Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ce0ce094-4f4c-3be6-9a20-56a41624e713.roa
File: ce0ce094-4f4c-3be6-9a20-56a41624e713.roa (raw, json)
Hash identifier: /8BrGPbae6fjNuztw0edHttnUP43kLmxo5Tb/BsEzAs=
Subject key identifier: F8:39:F6:5F:BA:EE:9D:D7:19:C3:14:66:0D:D6:6B:E0:6E:4E:57:67
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848143A669C49721AAD3F2B7280
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ce0ce094-4f4c-3be6-9a20-56a41624e713.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 8560
IP address blocks: 108.175.0.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:66:9c:49:72:1a:ad:3f:2b:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0437daac-5ae2-404d-b113-666cf5a02e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:4c:6f:fd:a4:db:55:a5:c7:68:7c:de:64:
a4:a4:1d:66:b0:af:2a:1f:b1:14:d0:ec:d6:04:d7:
e2:a2:eb:e7:4b:2b:0f:e9:60:bb:e1:a9:61:8c:38:
db:9a:77:2d:f9:b7:6b:ee:7d:01:5b:08:7e:83:eb:
98:85:7c:06:c3:1c:b9:1d:5f:a7:64:c6:98:fa:4d:
9f:ab:e8:26:18:4f:18:9e:3c:ab:d2:a1:ec:e6:1a:
91:43:28:f2:1e:df:94:86:2d:24:67:44:42:8d:4a:
f5:d2:8d:99:06:7c:82:39:7c:d9:07:b5:42:65:05:
e1:39:fa:c9:dd:14:e6:73:59:4e:89:31:71:45:e9:
06:92:f0:c2:c6:fa:84:f9:b9:6c:d9:1c:de:b3:9c:
f4:4c:66:01:13:11:c3:16:e4:ba:8e:fe:17:27:52:
50:95:66:29:eb:0e:fa:c7:c2:e4:e8:64:fa:5d:89:
00:92:84:2a:5e:57:ab:52:5a:6d:b0:68:14:6d:dc:
87:3b:1e:e5:4d:a1:b9:8e:8f:57:e0:4f:7e:bd:c9:
e3:83:3c:23:45:4f:7f:21:d8:5a:bc:40:e3:fc:52:
59:13:a8:b5:34:25:1c:9d:ac:ab:bc:14:e9:1d:48:
5b:fe:2b:9e:97:ad:d9:94:fd:69:62:af:01:4b:27:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:39:F6:5F:BA:EE:9D:D7:19:C3:14:66:0D:D6:6B:E0:6E:4E:57:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ce0ce094-4f4c-3be6-9a20-56a41624e713.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
108.175.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:02:89:05:e3:da:f6:c3:2d:7c:70:1b:58:c9:01:45:93:52:
35:8e:fc:2a:95:6a:f8:59:c0:f2:ec:6c:d2:70:14:7e:a8:cb:
90:74:14:d2:2f:6e:46:ec:71:68:2f:5a:6d:55:81:77:65:b0:
62:db:80:5a:b8:65:a9:e4:c0:0b:14:22:73:30:8e:65:63:00:
f9:c9:b9:ee:6b:f2:93:05:ff:16:1c:ec:0f:dc:9a:fc:23:04:
03:05:3f:25:49:67:0d:47:fb:fe:ef:20:6e:d6:bf:73:d0:4a:
18:12:9f:c4:52:58:5a:88:aa:36:e6:6a:95:b4:5b:93:cf:d3:
43:cb:92:f0:d5:3a:d0:6d:6f:73:c6:91:bc:84:99:e6:79:a7:
c9:b1:d1:5a:1c:d7:b5:cc:e6:f4:f9:b7:b4:c7:16:09:5c:68:
4a:f8:44:61:74:b3:ce:db:97:e5:8c:4f:c4:f5:41:e3:f8:f6:
40:c9:8e:a6:a2:cd:b3:c8:f2:43:b3:9b:3c:79:f9:e1:41:b1:
b3:4c:76:97:6b:c1:b9:13:65:eb:eb:6f:f6:2d:72:94:38:b4:
e6:99:cb:b3:97:37:9c:dc:a6:e4:9c:35:99:d1:0b:20:02:16:
ab:56:40:c4:4a:39:f9:92:fd:c6:3f:50:85:29:84:69:de:12:
ad:ed:eb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:31:45 2025 by rpki-client