Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/f2b1bf4c-2212-3320-825b-ce87470ebea1.roa
File: f2b1bf4c-2212-3320-825b-ce87470ebea1.roa (raw, json)
Hash identifier: Hmo19IOXyIRN7egLb66XsgF9jT2ipqNDPpW+DtiBOf4=
Subject key identifier: 81:F9:8A:2A:8F:5F:8B:F5:87:DC:38:19:CA:A3:62:F1:65:FC:4E:D5
Certificate issuer: /CN=2a3f8f82-6291-4c3c-80ec-01036351e32a
Certificate serial: 010D0C9F432858484C1018C345A9DF4638EF9280
Authority key identifier: 3C:F5:76:4F:2F:E1:77:C1:30:88:58:71:75:08:1A:BB:3B:31:CF:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/f2b1bf4c-2212-3320-825b-ce87470ebea1.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 400915
IP address blocks: 107.180.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:18:c3:45:a9:df:46:38:ef:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a3f8f82-6291-4c3c-80ec-01036351e32a
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=edf57ff0-6702-49a2-bd6d-b368bd59f212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:a7:1a:40:99:4c:1d:e5:21:d0:13:29:99:
99:20:c0:72:2a:4e:4a:7b:00:62:16:36:37:ca:52:
cc:97:41:1c:68:d2:bc:15:40:02:48:c8:87:56:26:
84:1e:03:b5:5f:3a:65:2b:18:6a:b6:ee:31:0b:9d:
5c:d7:97:28:fa:af:08:fc:be:e9:b9:a8:43:97:f4:
b3:ef:d0:99:07:33:78:cf:e7:8b:4a:c2:0a:cd:f2:
e9:c1:0c:09:fc:a6:eb:00:57:37:a9:d2:dc:05:90:
b4:77:dc:b2:55:e7:88:c8:b6:d2:ee:94:0b:d8:b7:
d5:e8:dc:a3:b9:d7:a4:b6:5e:c9:6c:75:de:d3:94:
f0:fd:af:c8:6f:41:a2:90:15:25:d8:5f:43:72:d9:
b4:8c:97:89:88:26:7e:fb:3a:36:88:99:d0:8b:10:
5a:89:aa:b3:15:5b:96:6b:87:ed:78:6d:fb:8d:67:
f5:ea:16:90:fb:26:56:32:f9:ce:4d:49:c9:61:a7:
a1:07:36:a4:93:a8:dd:0e:d6:3a:02:f6:86:af:ba:
72:fc:00:ba:37:b2:0b:75:c0:db:73:f0:8e:59:c2:
b0:5c:13:95:d6:75:5e:c5:ec:80:90:07:4b:f5:e5:
2c:0a:cf:1a:5c:86:08:73:64:b4:c7:a1:ff:be:b0:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:8A:2A:8F:5F:8B:F5:87:DC:38:19:CA:A3:62:F1:65:FC:4E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/f2b1bf4c-2212-3320-825b-ce87470ebea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/2a3f8f82-6291-4c3c-80ec-01036351e32a.crl
X509v3 Authority Key Identifier:
keyid:3C:F5:76:4F:2F:E1:77:C1:30:88:58:71:75:08:1A:BB:3B:31:CF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a.cer
sbgp-ipAddrBlock: critical
IPv4:
107.180.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:e7:31:8a:54:a6:bc:2a:60:09:47:af:05:f8:af:45:a1:b6:
b8:76:ed:25:53:5c:93:e5:aa:f2:5e:7a:f6:32:67:72:fb:d2:
97:5f:c0:f9:63:f7:4b:ea:d0:eb:6d:1b:f6:2b:a9:f1:32:83:
4d:cf:ac:8b:51:7b:53:49:e6:98:42:98:65:90:e6:2e:a1:cd:
d9:1e:50:dd:ad:0c:49:c7:4d:83:02:a4:88:7e:79:d3:ca:46:
d5:73:cf:e6:ee:a6:01:3f:0f:6a:1f:61:d7:9a:c0:4b:1f:04:
9d:b9:83:04:f2:a3:8d:5b:79:12:e0:a4:15:e8:a0:40:da:af:
e2:61:90:4f:71:76:67:4a:34:37:e3:bd:ff:9e:42:48:a7:7d:
39:55:c9:20:cb:81:c0:71:b2:35:9a:c3:5f:b0:49:be:1f:c5:
b4:d7:aa:ab:07:95:cd:40:67:d8:4c:dc:2b:a9:2f:12:c9:ea:
70:80:cf:96:3b:cd:f0:00:1a:a3:73:fc:c9:27:2f:71:7a:28:
97:0f:68:57:62:76:2d:78:45:39:3b:6a:08:2f:ad:64:8f:f2:
e7:89:05:21:58:84:4a:7a:17:f5:26:3f:18:c5:f1:ce:e9:a8:
8d:22:77:17:a8:83:e5:62:ca:8a:4a:3b:e9:d3:ca:ab:82:fa:
14:57:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:30:27 2025 by rpki-client