Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa
File: 4a3559bb-abec-3940-a565-ccc20c2855b0.roa (raw, json)
Hash identifier: Bfa0zfX6VyXrrQ+Zs/OSvGXhCMpjCtrurukh7ZrZ9qU=
Subject key identifier: FC:C9:C2:87:C6:1A:3E:FD:35:C9:87:1B:F1:8A:68:C6:21:E0:B5:7E
Certificate issuer: /CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
Certificate serial: 010D0C9F4328584802359A9F1E4FF2A2912415A0
Authority key identifier: F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa
Signing time: Tue 26 Nov 2024 15:06:31 +0000
ROA not before: Tue 26 Nov 2024 15:06:31 +0000
ROA not after: Mon 24 Feb 2025 15:06:31 +0000
asID: 36352
IP address blocks: 167.253.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:35:9a:9f:1e:4f:f2:a2:91:24:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
Validity
Not Before: Nov 26 15:06:31 2024 GMT
Not After : Feb 24 15:06:31 2025 GMT
Subject: CN=500cc20d-4cf3-47e9-834e-43f2b59229bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:51:75:ae:0a:ed:43:4c:5e:fe:60:f5:5b:
47:af:d0:71:e0:97:68:50:fb:14:a5:c3:eb:08:0b:
c0:d1:41:95:12:45:13:19:6c:99:60:9c:74:0a:3d:
bd:f7:46:89:2d:b6:94:d3:83:a9:fc:79:46:a8:34:
84:9a:fb:bf:bd:34:a2:92:05:ae:44:ab:51:16:38:
0b:90:4b:25:31:f2:90:35:64:8f:e0:e3:d7:b8:e3:
01:f7:56:9f:18:3c:13:b0:aa:c4:d6:a2:bb:65:f0:
61:03:d2:14:8d:69:fc:9f:6c:2d:1f:ee:33:f5:2a:
36:e7:26:64:ed:67:6c:f9:d3:db:b4:04:17:9a:8e:
6f:78:0c:14:3d:c6:cb:e9:e2:1c:94:f7:33:ba:aa:
49:fd:47:4c:47:28:52:08:24:86:59:f9:4e:8a:61:
b0:c3:10:91:55:93:80:c0:5c:21:aa:ba:2d:9a:ae:
e3:ea:ba:f0:ab:01:a4:3e:3b:18:c9:59:a9:da:71:
f7:78:ad:86:66:c5:b0:71:d7:07:5f:0a:cd:b7:27:
0e:3b:dc:15:20:52:a7:0b:b1:00:47:36:92:a7:bc:
82:d0:c7:92:1d:4a:ae:e3:93:a5:51:f6:83:cf:89:
2e:31:11:ea:be:9c:8c:a1:9e:68:ac:57:ff:71:1a:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C9:C2:87:C6:1A:3E:FD:35:C9:87:1B:F1:8A:68:C6:21:E0:B5:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl
X509v3 Authority Key Identifier:
keyid:F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:10:ee:c6:11:3f:71:a2:97:84:1e:91:e9:31:bf:38:dc:bc:
63:9e:8a:0d:ad:48:31:bc:23:65:1b:e2:0e:08:d5:32:db:9d:
5f:53:f7:6f:04:85:24:5a:4e:5c:86:36:7c:fc:35:a4:98:92:
6f:81:c9:58:bc:dc:f7:b0:bc:ef:31:8d:be:c3:8c:ed:bd:9e:
9c:15:f4:64:f3:4c:52:63:2a:0a:69:00:5c:cc:61:5d:da:c2:
56:f2:67:b0:a8:e4:1c:78:ec:f3:dd:70:54:42:81:04:f5:39:
43:90:f3:7c:b9:07:98:4d:96:31:fb:09:e6:2a:01:c3:e3:9e:
f1:87:f8:ee:44:03:0a:d8:9b:00:71:4f:71:35:14:dc:34:a7:
04:df:e4:a3:c6:d9:cd:f4:75:bb:97:03:f9:aa:a6:5e:3a:61:
1d:a6:cb:5f:7b:d5:47:a7:89:8d:96:a8:ca:e3:b3:98:0c:34:
7e:da:55:19:09:b3:89:f7:78:6f:0c:c9:25:d7:5c:14:2e:cf:
9a:ea:f4:33:73:f9:4b:d2:d6:de:34:eb:89:b3:ab:02:72:22:
b9:28:40:af:e3:16:4c:e4:ae:1b:1d:23:aa:3b:a3:36:74:f6:
96:bc:62:b5:60:f8:04:c5:1e:17:59:dd:b1:ae:a6:0e:8a:64:
ee:e1:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:22 2025 by rpki-client