Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/313c088d-dab3-3856-9376-903f80132488.roa
File: 313c088d-dab3-3856-9376-903f80132488.roa (raw, json)
Hash identifier: rx/wl9RUpk4Ebe89JEjvR4Tku0FCS04jWyag5xyCWf8=
Subject key identifier: 93:69:F5:95:0A:0F:9E:B0:4D:2C:AF:18:1F:9A:59:2E:89:60:34:AF
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285847DC649E52B9A0C142A8508E00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/313c088d-dab3-3856-9376-903f80132488.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 852
IP address blocks: 108.172.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:9e:52:b9:a0:c1:42:a8:50:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=eb1de104-8960-4613-bbba-1d9d01cdbe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:d0:94:f5:dc:76:ac:54:10:8f:36:1e:e8:
02:95:b5:db:4a:b2:7e:a8:90:26:c7:5c:ea:50:3b:
54:95:cf:5a:99:3e:d5:90:f2:5e:8d:bd:c9:0a:84:
b9:e0:bd:ee:61:4e:bf:dc:de:8c:04:c0:11:0f:cf:
1f:3e:89:b8:24:5f:4d:f1:00:30:c4:5f:dc:b8:7c:
18:a7:43:21:bf:e1:ee:ea:b0:44:40:b0:ee:57:56:
10:32:54:28:2a:0f:ee:23:eb:8c:13:62:c1:42:26:
32:9a:5d:53:ab:50:61:f6:34:aa:40:ae:27:ca:b9:
9e:f8:0b:9c:b1:76:76:cb:02:0f:db:a0:0f:80:4a:
14:5f:b8:c3:ad:56:76:75:c8:02:16:44:b6:01:26:
b3:07:7c:c5:47:85:72:18:2b:a0:67:85:fe:de:9b:
53:7a:c4:a8:70:34:a0:03:58:1a:38:4f:27:ed:8b:
e4:14:81:8f:f2:a2:ab:39:5b:22:5d:c5:ea:d4:92:
14:e0:ef:61:36:1e:a9:3a:a6:ae:bb:2a:07:45:51:
4c:fe:64:9d:3f:fc:ff:9d:a7:b9:81:a5:59:af:c0:
f6:d9:98:3f:bd:1e:b9:b9:cb:4c:3f:37:77:9c:25:
9f:15:ad:0f:9d:20:63:ed:2f:3f:f8:fd:b1:ae:96:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:F5:95:0A:0F:9E:B0:4D:2C:AF:18:1F:9A:59:2E:89:60:34:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/313c088d-dab3-3856-9376-903f80132488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
108.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:86:b5:1c:ff:3e:3c:e4:6e:44:d1:4b:30:6c:d8:33:aa:5c:
15:6e:af:3f:65:78:3c:a3:b4:89:fe:94:2d:df:63:43:59:9a:
5e:f9:41:9d:d9:ec:c2:72:6b:e2:23:2c:7b:56:27:4e:6b:da:
08:f7:b4:2d:de:d8:02:e9:0e:e8:b8:0a:b7:ae:9b:37:c2:1b:
23:df:d6:19:f0:16:91:91:da:c6:df:19:a7:d5:62:2b:1e:33:
d9:3b:61:fd:c2:26:0e:95:76:24:e4:b1:ef:ec:9b:b6:0a:01:
fe:9c:82:0f:f3:a7:5e:de:42:d9:f6:33:e7:ee:af:b4:b9:38:
16:dc:05:77:5e:94:da:82:25:16:48:68:09:3c:77:ed:65:74:
3e:45:75:d3:a4:5c:dc:50:39:14:9b:e8:fb:7b:8c:be:68:07:
e2:5a:f0:c8:e4:60:51:52:ad:a9:08:60:a4:69:45:20:0a:fe:
b7:5d:94:f1:fa:68:0e:89:6a:01:9b:d2:15:55:47:e0:17:08:
07:76:bb:3b:45:77:b2:53:f8:08:4a:6e:e3:42:f7:b7:33:ff:
33:5c:cf:8b:a4:3a:c1:55:64:b8:68:14:9c:c3:97:c8:19:86:
09:68:b8:17:ff:7e:46:92:78:f1:19:ad:24:21:24:cd:3b:8d:
3a:e1:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:09 2025 by rpki-client