Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa
File: 4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa (raw, json)
Hash identifier: bPrQ5+56LThTZQVeSiK7L+Pb7Qw/udhbaJxFaCAOM/A=
Subject key identifier: 1B:AA:66:B3:51:91:88:F5:9B:FE:C9:AE:A1:21:6D:25:E8:4D:21:AB
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848A830B44EC738138E64CAA580
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 21859
IP address blocks: 107.151.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b4:4e:c7:38:13:8e:64:ca:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=5e4ae27f-f0a7-4a59-90ab-d04a87c22b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:0c:a2:5e:b7:79:0f:14:7e:75:4d:87:2e:
cf:c9:d7:ae:fe:2f:e0:a1:8c:64:b1:ff:81:63:a1:
2a:11:4a:a6:5c:66:e0:5c:b1:49:fc:21:f7:e7:ec:
1a:c5:ac:ff:02:d7:76:a6:65:2b:0b:79:f4:25:58:
c0:be:b9:8a:ea:ed:31:72:1e:e8:6d:86:ca:ff:30:
94:93:28:88:d1:bb:6d:02:64:1c:10:8e:13:aa:53:
6a:fd:91:fa:be:66:0b:5d:3a:ef:d5:f1:91:95:0e:
78:0d:b5:cb:de:9f:46:66:a5:dd:1e:1e:62:7a:e3:
16:dd:39:80:25:01:8c:69:7a:95:c8:df:52:0d:4a:
2a:0f:72:d4:fc:37:26:97:2a:18:66:f4:7d:19:03:
ad:d5:7e:b5:23:fb:02:01:00:86:9a:91:5e:4c:bc:
e0:f8:d1:74:ae:e1:9e:e6:bc:4d:22:47:1e:ee:da:
9a:06:f1:3f:38:0c:49:d2:c9:a9:f2:50:9b:df:5c:
7d:90:47:8a:0b:a2:90:0c:1f:6b:61:b3:f3:c3:9a:
05:bd:25:1e:1b:d7:7b:13:a1:2a:ee:42:3f:34:9f:
1e:12:e0:15:4d:78:22:0b:7d:44:01:45:82:0d:7f:
fb:39:3f:61:bc:c5:e6:b1:2f:cb:6a:b4:00:50:22:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AA:66:B3:51:91:88:F5:9B:FE:C9:AE:A1:21:6D:25:E8:4D:21:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:fb:14:6a:fb:8f:6f:60:31:59:35:40:d3:d6:75:3f:8a:8b:
be:19:ea:b6:37:ee:a4:86:1e:40:80:23:e2:c6:8d:a9:ee:c2:
f9:7b:c1:b2:e9:de:24:ed:41:9f:75:ce:40:26:56:53:25:85:
cd:c6:40:6c:36:42:04:c8:7e:d2:c8:49:e5:db:7b:0f:35:72:
6d:e9:b2:b2:23:a4:27:31:d5:3c:a1:ee:54:93:02:85:69:e0:
b5:74:01:2a:a1:73:fb:ca:20:11:e5:dc:43:c9:6d:74:2d:aa:
d0:13:9b:24:21:c4:5c:97:f4:99:05:b3:03:d3:06:05:53:2e:
e3:6f:b4:9e:d9:36:f9:d8:82:13:0a:0c:39:40:b2:fa:ea:74:
9f:1c:14:6f:c6:15:9f:5a:9b:71:27:c2:49:99:96:2c:d1:d4:
d6:44:93:46:3c:e2:8a:31:25:57:b0:1e:1a:54:85:36:37:5f:
ba:08:8f:18:99:f9:1d:e6:b8:50:a5:8b:37:18:b8:93:2f:99:
f9:34:6b:d6:f5:4c:34:d0:1f:99:1c:55:eb:fc:d9:39:7a:6a:
41:85:49:10:79:d1:3b:69:86:40:ba:3e:15:14:6e:fd:81:41:
c1:d2:eb:0c:c3:a9:dd:07:e9:f3:dc:70:ed:2f:bd:7d:e9:c5:
53:ae:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:24 2025 by rpki-client