Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa
File: 0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa (raw, json)
Hash identifier: yMc9kmnMiiHJDSpOHSCYWWKtfqkMtRPAALRUWL462CE=
Subject key identifier: 85:44:72:E0:DB:3A:31:27:FB:14:7B:36:2C:16:76:65:82:3B:8F:3B
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848F65BE619E9D870B7655F2140
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 142032
IP address blocks: 107.151.240.0/23 maxlen: 24
198.44.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e6:19:e9:d8:70:b7:65:5f:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=0e91085c-a99d-492b-92ec-d415a277da6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:4a:42:45:be:d7:8a:cc:f1:06:6c:5f:12:
9f:3d:e0:c5:00:3a:51:08:bf:50:05:fd:02:24:3d:
d0:1f:c0:46:76:fc:63:33:c1:b9:f3:f2:ee:bf:33:
79:77:8e:2a:ab:dd:29:38:79:cd:78:55:4f:73:4e:
c0:c9:17:94:3f:0e:fc:04:6a:ff:2d:65:df:15:d2:
51:bc:11:3d:87:fb:92:3a:f8:bb:0c:f1:3a:fc:ea:
e9:43:a6:8f:fb:71:2e:8e:ac:38:d1:7b:ed:44:b8:
fe:a8:45:31:43:5d:c8:43:27:57:4d:a3:8f:b7:b8:
c7:1c:f6:09:75:4c:a4:23:dd:15:b1:fd:ad:b2:7d:
38:a9:fe:2b:51:ee:6a:3f:82:74:6a:5b:c8:6e:7c:
9f:1d:5f:c0:63:7a:aa:9f:5f:31:30:c6:dd:18:18:
ad:0d:d1:b1:a9:19:f6:37:f3:22:5e:14:cd:83:7c:
27:b2:63:eb:70:10:52:7e:eb:41:42:b3:24:45:5f:
bf:2b:06:f6:17:06:cb:75:54:42:c8:d2:53:bd:7b:
a1:ce:18:08:6c:bb:06:62:2a:b2:32:ea:dd:f3:2d:
18:ad:d3:7c:c9:50:37:cc:d9:99:df:ef:ef:73:32:
2f:95:71:10:49:3c:20:49:fc:d5:04:3f:e4:5e:36:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:44:72:E0:DB:3A:31:27:FB:14:7B:36:2C:16:76:65:82:3B:8F:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.240.0/23
198.44.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:31:28:4c:aa:c6:4f:24:bb:f5:e4:6a:84:96:e7:48:e6:6a:
d0:97:f5:e0:a5:d6:3c:f2:fd:57:80:d6:a3:f5:1b:db:96:ab:
98:3b:f9:c0:e2:17:9a:11:80:5e:76:81:da:9c:b2:05:b7:47:
37:12:cf:e4:e2:23:5a:a0:ea:78:9c:c1:9d:c3:92:26:0d:43:
3d:67:5a:c3:ac:c2:d6:9c:f9:a5:b5:d8:84:e8:f4:c7:58:45:
53:f4:fb:66:c0:66:c8:1f:23:19:6a:34:3d:0c:73:e8:1c:cd:
5e:81:cb:ea:ea:f0:ed:14:33:d8:a5:6c:f4:aa:6c:ca:7e:2a:
97:4f:c2:34:9f:d1:be:4d:8b:a4:73:ef:7d:37:20:3d:b8:e9:
c6:00:8f:4e:f5:23:39:f6:f2:38:32:79:80:73:a5:a4:86:a5:
71:69:44:0c:b8:09:da:c6:60:1a:a9:0e:64:cf:05:4c:10:4b:
39:f4:35:19:f5:db:64:75:ac:6e:31:e4:c4:d8:2c:59:d0:fd:
96:2e:c6:bf:10:ef:d1:8f:8a:00:01:f9:4b:40:ce:18:1b:50:
51:9d:cd:32:1c:a3:9a:e7:ad:93:aa:1d:0e:0e:d3:c2:c3:ca:
dd:f5:79:1d:52:3d:0e:c0:45:88:3a:2c:46:52:5b:f0:c1:52:
bd:18:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:30:42 2025 by rpki-client