Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa
File: 7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa (raw, json)
Hash identifier: JDCAYeyoA4kvibCBbCBIVMb7GMdsX+Rz4UfT+ngK8cE=
Subject key identifier: F0:F4:64:72:EB:85:3F:B8:C9:CA:C7:0B:D3:02:77:30:8C:88:1B:7D
Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial: 010D0C9F432858486AC59E73469821770FF0B480
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 9009
IP address blocks: 167.100.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9e:73:46:98:21:77:0f:f0:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=c67b4a94-f5cc-44bd-85af-c914390546ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ab:be:fa:89:0e:d0:aa:1c:a5:6b:fb:c4:47:
13:ae:ea:da:cb:0f:d0:8d:eb:b8:fa:95:a4:a6:51:
ac:c7:a3:58:c4:9f:9a:86:70:05:97:28:b8:ca:09:
11:89:14:7a:f7:87:96:e1:ee:21:67:37:0d:55:30:
eb:72:50:ff:4c:67:2c:d5:fb:45:b0:01:28:e0:b2:
20:34:4c:13:be:79:fc:e9:3f:33:d3:6a:1f:80:30:
6c:50:07:42:4b:a2:11:8f:fb:b7:f2:1f:fa:a0:da:
be:1f:4c:b5:9c:09:ad:4a:6b:d9:49:60:b7:2b:c9:
31:6b:f1:31:c4:e3:18:6b:6f:df:bf:52:a5:30:ec:
a8:dc:ea:a1:8b:72:32:4c:45:90:b2:d1:91:b7:1c:
40:c9:5d:9b:fc:e3:42:4d:57:b9:87:38:2d:f7:1f:
b4:47:36:f5:2f:44:9d:27:2b:b7:b0:87:be:fc:99:
62:ff:d5:61:63:ab:2e:fe:6a:aa:de:1c:e2:dc:92:
52:72:37:07:08:80:7b:e2:4c:9a:7b:02:3b:9c:52:
e1:ed:a6:3c:90:96:0c:3b:02:e6:80:2e:14:f3:fb:
ed:e9:af:c4:fb:65:86:e6:df:bb:0b:9e:a4:13:a5:
67:6e:c8:83:80:54:81:95:ea:10:1d:8a:a9:8b:97:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F4:64:72:EB:85:3F:B8:C9:CA:C7:0B:D3:02:77:30:8C:88:1B:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
X509v3 Authority Key Identifier:
keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
sbgp-ipAddrBlock: critical
IPv4:
167.100.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:b3:78:91:12:9c:d8:0a:b5:0e:23:04:22:bd:47:bb:b8:f1:
45:b9:e6:2b:c5:93:5b:b5:5d:65:f5:46:e2:c8:10:06:aa:e8:
6c:23:62:8b:11:1f:38:33:71:39:ed:69:7f:ba:bc:6a:af:60:
55:82:07:00:4c:73:97:dd:81:e1:94:3f:41:7f:d5:96:65:4d:
20:32:6d:46:f1:d9:7f:2d:8a:d7:31:f0:9a:a9:51:1a:3e:ce:
a5:67:a6:ce:75:50:4d:8f:4b:9d:43:1a:f1:f7:64:de:3b:bb:
b7:57:43:16:56:4e:fc:d6:db:b3:61:d3:40:27:f6:91:36:5b:
f5:55:6e:de:64:8d:9f:1c:c2:ae:f8:d8:66:04:16:22:a5:d8:
16:c4:13:e1:90:5b:fc:7b:b9:9d:fb:e0:fc:76:1f:2d:1b:11:
82:13:8f:dc:8f:6a:22:a4:28:ea:ef:5f:35:56:d9:28:8e:11:
97:ff:29:4a:cd:b3:0e:24:df:86:f7:32:34:5d:fc:82:84:80:
54:0b:6c:a4:cc:8b:4f:ca:d4:10:9f:0f:e6:06:75:f7:eb:c3:
94:3a:a5:10:9f:f7:08:4b:bc:17:ac:66:7e:60:45:40:17:74:
03:38:34:1f:e7:73:59:22:6e:57:80:fa:0b:48:bd:ec:93:25:
58:1f:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:31:19 2025 by rpki-client