Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7d242c40-3559-322b-95d3-9278be1b329f.roa
File: 7d242c40-3559-322b-95d3-9278be1b329f.roa (raw, json)
Hash identifier: okeaDHZoFZZoteLOUN8pDUjevUCNGDJRz5X2Fh42Vn0=
Subject key identifier: 2D:0E:13:40:BB:D8:A6:22:64:1C:B3:C2:D8:05:BE:7F:34:0D:E1:77
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482BF555BB8354A5432F4AD300
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7d242c40-3559-322b-95d3-9278be1b329f.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20454
IP address blocks: 108.170.47.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:55:bb:83:54:a5:43:2f:4a:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=32c4f7d2-3a5e-482f-bbae-712ceeefff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:9f:4e:f3:bf:53:ed:41:6c:18:fa:6a:5f:
7a:dc:e9:77:71:da:e8:dd:0a:09:cc:be:d7:15:fd:
ba:40:6b:e4:8e:34:1c:87:98:bc:c3:f2:e3:6c:f9:
1d:6f:d8:ac:78:b2:43:50:3b:c3:88:7f:da:f9:bd:
92:67:74:39:76:e0:b2:43:11:f8:cd:64:8e:ec:e4:
1c:98:ee:ad:41:01:02:b4:3e:ce:5b:51:33:9d:3d:
73:a1:54:0c:02:af:92:46:b2:e5:c8:73:de:22:60:
23:f0:dc:11:a8:49:1d:94:4b:7a:25:9a:dc:21:de:
3b:11:20:59:1d:03:a3:52:bb:fc:11:d6:64:c0:8b:
76:3a:a8:61:f0:93:cc:00:40:e7:6d:ce:f3:a2:be:
9f:6e:83:48:a1:21:14:f5:bb:55:56:ff:05:f8:ba:
98:2c:6d:24:f2:dc:14:c2:6e:62:c5:bb:44:40:22:
27:88:5c:a7:d1:73:90:ec:ab:c0:e6:1b:77:e3:ff:
42:24:67:84:93:69:57:4e:5d:51:a4:83:95:65:d6:
22:96:86:eb:7e:76:22:09:3b:85:d5:dd:96:73:12:
ed:95:b9:f0:50:74:15:d4:86:d5:3c:6d:f7:1a:4b:
53:05:2a:cb:2f:b0:29:2c:54:6e:36:aa:4d:23:d1:
94:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0E:13:40:BB:D8:A6:22:64:1C:B3:C2:D8:05:BE:7F:34:0D:E1:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7d242c40-3559-322b-95d3-9278be1b329f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:8a:b6:fb:c3:32:8f:27:e6:ac:87:b0:fa:be:ad:d7:51:a7:
f9:ea:85:3b:04:34:41:ad:e2:eb:22:7a:86:08:a1:a2:6d:cf:
19:bf:c6:1d:d0:7b:92:f4:dc:b5:e7:74:11:e7:a7:b5:79:a3:
2d:a3:7d:16:56:04:2d:ef:73:1a:68:92:ec:3f:bd:6a:3c:15:
1b:61:75:d3:38:b6:33:c5:48:23:dd:76:e5:dd:e2:a1:21:27:
ba:fe:6f:00:5a:57:9a:ee:54:6f:37:b1:97:9d:1f:74:63:00:
f5:ba:46:d2:6c:ed:9a:ae:ec:42:d1:73:c2:a7:6e:98:d0:16:
44:82:a1:d5:07:b5:de:10:87:8c:6c:e0:6f:d3:cf:fe:09:18:
83:5d:fb:1d:90:20:e7:92:ca:4b:ad:8c:c4:c5:bf:e9:e7:48:
af:5e:94:44:f4:f0:6f:e3:47:ff:2b:ea:d6:07:82:e1:c8:f6:
fc:5b:b6:99:c1:a9:88:bf:b0:bc:e2:02:02:6e:ec:7f:b5:cd:
f1:7e:e0:55:97:8b:a9:7c:db:9b:83:96:cc:a4:e0:d0:ba:9a:
d2:f6:0f:56:2a:e0:39:dc:88:97:bb:d8:a8:ee:15:d2:75:f6:
e5:f4:6d:21:38:e0:f8:22:75:8f:29:b0:93:a8:90:31:af:f6:
48:42:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:20 2025 by rpki-client