Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/98bde158-b1d7-365d-ae30-4ecd92327008.roa
File: 98bde158-b1d7-365d-ae30-4ecd92327008.roa (raw, json)
Hash identifier: 7sr3FdlnrgxdBFBFFueNy3UWmIJQLArFGRG3PDM82Uc=
Subject key identifier: 52:86:86:03:C9:11:48:16:D8:11:FF:3A:64:6C:06:EB:91:8F:87:1A
Certificate issuer: /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial: 010D0C9F432858488AE09ACB8927E9CA8378CA80
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/98bde158-b1d7-365d-ae30-4ecd92327008.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 14413
IP address blocks: 108.174.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9a:cb:89:27:e9:ca:83:78:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=ab7f82ad-07b0-45b6-b155-1563835596db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:35:49:d1:9a:ba:c6:9e:9c:27:1b:d2:b4:
5a:4d:dd:9a:a1:45:c9:90:a5:01:f9:3e:ce:45:f7:
1e:9a:3f:52:40:d9:d0:05:47:55:0a:0d:98:11:09:
8a:b4:87:1a:d1:0a:8c:c4:89:be:79:00:08:8a:68:
33:93:ba:3f:66:f6:ec:8b:44:af:66:e2:ad:f0:b9:
87:e3:b3:bc:38:c8:95:e8:cc:81:ee:85:2f:11:31:
73:8f:a2:19:f8:62:42:c6:38:b0:44:07:02:f1:40:
8a:31:a4:4d:16:d0:4e:16:fb:61:6a:39:0f:72:1a:
ac:88:24:73:2b:11:06:2a:fd:1b:80:09:26:b7:e1:
bc:ce:22:b4:13:a9:48:29:cc:ce:0b:89:75:5c:c9:
41:8f:05:88:c1:8e:e7:bf:bc:2d:c6:9c:ae:c1:41:
ff:95:2b:e6:98:6a:82:68:e5:09:4a:be:fa:99:42:
c8:3c:0a:ee:9b:f3:5a:07:25:37:f6:a3:c8:0e:11:
9b:a9:e8:c4:7b:94:7b:e1:88:1f:42:6c:71:47:aa:
f6:e1:f4:29:d9:f4:b2:38:62:d6:75:05:2d:66:4b:
db:d1:88:1e:ed:41:40:72:07:83:89:85:61:86:36:
f2:c6:2a:a9:d9:04:c3:cd:5e:db:cd:92:d1:d7:50:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:86:03:C9:11:48:16:D8:11:FF:3A:64:6C:06:EB:91:8F:87:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/98bde158-b1d7-365d-ae30-4ecd92327008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
X509v3 Authority Key Identifier:
keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
sbgp-ipAddrBlock: critical
IPv4:
108.174.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:60:21:57:4e:ff:ca:0c:4c:e1:e4:e0:99:7d:0c:6a:a5:6c:
ef:e1:a9:de:9d:cc:8f:ef:a6:88:83:7a:e5:33:e9:fe:09:f2:
5d:7c:29:09:ad:87:f4:90:27:3a:fa:12:f2:ac:1b:b5:48:17:
20:80:a6:64:91:bf:81:b0:67:0e:39:c1:4e:db:5b:71:f0:dc:
ff:5e:bf:5b:4a:84:5c:ee:e2:28:f4:9d:b3:27:3f:17:83:fd:
03:82:59:37:09:ce:19:f0:bb:95:40:f9:f2:6a:61:04:3c:e3:
fc:74:5d:dd:7f:39:64:3d:4c:d6:a2:0d:22:de:8e:3d:28:57:
d4:29:db:6a:3f:1d:1d:e5:3d:52:be:93:70:0f:b6:03:8e:35:
d7:73:e8:34:36:26:83:00:8a:20:46:37:3f:dc:9a:c7:2d:0f:
18:12:1e:cd:01:2e:54:99:0e:4c:d2:58:44:8d:1a:c6:fd:b8:
1f:58:be:a6:9c:80:2a:23:42:02:79:4a:d7:aa:83:0e:94:55:
bc:95:f7:72:1a:12:f5:43:84:bc:bb:7f:c3:c9:4c:40:a3:89:
55:67:47:99:aa:1a:3b:7e:bb:b4:5e:3e:9f:fa:90:77:e2:9b:
4e:63:d0:b3:4d:aa:cb:e8:9a:8d:56:22:e2:21:fb:bb:f1:84:
38:fd:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:23 2025 by rpki-client