Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80489b8f-d308-399c-8f25-51453b034f54.roa
File: 80489b8f-d308-399c-8f25-51453b034f54.roa (raw, json)
Hash identifier: UgCW/8Jlfki/9NlUDzYLtU2aTd4M7gm94nWoq4tmQ/I=
Subject key identifier: 49:9E:D9:6A:36:59:D0:C1:63:BD:07:1A:19:D4:84:DD:DC:BF:89:AC
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858490021644B9DE09146955F4380
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80489b8f-d308-399c-8f25-51453b034f54.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 134365
IP address blocks: 107.151.200.0/23 maxlen: 23
107.151.202.0/23 maxlen: 23
107.151.204.0/23 maxlen: 23
107.151.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:64:4b:9d:e0:91:46:95:5f:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=79597400-25a5-4c45-a73c-61dad8646eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:26:39:42:db:b1:87:00:33:45:c1:68:f8:
fa:12:84:f7:09:96:3d:bd:82:7f:74:b2:02:99:70:
ce:aa:45:29:c8:06:a8:07:65:97:f5:82:9d:ff:01:
b2:71:88:88:35:8b:f8:5f:65:c3:e2:cc:93:d9:60:
31:4d:dd:a4:ce:92:dd:e9:46:31:5e:8e:0a:b3:25:
72:53:7f:f9:2c:b1:72:7a:62:e8:54:1f:ec:b2:7c:
a2:16:5f:3f:45:cf:e2:99:b7:f7:1d:c3:d2:53:fb:
6b:f5:0a:11:d3:2e:b3:fb:4b:31:1d:e6:2e:ca:c4:
8e:26:98:47:7b:8e:a4:37:70:51:12:68:aa:90:79:
ab:46:aa:54:00:28:3f:11:f0:72:56:c5:25:0c:75:
77:2e:1c:8e:1e:b5:69:ae:e5:92:fa:e9:e4:fe:46:
99:39:33:69:b2:b1:d6:77:0a:e1:30:fb:37:05:b7:
79:f5:65:1e:b8:b6:c7:ac:3c:a0:40:fe:43:0d:a1:
81:5b:77:d0:8f:e4:ab:92:b5:dd:7b:74:d6:e8:fa:
ab:ff:54:b8:7a:56:21:e3:f4:8d:69:b7:8c:1a:14:
41:c1:d4:90:f9:58:97:26:2e:92:d3:86:8e:3e:20:
5a:18:7d:26:c6:a5:84:38:37:be:e1:4c:e1:e8:a9:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9E:D9:6A:36:59:D0:C1:63:BD:07:1A:19:D4:84:DD:DC:BF:89:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80489b8f-d308-399c-8f25-51453b034f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:a4:f8:95:72:df:9b:a3:fd:e4:fb:98:99:2c:66:4c:19:15:
44:d2:59:72:47:40:9b:df:fb:15:4b:50:89:67:d0:ba:48:e4:
00:4b:9e:46:f9:76:60:8e:8f:e3:91:e9:5f:fa:88:9d:24:3b:
ff:9f:3c:4a:77:a2:63:f9:16:43:d3:eb:b3:72:42:82:78:75:
2e:f1:b0:46:0e:57:d3:3a:2c:2c:6d:5f:7a:a2:e8:0c:c7:71:
3d:14:d8:c8:5a:cb:0b:eb:eb:39:8d:09:25:35:e0:70:c5:20:
a1:09:82:0b:7f:31:33:25:a1:e8:c7:53:36:5f:4f:a9:4d:8d:
12:a0:36:e5:61:6e:b7:14:cc:34:39:52:97:fa:a7:74:02:f8:
d8:52:09:be:31:69:2c:e8:61:2e:ca:b9:f6:d8:03:64:fe:f5:
48:25:44:51:d3:68:99:d6:ef:8f:30:35:65:0c:96:77:99:a1:
ec:7b:62:83:3a:4f:99:04:78:ef:1e:ac:e8:1c:e5:56:77:21:
41:ad:29:0e:9a:41:9b:50:91:d8:ce:04:99:31:46:86:8d:1f:
a2:91:65:e0:86:22:83:2c:c4:20:a8:47:e5:3d:4f:c9:89:1e:
ef:e0:6b:43:75:b7:df:36:13:cc:d9:9a:ee:73:aa:b5:fb:27:
f3:94:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:20 2025 by rpki-client