Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa
File: 18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa (raw, json)
Hash identifier: 0vrmqO0SpSMdaV+ZhYlozaZPIQkvUBfBuDPwG+UXh8A=
Subject key identifier: 84:C9:64:16:6F:E6:B5:17:19:6D:58:6C:D9:59:69:E9:33:AC:20:D2
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848BD20E2B37EF214D5FA934800
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 134365
IP address blocks: 107.151.244.0/22 maxlen: 24
198.44.170.0/24 maxlen: 24
198.44.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e2:b3:7e:f2:14:d5:fa:93:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=bf0df06f-9dce-4f8f-87cc-a57a7de71ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:17:6c:65:d8:5e:82:d2:ef:0d:b8:61:ce:
f2:84:30:2b:dc:65:25:56:e3:e2:fc:1d:c8:a3:3d:
e0:8a:f7:b4:74:52:85:35:db:ea:c2:d0:9e:7f:11:
85:53:03:3c:a3:3b:87:16:25:9e:b4:b9:64:f1:41:
42:e5:b1:e5:87:99:da:e6:84:3a:19:57:54:22:88:
dd:ed:76:3c:fc:ea:87:71:b8:3c:88:28:90:4b:8b:
37:8d:bc:7f:dd:7a:f3:9b:b2:15:db:61:73:1e:dc:
f8:cd:86:e4:ed:d7:4a:6b:81:ae:6c:01:d5:a6:f9:
8e:59:24:8d:f8:fc:9e:0e:f5:2b:f8:dd:28:91:8a:
9a:d9:af:fc:cf:e3:60:37:16:42:84:01:93:ae:e4:
88:9e:27:87:d4:d1:26:dc:87:7d:bb:b2:39:9c:2f:
c7:33:33:41:18:f6:7c:1f:3d:1e:c1:99:8e:7c:82:
4e:b4:ba:59:9c:68:7d:08:ab:7d:93:49:b4:d7:fe:
27:1b:9e:59:26:66:c3:fa:4a:6b:7f:28:91:40:9e:
73:7f:01:e1:80:10:18:72:2b:0f:90:4c:8e:2e:94:
b6:d6:a2:e4:f6:af:a7:c9:64:71:be:1d:22:10:13:
d3:b6:40:7e:d6:f3:35:3c:c2:99:7c:e4:04:0d:85:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:64:16:6F:E6:B5:17:19:6D:58:6C:D9:59:69:E9:33:AC:20:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.244.0/22
198.44.170.0/24
198.44.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:95:a0:38:a6:ba:0e:55:ae:35:0c:09:a4:64:5b:2a:fa:c8:
a8:39:0c:f1:6a:e0:5c:72:a1:0e:82:6d:ee:78:47:0e:ed:0f:
cb:58:cb:02:67:cc:30:3e:c6:ae:1b:7a:4f:5e:ba:5c:cd:c5:
86:33:4a:3d:5e:a2:55:fa:9e:e4:48:18:b9:2b:a6:96:81:2a:
bf:6e:27:9c:d3:89:59:2d:25:99:d1:d0:b4:cd:e1:a6:78:03:
b3:5c:9f:53:f1:03:cc:cf:02:69:f6:b7:91:1b:70:db:71:51:
8c:3b:a9:c6:14:6a:57:27:e5:77:6e:89:b8:ca:31:b9:5e:c3:
4f:ab:0a:a8:f9:1a:01:1c:64:d4:88:55:ac:7d:0c:ce:51:e4:
64:0b:ae:f7:7e:77:fc:bf:b1:fb:a5:01:ff:c8:36:1a:7c:0c:
18:0b:df:23:d5:99:55:dd:f4:4f:26:e4:c2:88:56:a3:08:2c:
15:cf:84:99:7d:e8:18:f5:27:5b:4a:c1:83:02:8a:57:5d:b2:
4b:2f:05:10:44:20:03:9f:d7:ca:f6:b6:e7:ab:7e:b9:82:1f:
69:4b:8a:36:15:12:70:c4:7e:f2:3d:f7:be:2a:7b:61:41:73:
cb:e5:47:40:cb:5b:bf:a0:95:05:26:97:8d:27:e6:30:f6:76:
29:c8:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:58 2025 by rpki-client