Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa
File: d5af8938-fe55-34cf-8a95-3ff9247e6446.roa (raw, json)
Hash identifier: lNAIZCGdfBBVaTL6YafeXdH4nHoflEOEZFl6MoW29+Q=
Subject key identifier: 77:12:59:6F:9F:C5:63:56:98:28:21:02:3F:AA:5D:52:D3:AE:74:F5
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848BD20E2F74313C33A383D0200
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 152705
IP address blocks: 107.151.244.0/22 maxlen: 24
198.44.170.0/24 maxlen: 24
198.44.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e2:f7:43:13:c3:3a:38:3d:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=229271e3-f67b-4430-a4d7-5cf5dfdc1137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:d0:de:40:d8:06:ae:a6:c3:21:b9:c7:6c:
83:51:80:f6:eb:54:fc:2b:3e:d2:07:08:15:5d:0c:
f9:c3:51:7e:42:8e:68:dd:d6:59:79:7f:d7:62:b6:
33:08:a5:ee:29:19:ed:a8:36:b2:90:11:61:c1:ad:
bb:71:ff:3d:d4:c9:7b:b5:a9:42:0b:a3:aa:82:66:
4e:be:aa:28:ab:d4:b5:cc:94:16:b4:8b:41:d1:dd:
b9:38:7c:69:49:9a:66:57:95:2d:a3:c8:d1:b2:e3:
6e:10:b1:5f:d2:5c:e0:0f:40:1d:b8:4a:03:e0:a1:
1f:21:19:40:d4:19:ef:da:2d:8f:98:4a:9f:a8:85:
f6:d4:c6:56:2e:c0:e8:ac:bf:c3:4a:90:59:87:67:
56:37:49:ac:c7:73:51:67:ef:7c:11:31:5f:b3:6c:
97:a1:cb:9d:c0:1b:00:b6:86:1f:6f:f0:bf:37:54:
8c:ab:5c:ce:83:f1:aa:d6:f9:3a:29:30:60:23:93:
d6:40:62:97:6f:fb:bb:61:24:2d:cc:86:11:14:ff:
91:2f:9f:b1:a9:fa:18:1b:a8:93:c1:9c:44:6a:24:
27:fb:d6:ab:c6:82:be:11:71:1c:fd:f1:96:8d:a7:
a6:1d:0e:ee:d9:9e:64:e4:39:84:6a:30:22:ab:ad:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:59:6F:9F:C5:63:56:98:28:21:02:3F:AA:5D:52:D3:AE:74:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.244.0/22
198.44.170.0/24
198.44.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:ff:5f:d8:b8:65:4e:8c:9f:61:25:db:37:7b:df:b4:24:48:
d0:0e:4e:7b:42:f9:a3:f3:5b:f5:78:b2:7e:c6:ee:04:f3:39:
6b:da:14:00:f7:70:ff:8c:2a:30:6d:64:9a:ac:2f:03:ff:28:
91:10:6b:5d:2b:b9:b2:ea:c8:90:5c:24:9f:cd:70:55:e0:5d:
2f:9a:b4:46:e6:bc:c7:07:c0:58:b1:52:e2:6e:0e:e8:da:fd:
48:dd:ac:00:9c:6b:16:96:6b:8e:b3:b8:7f:70:91:91:ff:1a:
8e:5c:f8:49:ad:4b:54:81:ff:c3:55:13:ef:f6:df:23:c2:f5:
58:6e:e6:78:a1:14:3e:3e:25:0e:3f:98:8c:17:9c:b9:af:93:
b7:e1:9b:70:7f:9e:b5:25:d5:1f:76:18:d5:a9:2b:e6:7f:72:
98:a6:76:47:fe:8b:7e:a4:f1:0c:1e:1c:1f:f3:a2:75:9f:95:
c9:c5:ff:27:6c:c5:ee:e6:9b:24:d2:07:72:cd:49:b3:e3:a1:
00:74:55:1a:e6:32:4c:e7:1a:3b:b6:53:3b:1b:03:71:c8:dd:
6d:80:30:69:91:dd:56:ed:1f:77:30:ff:d6:56:ad:b3:ee:6e:
27:13:d0:9a:02:44:5b:5d:c2:e0:3f:42:af:c2:ca:e4:5b:44:
d3:c6:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:19:37 2025 by rpki-client