Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ac552a2b-d615-3a4e-8628-4ce5f40e3b95.roa
File: ac552a2b-d615-3a4e-8628-4ce5f40e3b95.roa (raw, json)
Hash identifier: KA3T4VQSnWbkHmiiSXIxyw7wABU3JMd9Q9BYPhVW1xw=
Subject key identifier: CA:93:41:E8:B1:95:CA:9C:62:A1:21:78:04:0B:22:FA:A5:A6:63:2D
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858490B4C1873D5CFA00A95621200
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ac552a2b-d615-3a4e-8628-4ce5f40e3b95.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 142032
IP address blocks: 107.151.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:18:73:d5:cf:a0:0a:95:62:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=ccb5aad5-a560-4946-9183-4f7a892832d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:09:51:12:b8:67:f5:cd:14:d0:a7:34:84:
3a:da:52:ae:c7:a9:a1:b0:6a:ac:38:84:87:34:72:
27:df:c5:26:5c:cb:64:f7:88:92:de:ef:d3:73:dc:
f9:f0:c7:cf:1f:a5:d5:92:2c:03:a2:4a:cd:d7:3e:
4b:26:58:fe:76:18:8c:ec:2f:c9:aa:6e:28:f4:34:
9f:80:35:7e:c1:39:78:37:f6:aa:e7:68:03:51:42:
7c:1d:3d:f2:86:42:a9:45:e2:4e:12:c2:ea:2e:d8:
81:b2:f4:de:49:d9:63:95:93:06:2f:29:43:c4:2b:
3a:bb:12:89:90:22:87:be:a3:1f:4a:77:2e:b2:45:
d0:4a:92:21:7f:ac:06:81:08:dc:3e:ad:32:dc:bc:
bc:6d:d0:1a:d8:96:b8:ad:2b:2b:9f:e5:2d:30:bd:
76:32:95:cb:7b:da:15:55:80:2e:e8:cc:d9:2d:e5:
37:0a:cf:a0:e9:4b:ab:ef:b4:e9:df:00:53:59:57:
21:a0:37:50:08:83:cd:45:5c:c3:e1:27:b9:62:b3:
85:10:48:3b:51:e6:07:40:e8:66:5f:a4:ba:54:25:
2a:93:dc:8e:cf:c9:f1:2a:ed:25:50:e0:81:83:82:
4b:17:c1:16:3a:6a:67:41:dd:36:c3:fc:d4:40:3a:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:41:E8:B1:95:CA:9C:62:A1:21:78:04:0B:22:FA:A5:A6:63:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ac552a2b-d615-3a4e-8628-4ce5f40e3b95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:17:ba:fb:32:a3:c2:fd:fb:69:33:4a:3f:52:89:6e:11:a8:
7d:3c:b1:81:91:da:f7:7b:68:2a:f5:4d:47:5a:18:2a:d5:82:
cb:89:06:6b:ea:a8:cd:6b:da:ec:5b:5d:39:ea:11:f0:b5:57:
33:66:be:91:0e:27:98:a9:60:8e:cb:1e:55:22:62:74:41:f3:
38:4f:a5:9b:58:d3:ad:e4:0a:c8:f2:aa:d7:1f:af:f2:cc:cf:
85:94:12:d7:29:e0:4c:a5:c4:24:45:f0:91:8b:6c:ee:86:90:
39:0f:64:87:a0:da:ad:33:59:9b:1f:42:f1:be:95:f1:69:6c:
ce:11:40:36:b1:f1:c7:89:69:60:df:29:80:8e:d6:77:b8:48:
58:19:20:f4:35:44:6a:5e:b0:e4:23:27:b1:5d:26:c2:33:1e:
68:f5:8c:6b:4a:8b:26:f2:ff:c6:9e:ee:71:50:27:ad:84:53:
45:0a:80:a5:9a:c6:29:d7:54:dd:33:2e:3d:2c:e7:0e:43:c7:
00:59:f8:ee:98:88:58:43:7b:77:6d:ba:ff:1f:7a:05:2a:ff:
28:eb:81:36:fb:b8:64:7e:c3:ea:eb:e3:72:e8:a3:69:6e:fc:
86:ed:d4:7b:fc:dd:00:46:ac:66:44:42:e9:fb:29:49:24:b9:
98:a9:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:35:00 2025 by rpki-client