Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa
File: 0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa (raw, json)
Hash identifier: DPc8BsZJO5Fu6q61Xv23CS8Hu+mJezviUYL96GoWkoo=
Subject key identifier: 1A:32:A0:19:E9:D8:6D:26:A2:2F:78:11:E9:A4:C3:DE:F3:6A:63:15
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F432858493C09307F547AD3B918491480
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 4213
IP address blocks: 107.6.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:30:7f:54:7a:d3:b9:18:49:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=732fa1af-8c87-43d8-9ebf-2b85a01ba7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:20:72:87:1e:32:5a:2a:c5:48:af:63:0e:
d2:3c:ac:2f:db:6f:c4:d0:61:eb:b6:8e:54:59:8e:
5e:88:e1:3c:dd:b7:75:69:b7:01:a7:3c:5e:5b:a1:
a3:49:f9:61:f0:72:f7:cb:9f:48:6e:ec:ee:2c:37:
2c:38:55:a7:1d:5f:47:2f:0c:62:e7:b8:af:fe:40:
52:44:c4:87:f5:7a:a5:ab:e2:a0:2e:14:05:68:ed:
ca:90:ba:67:88:09:31:7a:98:9d:2c:0e:41:25:c8:
ef:1b:e4:9f:14:ab:fa:75:32:f0:5e:52:fe:b7:11:
70:db:c9:d4:7c:37:3d:40:4c:07:80:c5:5b:57:15:
10:ea:0a:56:8c:26:45:fc:fe:ac:87:c3:ee:b8:c5:
b7:cf:5e:d0:20:c4:58:5a:fd:3b:8a:c2:90:a8:5e:
8e:03:f8:0a:c7:76:17:e5:54:82:33:2c:e6:55:53:
2e:8f:a7:74:14:d3:5e:8a:2a:d3:71:21:b1:35:66:
c9:03:29:e6:3f:c0:9b:0d:1d:7a:75:10:76:c8:50:
46:3f:38:33:57:e7:47:37:21:71:23:f8:86:d6:00:
fe:79:d9:6e:dc:1c:be:a5:16:f5:4d:df:28:e6:3b:
81:c4:14:d4:ad:bd:f7:5c:35:9e:bf:47:89:de:7e:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:32:A0:19:E9:D8:6D:26:A2:2F:78:11:E9:A4:C3:DE:F3:6A:63:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
107.6.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:91:6e:16:7e:9c:aa:54:e7:2d:fd:a8:b1:80:02:9e:7b:a6:
d4:3d:ae:be:54:c6:8d:c0:78:3a:0b:bc:d0:a9:1d:ba:e6:39:
25:38:4f:35:95:ee:44:b6:1c:32:ba:14:1f:fa:b5:0f:26:40:
53:ba:3b:59:9d:aa:5a:6f:05:f4:5a:9b:32:28:ca:b3:2f:be:
26:76:b1:0f:cc:0f:21:16:a9:24:b6:17:6e:c3:1c:b2:0d:6c:
ee:eb:c5:22:bb:68:95:bf:07:61:5b:f3:0b:51:9f:52:46:6b:
fc:d6:77:b8:89:05:8c:cf:31:7d:aa:17:a1:88:05:98:ca:18:
cc:7d:c0:6c:04:1f:85:a5:52:e8:3e:58:a5:89:52:e6:e9:b0:
ba:40:b8:71:ad:d6:8a:c5:e8:4a:ca:46:25:4e:8c:c2:c9:9c:
88:51:5a:a4:4b:f3:7e:b8:82:e1:83:07:4a:cd:06:eb:5b:44:
62:92:c7:03:4f:cf:49:43:a0:0c:c9:c5:44:76:71:83:84:a6:
27:03:4e:04:ca:01:0c:e6:b4:34:b4:ed:5a:e3:1f:df:52:83:
9e:55:45:59:22:dd:69:ef:f3:f4:91:a8:cc:f0:0d:c1:1b:2f:
58:b5:dc:8a:de:59:5b:50:5e:7e:9a:e1:97:22:42:24:33:fb:
38:f0:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:30 2025 by rpki-client