Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28aa0558-7dd6-32b0-bfc2-1caa8ab0a611.roa
File: 28aa0558-7dd6-32b0-bfc2-1caa8ab0a611.roa (raw, json)
Hash identifier: QN9HZK+R5TN6a+S4x5fIpKH+CgTfncjZnYRetTHP19s=
Subject key identifier: E4:2A:E6:E7:93:73:F8:1F:27:4A:F2:BA:8C:DC:B1:35:54:97:5B:74
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E094EBF6E8071C101DDDF520
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28aa0558-7dd6-32b0-bfc2-1caa8ab0a611.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 107.167.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:eb:f6:e8:07:1c:10:1d:dd:f5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=3dacbe43-9c3d-48c2-a5e0-530704d71b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:0c:7d:b2:bd:ba:9f:07:78:e0:62:69:31:
52:e5:a6:36:b4:ee:6b:d2:77:02:65:01:2a:6b:02:
b2:5e:84:8e:a6:6c:40:53:65:a8:19:70:ef:00:04:
63:01:eb:bf:57:23:80:2e:54:9a:76:e1:23:c6:1c:
ab:5b:87:2c:27:9c:c3:83:b6:ac:1d:29:d5:0a:37:
8b:72:29:91:fc:d7:a1:59:2e:57:7b:c7:08:d6:26:
5f:2f:1b:82:d5:c0:78:e7:45:6d:42:5a:9d:5b:56:
c3:22:be:76:67:9b:b1:55:f8:31:6b:59:6b:0e:1c:
ea:07:b8:21:fd:cb:d5:c5:d9:bd:bd:0a:b2:84:2f:
e6:6d:ea:14:77:da:b6:5c:e0:94:75:f7:7c:3a:48:
3b:53:60:a9:6d:63:1c:aa:31:31:64:63:28:ff:2d:
30:61:d3:82:fd:25:4b:36:98:e0:5e:1a:8d:26:ef:
a6:07:80:fd:cb:db:ef:f1:1b:c4:84:03:30:4f:56:
5e:4a:e6:d0:63:c8:8b:41:81:79:fb:13:c7:6e:b9:
96:d0:ef:99:cf:8a:e9:a6:d9:97:54:76:88:92:85:
41:99:88:39:68:0a:db:72:3f:35:04:a7:96:1e:7f:
ed:39:58:c5:c0:12:81:fc:3b:07:9a:4a:86:e7:d1:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2A:E6:E7:93:73:F8:1F:27:4A:F2:BA:8C:DC:B1:35:54:97:5B:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28aa0558-7dd6-32b0-bfc2-1caa8ab0a611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:78:7a:b4:c7:f5:b5:34:53:d7:01:dd:ef:a0:b0:d8:5f:89:
81:18:a3:62:2d:9c:8e:c3:74:73:a3:68:58:f5:40:49:51:35:
01:c6:36:41:f4:36:4a:1e:25:7a:2c:a9:f8:c1:88:68:49:0d:
4f:4e:b4:2d:73:d1:8e:c3:80:fe:be:b4:78:35:98:da:4f:bb:
4a:2c:83:fe:a2:9b:99:55:ce:cc:96:92:54:c7:69:76:f2:ca:
3a:5e:a3:77:14:cb:19:9a:63:b1:54:24:e0:f7:fa:18:49:54:
de:45:4f:f1:9e:50:4c:6e:2d:69:b9:81:a4:ce:65:e8:95:a7:
e2:2d:fb:1e:c8:88:c9:89:03:21:77:4e:ba:69:ca:20:a4:94:
6b:72:a8:11:75:81:15:c7:16:83:72:73:c9:bf:5b:e2:3c:67:
db:3d:d4:0b:d0:51:e3:b0:9f:76:ca:20:ec:d0:34:36:b7:a4:
c4:fc:d1:de:bc:ea:64:46:be:79:86:3d:0d:3e:27:83:c0:ff:
65:5c:41:83:ad:f8:d2:9a:c8:a1:aa:be:02:e1:17:b9:f6:af:
3d:4a:ea:d5:46:92:68:16:1b:c8:3b:9a:6d:a7:d5:c5:69:cc:
a3:f8:27:37:30:c5:2a:f0:41:39:fc:a4:b1:72:78:6c:2d:1f:
e9:3e:d5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:04 2025 by rpki-client