Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea140b0e-fbec-328e-ad5e-7fce06f11002.roa
File: ea140b0e-fbec-328e-ad5e-7fce06f11002.roa (raw, json)
Hash identifier: J/QJVhjUj6yatSBTzTHCWesmtonGL/OhQWTgqOi5esE=
Subject key identifier: 2C:B1:34:7E:97:1E:E4:61:8C:33:DC:86:0E:76:88:3E:C0:CD:8A:0D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E094FCB3B0C75636111AEB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea140b0e-fbec-328e-ad5e-7fce06f11002.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 108.59.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:fc:b3:b0:c7:56:36:11:1a:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=cb083dce-3002-48d4-a079-c48f24ed9244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:8d:89:a9:f5:f6:a0:2e:3b:47:ab:69:7e:
bc:46:cb:03:9f:ec:8b:8e:7e:1e:3f:32:b9:23:10:
ca:36:60:af:d5:42:cd:dd:91:4a:a4:df:f6:d8:b8:
57:78:ba:98:e0:9f:92:b9:eb:95:a8:2d:ba:a3:e8:
90:48:25:75:8f:41:61:2a:d2:bf:c3:c7:fc:d2:5b:
88:2b:73:9d:26:9a:7d:8f:fc:69:c4:22:68:93:23:
cc:c2:1e:94:c9:a7:46:cc:3f:e6:b4:28:76:54:c1:
6a:f4:8b:aa:0e:19:97:55:4c:de:15:36:6b:5a:17:
a5:1d:a6:55:f6:68:5a:36:9b:aa:d8:0b:83:29:b5:
1b:99:0a:d0:41:e4:53:57:f0:a9:7d:69:6a:df:82:
4d:6d:ab:35:c7:7e:99:ac:7b:63:a0:a4:58:a0:72:
29:f3:9f:29:8a:c9:82:69:74:21:f9:03:43:e0:d7:
4c:ba:88:39:b8:61:b1:9b:32:21:09:8a:e8:9e:47:
4c:62:b0:34:f6:d9:49:a1:44:34:af:d6:da:38:f6:
d4:35:c4:10:a3:d4:ad:69:e5:43:37:77:6d:99:14:
74:43:ee:5c:cd:24:ab:57:46:45:23:68:17:99:09:
64:ee:d2:42:d2:7a:68:d6:7a:a3:93:a5:2d:ff:0f:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:34:7E:97:1E:E4:61:8C:33:DC:86:0E:76:88:3E:C0:CD:8A:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea140b0e-fbec-328e-ad5e-7fce06f11002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:50:5f:57:31:3e:85:2c:d6:ce:02:df:fc:f9:4b:90:b0:bf:
d4:9f:c5:43:d0:8e:4a:91:08:77:fe:63:fc:f0:39:73:58:ad:
41:f1:fd:52:51:ea:bf:1d:7b:94:a8:cf:ec:d8:74:5f:3b:8a:
02:e8:36:91:58:0a:08:38:26:48:77:ce:78:97:3b:09:23:f1:
1b:c7:0d:5b:08:d4:1c:4e:d6:27:20:f5:ea:68:4b:ae:5a:cf:
0b:6d:19:30:be:a9:b9:2f:86:54:02:14:89:1b:3e:51:5d:67:
33:cc:b1:98:53:aa:7b:d7:5d:32:c1:57:7e:30:d9:76:02:82:
bf:8d:42:87:7e:05:1a:0f:c4:f1:6e:94:59:65:15:2a:6a:17:
cf:4f:fc:1a:17:21:74:45:d0:03:2e:03:ea:1a:0f:d8:19:61:
72:d1:cf:eb:a0:fe:52:6e:68:08:28:b5:2f:98:9b:13:e0:0b:
12:d0:fa:5b:05:5f:3a:e8:11:da:9b:e3:2b:36:9d:44:61:5e:
a2:48:f3:db:bc:e3:35:72:13:bf:0d:f5:91:6e:c5:62:15:0d:
e1:d9:ef:89:6b:99:9d:00:76:d8:5a:11:88:78:84:64:fd:a9:
e9:08:58:f2:a8:c8:6b:14:d1:55:ab:53:c5:bc:c2:e3:03:ac:
2a:dd:a4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:44 2025 by rpki-client