Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c52b3bd5-7f44-3323-ae34-4545eaa758de.roa
File: c52b3bd5-7f44-3323-ae34-4545eaa758de.roa (raw, json)
Hash identifier: X5N1oBiAUzYya7l6t8QSFlmSDiLXb1eyy9VQU1wDT9E=
Subject key identifier: C3:14:1E:D9:1D:B0:BF:07:DE:F5:EA:46:46:97:16:DD:2B:38:82:1C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C63999CF4BC4FF5C7BB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c52b3bd5-7f44-3323-ae34-4545eaa758de.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 107.2.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:63:99:9c:f4:bc:4f:f5:c7:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7e37d6c0-4f9a-409d-944c-6db01f5acac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:8a:87:b3:08:89:3c:3f:ce:cf:5f:9b:80:
4e:05:30:54:90:15:44:00:5a:f1:3e:01:e5:b4:f6:
fb:f0:e7:7b:e9:5a:4e:b2:95:10:fd:de:05:e4:a4:
f3:c6:63:db:c0:b3:b6:b5:da:b8:8a:ff:a0:ac:82:
fc:3a:88:41:21:e6:7c:a9:eb:da:1c:68:47:eb:19:
b9:80:2f:e5:74:ed:18:05:b8:b8:1d:8f:18:ce:50:
3b:de:04:00:15:cd:aa:f5:b3:d4:6a:dd:9a:9d:a9:
27:39:f7:22:a3:b4:ae:15:22:c4:b5:4e:de:a9:91:
80:85:e2:1f:e8:91:a6:f6:23:a7:4b:7c:98:80:93:
61:63:39:25:d1:30:fb:a3:99:ca:c3:5a:98:fa:fc:
ea:80:ea:25:7c:cc:3b:71:0f:9a:6e:8e:3a:07:de:
93:6c:00:9e:03:e9:74:81:a6:14:b8:f5:43:58:48:
5b:14:46:0c:44:23:7f:30:78:8e:38:3b:51:64:d5:
cb:3f:a7:ef:40:39:f5:fc:89:7d:e8:c2:f5:2a:79:
21:c5:59:39:10:b4:9e:32:2b:14:ef:79:bc:9c:94:
ae:4e:85:f8:5e:97:57:a1:d2:51:a4:ea:b4:dc:d8:
03:90:a6:ed:ba:fa:c0:ff:43:53:1c:22:e6:8b:36:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:14:1E:D9:1D:B0:BF:07:DE:F5:EA:46:46:97:16:DD:2B:38:82:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c52b3bd5-7f44-3323-ae34-4545eaa758de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.2.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:39:87:54:a6:6e:8e:e0:3e:48:a3:57:e3:cf:bf:69:3c:d7:
c7:81:07:66:1a:a3:6c:ce:59:bb:8d:6a:f2:86:17:98:df:1b:
6f:48:2d:fe:8c:88:4d:28:d9:8f:74:70:25:fc:c2:d9:2a:07:
be:08:73:65:c6:30:80:cc:84:96:1f:d5:4b:95:61:19:82:3c:
8f:1f:f1:84:24:8f:ed:b9:7e:2d:05:23:d2:8b:fa:d7:92:3d:
ad:ed:41:02:55:cc:05:67:18:8a:02:b0:70:d3:09:12:f2:b1:
57:b5:83:d5:54:8b:a0:19:e4:34:f6:63:13:c5:a4:ca:12:1c:
32:6f:d0:2c:a1:e1:50:01:15:22:4f:40:70:aa:9c:ef:2b:1f:
1c:ec:2b:a7:38:dd:f6:ac:57:17:60:78:a1:5f:d5:a0:05:69:
81:af:0c:dc:8d:10:f5:4d:5c:b8:13:60:4a:48:6d:2b:9a:22:
59:2c:f0:da:d0:be:2d:7b:22:67:72:eb:d7:cf:e5:96:e6:53:
eb:8f:73:0a:b1:a3:d8:91:b3:18:2a:fb:d1:f1:cb:e5:e6:8c:
10:f2:4a:55:86:d0:a2:87:a5:cf:09:e3:10:99:8f:31:de:a1:
69:71:66:28:be:3c:44:00:9e:10:5b:26:df:a1:f9:f8:7a:fc:
bf:6e:41:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:37:34 2025 by rpki-client