Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/b8fc9129-acc0-3377-a086-34897580b7c6.roa
File: b8fc9129-acc0-3377-a086-34897580b7c6.roa (raw, json)
Hash identifier: PVh3zhS8QgWDfBuH5perGCzYSDGULWEPYU7CaezueqM=
Subject key identifier: 5C:E2:5D:4B:2C:B3:E2:1F:EB:BF:F0:00:49:F1:DC:15:44:3A:16:33
Certificate issuer: /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial: 010D0C9F432858489075EB2D6348C793593A8F00
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/b8fc9129-acc0-3377-a086-34897580b7c6.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 55163
IP address blocks: 108.174.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:eb:2d:63:48:c7:93:59:3a:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=10b12e67-a67e-4bab-a766-64cf5292aa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:fa:8e:67:9e:ce:17:61:2a:62:bf:85:6b:
52:46:39:89:bb:38:63:6d:37:8e:36:1f:b5:8a:e6:
e5:36:56:21:79:1d:fe:cf:6f:5f:35:f1:39:e3:c6:
b6:2c:1b:e2:d5:5f:f4:10:b9:f5:b3:08:59:31:f5:
07:e4:49:1e:cd:31:0d:34:37:26:39:58:8b:ad:b1:
de:1f:a9:fe:08:5b:13:8a:9b:32:d9:79:b6:5c:50:
72:39:11:11:ae:c0:ee:56:21:b2:33:9d:a3:21:df:
83:7c:ba:64:b4:d9:c4:9d:a1:49:b3:4e:ff:96:84:
d0:5e:e1:93:45:94:be:f1:4c:96:e2:b1:e4:5d:ad:
1e:66:9d:2b:2e:a6:80:d5:4e:c1:32:92:25:04:85:
df:2a:75:c0:97:e7:08:21:b3:54:8f:e5:b7:03:3b:
10:17:fe:4d:1d:4c:ae:1f:01:8a:43:f0:6e:1a:25:
31:55:bc:cd:9c:7c:2a:97:18:6f:56:27:44:86:c8:
30:55:95:df:7f:05:50:b9:e8:28:18:c9:85:4e:78:
6e:fb:eb:a6:d7:8e:51:0e:ee:38:0c:71:ca:16:a7:
3d:7e:27:40:8d:23:ec:a8:0d:f3:82:a7:a7:8d:bc:
fc:04:25:d4:27:43:7e:06:54:7e:f4:cf:6c:37:6e:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E2:5D:4B:2C:B3:E2:1F:EB:BF:F0:00:49:F1:DC:15:44:3A:16:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/b8fc9129-acc0-3377-a086-34897580b7c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
X509v3 Authority Key Identifier:
keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
sbgp-ipAddrBlock: critical
IPv4:
108.174.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:26:0c:2c:59:71:f7:7e:a6:7d:dc:b8:3c:02:fe:0b:73:8e:
d2:94:7f:86:cf:21:5d:05:ce:f5:c0:01:79:00:7c:c5:46:bb:
90:07:44:ab:cd:e1:00:08:d0:15:c3:e8:7d:66:a5:1a:9c:90:
49:f4:3b:1a:eb:32:da:49:af:2a:3f:ed:c5:8f:77:de:02:9e:
a2:02:61:c0:42:59:f7:04:c2:c9:a2:28:59:b9:63:6e:66:36:
dc:5d:eb:b6:a4:af:24:52:a9:5f:6c:05:4c:43:b2:c6:5a:f0:
69:63:d0:d6:7d:3f:ee:bb:bf:48:62:48:7e:28:26:8f:8d:eb:
40:8a:e5:1b:c7:86:ed:f9:45:76:96:d9:56:fd:d3:d4:86:20:
f5:4e:b1:9c:3e:91:c8:ae:ff:bd:b8:39:e5:f1:0e:ff:b8:89:
51:eb:17:b2:09:f0:42:a4:31:f3:74:83:7f:ce:b5:8b:de:a7:
e6:36:cd:6c:f8:1b:c5:76:87:67:ce:1a:5c:a3:2a:7f:85:3c:
32:f9:10:14:bf:5b:58:57:08:ad:ce:cd:27:5d:94:a8:7e:2b:
8e:a6:05:f2:f8:2c:87:fc:78:1f:43:b3:49:bf:ea:cf:8d:7a:
b0:82:de:10:44:3d:29:11:91:86:d7:28:d1:89:f2:a0:40:73:
62:51:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:40:33 2025 by rpki-client