Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa
File: 0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa (raw, json)
Hash identifier: DMNFpEFgytPSYNFGokHXDdqbp9PXEXMw6HC8bZkGoXg=
Subject key identifier: 9B:BC:86:93:CB:CA:57:CC:1C:A9:D1:78:44:7F:77:C5:89:0C:61:E3
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848BE86349EC91EF24E13386540
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 62468
IP address blocks: 107.151.192.0/24 maxlen: 24
107.151.193.0/24 maxlen: 24
107.151.194.0/24 maxlen: 24
107.151.195.0/24 maxlen: 24
107.151.196.0/24 maxlen: 24
107.151.197.0/24 maxlen: 24
107.151.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:34:9e:c9:1e:f2:4e:13:38:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=6eec5d20-4281-4d9c-b0cc-b42e469c894e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:6b:c8:d4:bf:88:4b:68:02:d6:1d:a0:bc:
96:d2:c8:ed:cb:44:61:48:52:90:38:92:c9:db:00:
85:9b:7f:b4:e3:e3:c3:dd:41:20:72:6d:96:af:e4:
89:ca:76:d4:db:95:ff:19:b4:54:c1:3d:50:d6:5f:
f1:d6:31:64:81:68:75:2e:69:d3:2e:27:65:f4:e5:
cc:28:11:de:03:1f:3f:a1:d2:c7:1a:99:a2:56:0c:
6e:87:84:a4:26:87:5e:14:82:46:78:a8:bd:f6:24:
f2:bf:1c:ce:ef:75:78:54:c7:39:ad:12:94:75:19:
96:ec:da:ce:b8:9a:7c:1b:17:df:9b:fc:5b:73:a7:
36:1f:c5:0e:a5:ef:40:b0:29:63:18:b5:ef:49:f5:
6c:3f:d8:64:dd:0c:00:b5:40:1f:c1:a3:3f:b4:ea:
0e:94:e2:e3:cd:e2:bf:16:cf:4b:7a:f0:2f:ee:6c:
d3:f2:ac:2e:f5:ca:b9:5c:9d:f7:8a:cf:58:cf:06:
00:ec:bc:1c:eb:da:e7:67:c4:f9:7f:bc:29:ee:df:
b8:e3:dd:29:66:39:74:34:48:b5:72:33:95:d4:d5:
d3:09:ea:8f:fc:65:b1:25:37:5d:a6:14:2c:9d:d2:
e8:59:b1:b6:c8:70:85:6c:98:0f:0e:b1:47:06:14:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:86:93:CB:CA:57:CC:1C:A9:D1:78:44:7F:77:C5:89:0C:61:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.192.0-107.151.198.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:c5:25:0b:3b:43:28:19:46:c6:9d:52:5c:9c:68:a7:44:82:
d2:3c:e1:8e:a5:1a:f6:6a:b2:a2:d3:2f:2c:20:91:ee:89:b9:
9b:02:7e:24:62:b7:20:ca:79:85:90:e5:2f:42:ce:f4:a7:ac:
10:ec:20:31:2d:71:9f:78:58:bd:b0:df:20:de:49:4c:0d:2e:
e7:bf:82:1c:78:2d:e4:13:12:0f:98:5d:79:12:65:c6:29:2d:
cc:9a:6e:de:af:d2:dd:f1:45:2b:5e:de:20:31:b2:f6:3a:d4:
c2:c7:cb:4c:ce:53:12:62:ec:34:7b:b7:2c:68:0a:61:87:7c:
df:a4:4f:73:99:96:da:01:2e:19:06:eb:37:02:be:9f:7b:c2:
b7:f0:c5:fb:7a:57:57:90:af:9c:c5:38:4d:27:2f:1f:85:82:
2d:84:12:61:95:3e:43:0a:22:32:52:91:08:5d:30:71:1c:57:
cb:c4:77:aa:51:0d:c6:95:79:b3:26:e8:36:12:d0:55:f7:57:
11:f2:11:4c:fd:a9:0d:bc:f2:bb:6b:81:1c:cd:e5:c2:d2:ca:
22:6e:b3:9c:2d:de:9e:70:53:99:07:11:a3:be:78:b0:0c:9c:
4a:5b:21:d0:60:6c:e3:43:1f:3c:b1:fd:26:2e:be:e3:a9:1c:
cd:8d:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:27:31 2025 by rpki-client