Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa
File: 685ceee8-b900-37c5-8e47-74eadff0d2fe.roa (raw, json)
Hash identifier: G22jwy+Qp/V2lc2I6F7XvGecmryl/7kkWW8kzueUgzo=
Subject key identifier: 3D:C5:48:14:F3:FD:D9:42:9E:9F:1D:D6:04:40:ED:4C:9C:A9:8E:6B
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848BD20E31593FD60A739F55800
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 62468
IP address blocks: 107.151.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e3:15:93:fd:60:a7:39:f5:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=bc71c73e-9add-4ce9-8b56-2bf7a4aede80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:2d:29:a4:ce:f6:b5:d7:af:ae:32:d3:89:
68:2b:b2:25:fe:4b:b8:0b:21:0a:99:e5:93:da:4e:
cb:d4:db:7d:4d:dc:7e:c2:5f:ef:60:13:70:e7:27:
28:a9:fd:40:31:58:7b:32:ae:e9:8f:6c:40:fe:b1:
24:56:57:48:4b:bf:00:98:b2:af:b4:16:af:36:1f:
6f:9d:3b:95:b8:36:e4:41:31:19:43:39:a5:51:9a:
65:8b:ee:2c:99:40:67:0a:70:e2:43:56:d6:1a:33:
7b:38:6f:01:0c:06:d0:c5:bf:3a:7f:c9:6b:50:5e:
82:06:56:df:5c:a3:a9:de:2d:31:7b:62:b2:86:3f:
69:63:00:72:96:a9:9c:fb:40:12:98:7d:22:58:a8:
e6:fc:51:1d:f5:73:0a:5d:8d:f9:f5:0c:85:46:2c:
0d:0f:75:e6:26:8f:5c:3f:79:89:59:ac:70:94:18:
28:4c:0f:d2:b9:53:11:42:57:c5:8b:ee:47:5c:ab:
65:f8:b3:c1:4a:9e:74:ff:d3:be:75:9f:d9:ea:fc:
94:f8:51:a0:5f:f2:1c:cd:f7:dc:8f:ea:34:fa:6a:
d9:74:91:a4:c4:d1:bb:07:49:1d:37:29:33:3d:03:
06:bb:bd:89:f1:97:a9:2f:a2:ac:b5:48:db:0c:0b:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:48:14:F3:FD:D9:42:9E:9F:1D:D6:04:40:ED:4C:9C:A9:8E:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:6c:f6:3e:7d:09:30:af:7a:32:c5:5c:87:f4:3d:1f:b3:d8:
a4:fe:07:df:51:d2:4c:61:ca:71:0d:95:13:c2:f8:87:24:4c:
e4:a9:44:69:66:20:bf:5c:85:0b:df:04:71:0a:7e:2f:0e:33:
1f:ae:a7:34:c5:d7:7d:f6:88:90:aa:f3:f7:08:62:d4:ab:3d:
4c:48:43:68:b4:60:1b:a9:2b:c3:ae:51:f1:0a:13:fd:8a:f0:
e0:e1:e6:3a:02:2a:bc:3d:c7:78:af:11:58:f2:56:ac:b3:b2:
8b:3f:d0:04:24:cf:f8:90:96:b2:3f:52:83:dd:60:b8:9a:33:
30:93:b4:9e:c5:42:85:13:12:51:7a:d3:e2:5a:02:df:cd:6e:
52:71:e0:9e:d2:e5:0d:dd:01:93:da:68:3d:23:8d:60:1a:38:
96:0c:92:2f:99:b5:8e:52:8b:f9:c7:02:c7:8b:ad:e3:3d:17:
75:23:53:2f:6d:94:03:02:65:25:d7:de:7c:da:e6:b7:57:bd:
c9:17:84:b4:0c:2a:21:7f:3f:82:8d:a9:d1:0a:3a:cc:93:91:
7c:0a:05:7c:08:37:b9:36:4d:c2:66:88:1b:61:53:5e:12:8c:
68:f1:bb:cf:a0:89:d6:ab:64:de:f3:8f:93:ad:3b:65:84:48:
df:1c:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:36 2025 by rpki-client