Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b11eeecc-7ff1-39c5-b7e1-829700e3ae28.roa
File: b11eeecc-7ff1-39c5-b7e1-829700e3ae28.roa (raw, json)
Hash identifier: sAmFCKMdFy8BJESptbSSTIV97K6BmW1zUXAbBHIN0RU=
Subject key identifier: C9:87:32:0D:6C:A8:B2:CF:11:1B:3C:5E:38:CD:98:D5:2D:15:4E:D6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BA24A41E24F2C4CEE21B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b11eeecc-7ff1-39c5-b7e1-829700e3ae28.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 107.3.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:a2:4a:41:e2:4f:2c:4c:ee:21:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=536465fe-c33f-43d7-ba73-0ebb9d868930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:e0:4c:39:d8:11:cb:bf:f2:5c:26:be:e1:
4a:4d:17:6f:a1:1a:f7:91:58:fe:31:93:11:aa:7f:
db:16:2f:0c:13:dc:ca:ee:b0:53:68:8e:6f:34:35:
22:99:f2:d1:ee:aa:05:95:76:1d:00:ab:57:58:8b:
15:0a:f0:7e:18:ec:c9:c0:12:e6:ac:be:c7:ab:f1:
7a:e2:48:7f:88:83:2d:51:55:f3:9b:23:e1:39:c1:
4b:21:ac:a1:1a:09:96:e1:89:07:e4:47:ea:12:8a:
50:df:ca:b9:f8:6e:0e:be:01:94:13:61:5c:bf:48:
43:30:0a:00:8d:6c:d1:8f:b6:fc:6e:97:30:3a:f6:
23:05:b8:96:38:c2:c6:fc:dd:23:4b:92:12:65:8f:
77:50:fb:55:af:03:bd:ab:8d:c0:81:b0:e8:8e:64:
32:3e:c5:ef:91:85:58:2e:33:50:d5:7b:0c:9b:e8:
2a:a8:d1:ff:53:46:6c:31:1d:a4:10:66:0f:d1:8e:
8e:8b:69:b8:56:47:31:e6:06:fc:0c:38:c4:13:77:
7a:ef:0f:05:a6:d6:dd:c0:68:e8:86:b1:fe:4e:a2:
7a:1f:84:18:62:47:c0:55:b3:10:f4:bf:ca:05:ee:
c1:d8:39:9d:da:94:8a:24:78:84:7a:16:8c:1b:e5:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:87:32:0D:6C:A8:B2:CF:11:1B:3C:5E:38:CD:98:D5:2D:15:4E:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b11eeecc-7ff1-39c5-b7e1-829700e3ae28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.3.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:0d:54:6b:5a:d4:b9:f9:23:ac:da:e9:25:ff:61:94:12:cc:
78:a6:68:c0:35:dc:47:f2:8e:e8:93:71:74:d9:5f:78:30:3b:
df:d8:5b:91:11:58:f5:b5:fe:32:c3:81:90:41:f4:4f:58:7f:
18:2c:c6:6d:89:a7:58:0c:3c:9f:57:c5:83:74:f4:b9:28:21:
29:5b:1f:5c:3c:ac:fa:72:e9:72:06:66:e1:13:fc:c9:e5:88:
0c:82:97:de:a4:b0:20:94:67:74:a7:ba:68:b4:c7:e6:a8:71:
de:85:e5:ce:39:8e:2c:3d:d3:44:0f:92:da:ad:de:13:e5:01:
ef:7a:a9:06:96:21:e5:d8:87:74:ac:45:1d:f0:d2:e0:15:5e:
63:47:2f:4c:d7:9e:6f:ad:e1:b0:cf:ac:b3:dc:3f:cf:57:86:
6f:d0:19:66:a6:94:61:10:38:9e:f7:23:f2:8e:f9:28:de:16:
c1:bb:61:21:7d:29:ee:66:5f:2b:4a:df:36:3e:01:03:c8:b6:
73:3c:1b:e9:b4:39:fa:ca:d7:57:3d:3f:08:c7:fe:a1:9f:42:
36:10:05:df:02:8b:41:a9:75:74:93:eb:4e:1a:c6:a0:d8:93:
d1:f6:c3:11:f5:57:8a:b9:d0:4b:28:d0:5c:8e:16:81:d7:7a:
fe:16:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:21:48 2025 by rpki-client