Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa
File: c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa (raw, json)
Hash identifier: PsBwrq9HPCJd03RpIFbPfEcv4rR7Sy/QoFe02ss5e+w=
Subject key identifier: 26:81:85:E7:0D:49:F5:5C:41:62:2A:8C:69:30:3D:49:2D:E0:B4:28
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858486D9053EB72CCFE37A4AEA880
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 22781
IP address blocks: 108.171.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:53:eb:72:cc:fe:37:a4:ae:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=3e763d48-f262-4fa5-a4cc-97d1793bc49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:03:55:74:ab:46:b9:13:64:4b:92:f2:95:
fd:62:b6:58:c0:11:6c:29:d1:15:80:53:95:70:ea:
d8:fd:12:e7:87:2a:03:57:bc:b7:fe:f4:ea:ec:3f:
09:99:af:16:74:a2:d9:a7:2c:23:b0:8e:e3:9c:02:
54:63:fc:19:77:ea:56:dd:54:fe:06:2c:8e:f9:dc:
17:f9:aa:f3:b1:a7:9e:1d:9e:e5:f2:ec:65:53:8d:
37:83:41:f9:43:0f:71:97:50:c8:62:36:4c:c1:df:
60:98:73:ae:bb:d9:d3:22:b2:4e:0d:bd:5b:48:57:
4b:55:e2:ef:72:68:ee:00:95:88:05:42:69:8e:f8:
0f:ec:20:73:2b:e8:55:cd:5b:26:da:32:2d:ef:45:
76:c5:85:4a:ab:ec:de:7a:5f:2b:54:c8:a6:4c:f5:
9a:f5:45:7a:8c:db:82:b7:87:6e:dd:5b:a3:a2:bd:
5f:0d:fa:4e:6d:25:de:10:12:3e:e5:77:20:3b:6e:
57:7c:ee:16:a7:82:4f:50:1d:c9:62:7d:32:b9:f2:
90:07:d6:1a:1a:1b:52:c3:32:43:a8:36:98:8d:52:
f5:83:06:80:ec:c0:6e:3e:57:81:b7:d2:ec:13:10:
cd:09:74:e9:2c:a7:14:1f:96:c3:4c:45:e8:b2:ea:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:85:E7:0D:49:F5:5C:41:62:2A:8C:69:30:3D:49:2D:E0:B4:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
108.171.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:26:8a:b7:2f:0c:2d:13:cf:3b:48:db:1b:19:fe:0b:c5:b3:
24:c4:6a:11:5a:ff:4f:58:92:f9:ff:d6:03:c8:fb:a6:cc:a6:
f1:5a:59:ab:e3:9e:96:8b:0e:a2:0d:3a:bd:66:44:4b:29:a7:
12:a9:1e:b9:15:d1:dc:54:94:d1:d6:2d:24:5c:fd:c5:75:f5:
11:3f:53:cb:62:70:7a:34:ff:2b:b5:ac:00:ba:37:c0:44:00:
f8:1a:b2:a8:4e:bd:f4:d3:b2:11:cf:e3:12:f7:70:31:39:7e:
6a:62:0d:c3:3e:70:7e:3a:40:ff:e3:30:7a:df:7d:c4:80:58:
b5:3f:90:e5:72:77:b4:d1:03:41:bd:eb:c0:56:d6:b7:da:c2:
24:91:84:04:90:95:d1:aa:68:1f:dd:79:04:8b:de:11:4a:38:
67:63:62:ad:75:9b:97:6f:99:19:f7:5d:d2:59:ca:a1:9b:31:
42:d8:0a:7d:6c:01:91:43:f7:97:59:ab:32:0c:50:0a:6e:13:
e9:75:f9:19:f1:e8:89:71:f0:54:96:4b:72:b7:dc:e2:b7:c0:
45:f2:78:6a:ea:8d:4c:30:ba:7e:f0:13:6b:68:d4:2e:c4:0a:
4b:b8:35:80:22:6f:09:2d:82:03:c6:15:74:82:9a:6d:a3:ab:
c1:eb:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:52 2025 by rpki-client