Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85f98e65-2751-3810-a444-50aba1a6735e.roa
File: 85f98e65-2751-3810-a444-50aba1a6735e.roa (raw, json)
Hash identifier: kUR4QMrhd2orQ0yStJA37IOjN20+z1EEqeNJLb7GSPU=
Subject key identifier: B0:3F:EF:F3:6B:EA:E9:FD:59:21:41:2E:6B:F3:DA:D8:A1:CF:CF:3D
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858489E6B5ECD8B785740D7AA0100
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85f98e65-2751-3810-a444-50aba1a6735e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 62468
IP address blocks: 107.151.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:5e:cd:8b:78:57:40:d7:aa:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=6c3bec40-c644-47a8-b9ae-df32816e6883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:ad:86:31:9e:e6:3f:56:f1:a0:ec:bb:2e:
0d:50:fa:9c:60:c9:15:c8:8c:56:c9:50:5c:85:7d:
90:da:e6:26:cc:99:fa:96:9e:6d:be:c1:b8:01:cb:
f9:9d:63:c4:6a:9e:b0:d5:05:1d:45:bd:2f:79:e5:
1b:85:ac:b6:71:ae:10:65:f8:59:4c:f1:fc:7d:70:
e7:4a:1d:36:11:71:d0:fb:a2:0b:56:47:05:41:55:
64:24:90:8b:02:17:b1:25:83:39:33:cb:16:60:d8:
ba:c7:c1:b9:d9:54:d3:c5:d0:b1:81:79:fc:c9:3e:
b7:31:c5:f8:e8:15:06:97:6e:7c:6a:85:72:b6:9d:
2f:42:b8:b2:42:2c:8c:38:12:f7:78:bd:90:9a:22:
2f:0e:1e:8b:60:b4:44:92:ca:c4:0e:7f:3f:30:b5:
4d:b9:00:4a:28:be:86:68:2a:78:89:b8:61:83:48:
94:85:6f:06:73:2c:b2:87:63:ef:8f:86:91:63:fa:
6b:c0:2c:6f:09:ee:12:c3:b3:cb:00:c9:08:f4:46:
f1:e8:0c:c4:92:c0:85:e8:e4:0e:0e:b2:41:66:db:
de:26:44:06:f3:c9:ce:5b:c7:84:29:cb:64:33:1e:
f8:e1:8a:be:c6:48:50:09:86:9f:3c:5b:8a:da:fc:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3F:EF:F3:6B:EA:E9:FD:59:21:41:2E:6B:F3:DA:D8:A1:CF:CF:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85f98e65-2751-3810-a444-50aba1a6735e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:e3:b9:b6:11:28:fe:c4:e9:c6:9d:c4:10:41:e9:2f:71:81:
bd:f5:aa:0b:69:fc:c7:8f:bd:b2:3d:3c:f5:92:1e:0e:43:6c:
39:78:7c:06:9a:fd:e9:fd:e3:86:48:83:31:15:91:f2:b3:ec:
4e:35:e7:41:6e:43:aa:64:f3:1f:18:44:99:00:ce:44:cf:8c:
d6:32:54:89:07:2a:aa:10:19:d6:94:10:18:e2:d4:86:ac:2b:
45:cc:05:dd:fe:b3:86:ed:39:70:21:57:84:e9:8e:dd:7c:67:
66:e3:22:f5:92:d0:89:0a:e9:c9:bf:e0:18:11:c9:14:d4:22:
e1:6b:c0:c8:4c:d6:41:67:be:30:ea:f0:ca:fd:87:2e:2e:08:
01:eb:95:a4:8c:16:3f:ac:75:18:f6:25:c7:49:1c:ef:26:a9:
29:79:a5:f4:93:0c:05:42:5d:db:5d:f0:9c:8f:d4:7f:4f:0f:
7a:8f:79:0c:2f:53:0b:f8:87:f8:b9:a6:81:28:db:10:57:ed:
f2:98:e6:51:6f:c4:e7:f0:42:c4:a6:98:d8:51:ec:45:12:0c:
90:d9:1f:4f:5e:62:26:82:b2:03:7e:18:d1:20:24:02:be:22:
d7:7c:7a:7d:5c:60:df:63:14:2a:48:2b:e2:4b:65:6b:4e:d5:
1b:04:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:59:01 2025 by rpki-client