Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/04c5c32d-6c80-31df-a7f8-ae7b89e0b81f.roa
File: 04c5c32d-6c80-31df-a7f8-ae7b89e0b81f.roa (raw, json)
Hash identifier: 9+Kx5nXNnzelGgBUKTmvjj8z8rPYojEEuQa+s/ibLE4=
Subject key identifier: 6D:1B:68:26:11:FB:82:99:11:E1:92:BA:50:A3:59:EA:5B:C8:DD:A4
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858492CB21E2EE2300AE66070C900
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/04c5c32d-6c80-31df-a7f8-ae7b89e0b81f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 21859
IP address blocks: 107.151.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:1e:2e:e2:30:0a:e6:60:70:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=a6122e03-4646-460e-ab1c-c0059927b219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:d0:ab:3c:58:0e:f5:5d:9d:a8:d8:e0:ef:
03:25:77:d6:62:e5:e4:0c:9e:fd:2d:ba:fe:9b:43:
a0:15:9f:f7:fa:e0:26:c8:d7:22:d7:93:0e:c4:b5:
ec:0f:16:93:ee:06:aa:5b:e1:ba:55:1b:16:7d:d3:
55:f9:61:e0:58:b4:25:5b:e6:26:51:71:54:48:0a:
09:36:f1:ca:e4:38:9d:45:b0:8d:24:a0:af:2e:12:
a7:b0:7e:97:6e:ec:a0:f0:63:dd:3b:bd:6f:66:43:
92:db:67:6d:bd:fa:bb:c6:a9:74:87:d8:b9:b5:34:
8a:17:39:2e:d0:a3:53:eb:9d:6c:ff:de:14:01:c9:
4d:a3:f7:1c:be:a6:5a:e9:6e:31:c4:68:5e:01:98:
65:52:a5:79:27:e4:a3:6b:52:c5:b1:34:59:92:5e:
1e:d2:d3:54:0e:71:ea:66:91:92:d4:0a:83:13:80:
09:14:a9:fa:92:5d:a5:a3:18:a8:a1:fb:b7:53:e0:
3f:07:e4:0b:b8:02:c5:20:15:83:ec:55:ba:5d:03:
23:c4:8a:6b:5e:c6:04:96:bc:b0:b4:85:db:89:5c:
95:65:84:2a:39:02:15:ee:f0:6f:5c:4d:8d:23:39:
8a:2c:30:2b:bb:0b:bc:90:c2:47:39:0c:dc:d0:db:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1B:68:26:11:FB:82:99:11:E1:92:BA:50:A3:59:EA:5B:C8:DD:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/04c5c32d-6c80-31df-a7f8-ae7b89e0b81f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:06:09:e9:dc:82:cd:ac:49:59:97:c0:88:5c:15:bd:5b:98:
54:30:66:20:6c:4a:bc:09:1a:bd:35:21:c4:06:02:27:b1:02:
24:ea:0d:f3:e8:b6:23:12:d9:0d:3a:ef:80:88:fb:42:6c:1c:
b7:89:49:e3:51:91:d2:88:d3:98:5c:ec:5f:38:08:fb:69:0c:
95:c5:5c:b8:80:19:ce:d7:58:07:44:d0:20:ce:c4:60:83:b4:
bc:5f:79:f5:b3:b7:20:50:ba:60:80:43:6e:52:f7:0e:90:8f:
73:ae:d6:fe:ac:34:fe:51:d9:5e:dc:2d:35:20:5d:fb:b5:e4:
1b:66:3c:af:19:4b:f0:e9:4a:25:e1:29:d1:a5:4e:be:fa:65:
c3:89:5d:c1:04:ed:31:da:1e:95:56:5f:bc:69:3d:13:ca:17:
0c:1c:96:e2:02:0d:9d:65:ba:38:64:81:7a:9d:e4:91:7e:fb:
2f:61:06:70:18:95:e9:f3:80:d9:e5:62:5f:21:e0:29:79:bb:
16:13:3c:61:dd:6e:10:eb:9c:63:d5:27:54:e1:71:bd:e7:67:
64:dc:b2:6b:a7:31:69:1b:ce:cd:c7:c0:c9:a9:80:d2:04:6a:
70:87:51:09:10:b8:df:0a:27:30:73:93:3a:96:f3:89:5b:74:
50:dd:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:50 2025 by rpki-client