Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa
File: 4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa (raw, json)
Hash identifier: kk7W155FE0XKhjGSsJOXdlJfwt36vqs/MIf5yUq/pY0=
Subject key identifier: F3:35:A2:FB:D9:DD:AE:45:9A:0C:9F:18:9F:E6:1A:9C:06:DF:C4:87
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848960B5009D9210F80A3757E00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 62610
IP address blocks: 107.151.208.0/24 maxlen: 24
107.151.209.0/24 maxlen: 24
107.151.214.0/24 maxlen: 24
107.151.215.0/24 maxlen: 24
107.151.218.0/24 maxlen: 24
107.151.219.0/24 maxlen: 24
107.151.222.0/24 maxlen: 24
107.151.223.0/24 maxlen: 24
198.44.188.0/24 maxlen: 24
198.44.189.0/24 maxlen: 24
198.44.190.0/24 maxlen: 24
198.44.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:50:09:d9:21:0f:80:a3:75:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=7d253ac0-5be7-46ad-8e6c-52d232a914df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:73:fb:50:45:11:89:7f:ed:37:34:ed:90:
66:28:4e:ca:25:c7:cf:ee:34:4e:51:c5:c7:60:4c:
07:8f:07:1b:8f:85:2f:87:c4:f5:42:53:c5:8c:cb:
b4:35:cc:39:0e:1a:9b:41:d5:56:1d:45:46:1d:46:
c8:3c:71:0b:48:2c:20:48:0d:11:01:44:c3:f8:b6:
e0:51:c4:ef:61:c0:c0:ee:6e:c3:22:47:91:df:dc:
c7:fc:53:fa:d1:e2:7b:08:76:61:64:7f:cc:af:35:
9e:ae:da:1b:a1:b1:3c:04:ed:b3:f9:af:5b:05:13:
c9:3f:2d:98:17:2f:98:a6:4f:27:3b:f9:d4:ce:d7:
65:33:25:9c:da:30:c6:c0:41:01:c4:e1:e4:7d:2c:
0d:9e:4b:a1:2e:7f:d7:c5:5f:6e:cd:1f:57:2c:c5:
b9:a2:05:e7:82:08:4f:55:8b:27:aa:73:bb:db:b6:
84:0f:fe:45:26:11:ea:21:29:b6:0a:32:8d:95:f1:
65:13:fb:8b:9d:0d:b9:8e:a0:9e:b0:ca:e5:b0:03:
a4:3b:c0:63:b9:0e:3c:f6:8d:fc:b6:a3:2b:80:9b:
2f:c7:26:ab:db:13:5c:20:fc:54:47:e5:f6:e6:bc:
f7:a1:7f:67:05:10:ef:85:a0:c1:52:af:fd:13:22:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:35:A2:FB:D9:DD:AE:45:9A:0C:9F:18:9F:E6:1A:9C:06:DF:C4:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.208.0/23
107.151.214.0/23
107.151.218.0/23
107.151.222.0/23
198.44.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:54:72:5e:67:61:76:65:20:d3:0e:e8:2d:eb:2c:65:f5:6f:
8a:73:99:d5:fe:5e:49:9d:9d:94:fb:4b:bf:1e:55:c7:f3:26:
f5:ec:a1:3f:68:fd:90:5f:d0:d2:46:db:88:51:44:60:90:7d:
fb:61:21:8b:a5:2b:8e:b6:0a:38:37:94:65:1f:f4:5c:ba:2f:
53:5a:45:e4:df:6a:82:8a:2c:af:7e:6d:7d:d4:38:17:c5:82:
be:d5:23:51:97:30:21:e1:64:6b:34:21:bf:34:5b:94:a7:d9:
27:83:56:b2:4d:8c:15:60:16:a8:a2:db:4e:20:00:e6:78:9d:
12:d8:86:0b:80:16:ca:ab:c4:10:7c:68:18:9c:f7:31:47:3d:
24:0f:48:aa:8a:69:93:b5:15:c0:eb:42:b0:b5:e8:5f:6c:cf:
0c:2f:83:7f:b4:88:f4:3a:41:ac:7f:de:f6:bb:06:c6:8e:8d:
04:de:3f:2c:b8:51:53:b3:6c:07:27:4a:67:39:98:55:46:45:
c8:79:fd:55:da:a8:1b:4c:8b:db:c6:47:df:f6:77:20:df:09:
9f:ac:cb:39:60:a1:e1:f2:4e:5c:a6:c8:ce:a9:3c:f5:dc:5b:
67:a0:af:29:b7:25:db:1c:9b:f6:78:0f:85:46:86:0a:b1:76:
ee:f5:9c:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:29 2025 by rpki-client