Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa
File: d8158ea6-675b-392f-9e70-902e8aa16a98.roa (raw, json)
Hash identifier: D3131NfZcnbg+QFM4CNHvTwFRIPnYcgR0kNnltQWMUA=
Subject key identifier: 58:FE:C7:A3:21:04:F4:8A:B6:31:44:2C:D2:B4:01:82:F1:C0:57:5D
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B17D0DD9372AF948EF400
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 174.137.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:17:d0:dd:93:72:af:94:8e:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=46892cc9-74ae-4e9a-ad6d-98550bc5c9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:ae:01:a3:a3:56:ff:22:4c:ab:3c:40:46:
01:78:1e:3b:e0:a9:92:44:c9:7a:be:df:c3:ac:44:
57:fe:d3:a8:6b:86:8f:83:24:83:7e:0f:8c:7e:9b:
ed:f1:34:83:8a:39:b3:52:90:59:35:6f:76:bd:25:
7f:0f:af:57:4f:b1:46:9d:c9:f7:a1:5d:23:ed:21:
90:27:25:87:1e:8a:7f:1d:ac:6d:9b:ca:0b:bb:29:
ee:46:0c:53:3a:d5:9c:d2:ae:83:d2:ba:af:b5:49:
b1:f0:45:98:09:e1:f7:30:7c:81:bd:11:3f:83:f0:
f3:ab:3c:34:29:14:ce:f7:29:19:4e:4d:1b:ae:5e:
29:63:68:8a:83:68:a0:60:ca:dd:1e:4c:e3:80:b6:
90:7a:04:69:99:09:78:54:68:1c:5f:9a:23:bb:93:
49:97:41:af:e2:53:25:a1:87:8d:5d:d2:6b:69:58:
e8:9e:76:85:88:28:d8:73:61:ab:fd:0a:b6:e7:3e:
d8:95:ce:f5:48:2e:8e:5f:df:33:0d:d5:9e:77:f4:
67:9e:42:23:14:ef:69:a4:d6:6f:30:08:e9:3c:6a:
4f:bc:0a:69:d2:0f:c8:75:7e:57:30:fb:69:3d:3c:
5c:6a:2d:41:ee:06:8f:07:27:ca:b7:1e:7d:c3:27:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FE:C7:A3:21:04:F4:8A:B6:31:44:2C:D2:B4:01:82:F1:C0:57:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:0c:0d:4a:6d:17:d8:64:74:30:ba:d8:58:c3:e3:07:b6:9f:
b7:96:33:8a:37:03:64:56:04:9f:90:72:0f:75:7d:1e:d4:86:
52:62:ca:81:1e:b1:b5:a6:49:fb:38:11:8a:2a:f3:f2:55:93:
30:8c:d2:f4:fe:f5:8c:f5:d7:9d:06:ca:1b:84:0f:3b:f1:cd:
07:f5:dc:38:ef:68:d6:7e:9a:50:ad:fc:af:ad:56:53:fa:de:
d5:00:a1:dc:12:99:9a:81:ad:75:f5:e7:e9:e8:d3:bf:8b:52:
64:cd:21:57:a2:02:e4:a4:ab:8f:3f:c0:0b:5a:42:cb:4f:57:
ce:81:9b:23:9d:39:86:7e:49:b2:1d:de:dd:bc:24:a2:03:20:
44:83:ec:4c:14:51:71:a5:1f:7c:d9:98:69:2b:54:f9:32:67:
29:94:d9:73:e5:2a:f7:33:68:11:2f:6f:b8:92:2b:8f:fc:8b:
a3:e1:47:f3:32:0f:4c:a2:e3:3d:89:94:d7:84:96:3c:9e:59:
9c:b6:c6:53:77:d7:48:d0:6b:d4:75:ae:96:a6:31:5f:a1:48:
61:87:a5:f6:66:82:c7:2a:1c:48:35:09:c3:4a:32:29:ae:c1:
ce:6a:02:a8:64:56:2c:3f:63:f4:7c:e0:41:ef:91:d8:18:ec:
0d:70:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:14:24 2025 by rpki-client