Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa
File: 2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa (raw, json)
Hash identifier: oG+Pd9RePLyIF1mltsJ1duvqdWMwlCfINdZcwZ6wZEw=
Subject key identifier: 9F:50:53:18:60:12:74:99:41:9D:87:BD:38:B3:C4:16:8B:A4:2E:A8
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848AF2B71538CC260DDCEDA9F00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 139880
IP address blocks: 107.151.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:71:53:8c:c2:60:dd:ce:da:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=a0442f1b-c205-4855-8328-d022eb9f33eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:14:13:bd:c5:c3:f6:ad:53:83:c8:6e:49:
29:84:a8:47:99:ec:28:03:ba:aa:d1:c1:ca:da:23:
c9:b3:8d:4c:bf:d3:be:2b:50:38:8e:2e:a5:61:8c:
9b:d2:1e:ab:32:f2:0a:66:53:a3:46:a3:78:48:0a:
ff:ae:af:e0:b8:97:ee:9d:3c:fb:6d:01:94:04:6a:
e6:0b:a2:07:61:e1:62:5b:ba:71:d1:11:e7:22:3b:
99:b0:e8:0b:9f:80:d8:67:c6:3d:5b:d7:a7:9a:e2:
9b:1b:1a:41:27:e5:9c:c3:9f:66:4b:5b:33:63:25:
81:98:b0:77:c1:1e:77:4d:ca:d7:54:12:da:ee:5c:
d2:fb:4e:a9:45:f1:25:ef:fb:3e:99:57:6a:44:59:
4a:13:71:5f:42:4c:09:0a:b7:75:31:7e:bb:05:ca:
06:e5:eb:81:5c:16:92:bc:04:a0:0b:ad:dd:0e:44:
59:4b:e6:ff:07:7d:68:7d:11:86:b4:c4:35:cb:32:
e5:14:da:8f:4b:e0:8e:2d:cf:b8:48:7d:18:b2:55:
e0:d4:75:75:e2:0b:8d:0b:1f:0d:ca:10:19:d6:12:
ff:79:16:11:63:a6:ec:b8:75:93:e4:7a:60:e6:79:
21:23:6e:2a:fa:51:bc:30:35:78:6c:c9:cd:16:91:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:50:53:18:60:12:74:99:41:9D:87:BD:38:B3:C4:16:8B:A4:2E:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b3:2e:23:3b:92:eb:25:ef:a1:7e:8e:59:69:ad:e2:1f:99:
f9:aa:20:1e:0d:50:22:b4:9f:f8:a5:ff:53:9f:99:a2:cb:88:
6f:71:c2:1f:0a:ad:73:fa:ac:86:6a:76:33:71:a3:4a:79:c8:
ca:3d:b7:51:8d:64:6f:51:a2:a4:6c:ca:70:29:de:0d:f4:fd:
49:3e:26:47:e5:45:96:26:3a:20:3a:7b:9d:67:9c:6d:69:84:
27:69:cb:15:74:71:ec:29:d5:1d:f2:8b:e6:20:eb:e5:ad:c6:
c0:7a:03:06:fe:4c:4e:10:9a:69:81:ec:60:91:a0:b7:c8:58:
b2:8c:82:b8:97:a3:26:c6:a6:c7:39:95:e5:10:9c:c2:8e:32:
b7:c5:88:19:af:b0:86:dd:4c:86:f2:45:ef:e7:ae:01:c5:62:
bc:05:2f:6a:80:32:d3:30:5a:5e:6e:fd:c2:d8:5f:e7:6e:f6:
5a:21:71:dd:2c:03:c3:89:b9:df:15:0e:e8:13:86:3d:b4:7a:
5d:21:2f:09:d7:57:f8:83:6b:3f:3c:09:48:99:5f:41:ee:b0:
b4:ef:1d:ce:54:fa:ba:ff:f4:d2:e9:ca:55:32:6f:97:42:c1:
3d:03:32:cd:1f:87:ab:a1:27:0e:d2:fa:41:43:1b:6f:39:09:
3e:06:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:49 2025 by rpki-client