21:35:74:ff:08:a8:a3:16:93:ad:c3:5a:88:
d9:95:e2:73:da:a8:3d:6d:36:99:cf:90:21:66:9e:
a0:59:a3:cf:ca:48:61:49:75:71:06:13:02:05:7a:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7E:5A:F7:F5:6E:1C:3B:93:54:26:10:00:AB:5E:77:30:D2:A8:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/76028751-035c-3651-88e2-a1d009ea9b7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
108.171.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:f7:4a:fd:b6:8d:d6:1c:c7:ab:52:f0:27:85:86:58:8a:e5:
87:22:48:54:63:d3:c3:d6:9b:63:1d:53:87:79:0f:fc:a9:b1:
c5:c6:7e:c2:a3:52:21:fb:f0:fc:a5:6c:59:9c:d3:2f:60:51:
75:dd:26:59:eb:b0:29:db:7f:cd:86:e9:23:26:54:4e:93:78:
65:b9:9d:62:a8:b5:8e:ac:50:7b:e9:d4:75:50:b2:4a:80:84:
19:ed:ae:f0:7e:86:14:77:7b:73:f6:56:d1:6d:3f:50:2f:a1:
10:7e:9e:96:bb:ce:da:46:ce:81:4b:1d:c2:4f:c4:a1:7d:d7:
25:5f:3c:f7:06:bc:39:e3:76:16:4c:76:d4:62:c8:14:b3:7c:
11:a0:15:49:5a:cb:bd:37:ae:12:e3:30:2c:f3:b3:ce:e6:1d:
85:8a:b3:9c:ad:ad:69:a9:72:30:df:65:6e:87:46:ee:f2:1a:
a0:30:2d:c6:45:e2:87:a8:f2:a3:5d:5c:3f:47:0e:26:8c:c8:
8a:35:92:84:26:42:6d:95:43:99:dd:56:cd:e7:74:6c:50:9a:
26:66:26:10:ff:a7:ba:77:c4:ce:03:b0:64:2c:1f:61:2d:3c:
f7:3a:1c:11:2d:bd:e7:b7:1a:ca:ba:21:18:2c:17:55:5b:66:
c1:a9:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:06 2025 by rpki-client