Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1d8ae3-4f0f-3fd6-8c7f-f7c71b0a0542.roa
File: bd1d8ae3-4f0f-3fd6-8c7f-f7c71b0a0542.roa (raw, json)
Hash identifier: ZgJq/KR2/aenRNUc1xHKtpOkUEBUU4JA3CePyiMPxF0=
Subject key identifier: EE:7B:92:F3:3D:6D:83:89:97:08:47:E5:F8:2B:BD:A1:D4:01:94:2B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D0B61EA853BFDAA9CB000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1d8ae3-4f0f-3fd6-8c7f-f7c71b0a0542.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 107.3.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:0b:61:ea:85:3b:fd:aa:9c:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=29197883-107a-4a1a-b67c-94a32e25aa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:12:65:5d:67:43:5f:7f:01:73:06:8a:af:
be:a2:76:21:4c:88:a8:1f:2f:1e:1f:27:b8:fb:bb:
e4:55:8b:77:86:75:cf:03:14:04:d1:7a:1a:0c:af:
ed:03:59:eb:b3:1e:c9:ae:b8:f5:7e:a0:0b:de:31:
5c:a7:2d:cd:22:66:14:d8:e5:3b:b4:40:3b:cd:6f:
ac:6f:e7:b8:6d:62:ed:f3:7b:99:43:57:4e:c9:53:
19:f6:61:19:0f:9f:55:6d:22:9b:f8:7c:ee:df:10:
cb:af:b0:c0:15:6d:a7:d5:b1:04:eb:23:d5:db:1d:
97:e5:10:c1:cd:9c:62:61:30:0d:b2:a3:44:3a:59:
25:fa:e8:80:75:c1:0a:f7:48:a8:11:61:43:eb:e2:
5d:35:eb:ce:28:2a:02:19:a7:b1:e2:a4:4b:46:2d:
58:a6:23:31:48:b3:a9:90:cb:7a:2d:e8:17:b1:cb:
64:3b:f8:64:d5:67:ef:1b:ec:a2:83:1b:4e:54:fa:
2b:cd:23:f1:13:f2:3f:8d:e0:c0:aa:1c:3c:9e:01:
b2:77:84:6d:fd:c9:6c:ae:e8:54:be:85:17:19:f0:
b7:c7:23:df:9b:a0:a5:e5:29:53:bb:cb:73:4e:59:
38:4b:e3:06:41:84:25:ce:14:e4:e0:0a:22:4f:a6:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7B:92:F3:3D:6D:83:89:97:08:47:E5:F8:2B:BD:A1:D4:01:94:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1d8ae3-4f0f-3fd6-8c7f-f7c71b0a0542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.3.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:71:02:25:51:7f:55:e2:a3:af:52:11:7d:da:ea:4d:15:79:
88:28:14:db:40:d4:34:70:02:57:f5:04:a8:55:54:4f:8e:f8:
f5:46:37:72:21:92:31:3d:ff:5e:7c:b5:1b:09:32:aa:ab:51:
12:c4:e1:69:be:cb:e0:1b:8c:c3:d0:18:a0:13:eb:04:e1:9d:
15:a7:2f:c6:e8:a7:03:06:03:b5:71:93:e8:cc:9b:59:d0:7d:
0a:3f:53:ae:08:e5:fa:1b:f3:7a:a0:7e:b7:fb:de:3a:3a:ce:
8d:17:b5:42:4c:94:60:1d:fe:71:12:ec:dc:7e:23:81:80:d2:
f5:84:ae:52:1d:2f:27:e6:f7:c1:cb:cc:87:25:a3:6e:bd:d2:
45:61:bc:25:21:35:4b:3b:e4:c0:71:dc:7d:31:26:a4:db:6f:
bb:db:7c:56:6f:5e:33:51:f3:4c:7f:01:35:26:d5:d3:15:5b:
42:43:f6:18:55:a8:b8:c3:de:36:84:21:3d:4d:db:fc:50:4b:
f3:42:75:9d:54:71:01:81:f4:e1:26:0a:ab:12:a6:a9:54:20:
bd:f4:57:38:67:8f:ed:a2:b1:1f:7a:9d:ab:17:94:c2:64:8b:
b6:28:5f:37:93:04:9c:d9:23:53:f1:cb:1e:da:9d:19:df:5e:
0b:0d:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:42 2025 by rpki-client