Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa
File: a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa (raw, json)
Hash identifier: CnbAfwQxEnov+4gpBCLaQWFxJWKQR3FKacSVbJZ+vNY=
Subject key identifier: F8:D4:6C:75:09:F4:CC:39:13:53:F2:FD:46:FC:57:CA:20:0A:E2:7F
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848BD20E5E57F15D32CD1110420
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 137443
IP address blocks: 107.151.244.0/22 maxlen: 24
198.44.170.0/24 maxlen: 24
198.44.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e5:e5:7f:15:d3:2c:d1:11:04:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=6931d720-6d3a-4513-91e1-53aac03edc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:e1:4d:4d:04:59:a3:61:7c:1d:3d:b9:7a:
1c:c1:df:d0:d1:be:b8:6d:59:d1:f2:30:b1:ad:59:
ba:59:76:cf:69:29:45:47:7a:8b:5b:2d:73:c2:0f:
56:e3:52:d6:00:5f:2f:80:de:f2:4c:1f:c6:af:fe:
bf:46:cc:36:47:a3:a8:08:7c:a3:c2:a7:1d:56:25:
3f:23:c0:b0:5b:ef:0c:64:ab:ce:00:60:f5:d6:94:
4c:3d:9d:4c:8a:e8:a8:f2:07:c2:aa:d4:d9:35:cf:
02:49:50:40:2c:3e:3d:13:ea:03:cc:24:8a:83:b9:
1d:54:bb:a5:62:2e:54:d7:cd:8a:c5:6f:39:da:7f:
eb:96:a8:26:5f:7d:84:b9:a6:61:ea:3b:f5:56:5d:
59:bc:7d:ed:9d:00:1e:c7:12:ba:13:a0:bd:be:d0:
47:5b:4b:f8:95:21:f4:80:d2:9d:55:9a:93:b4:e8:
5c:41:17:15:6e:e1:48:5c:8b:8a:62:77:ea:67:b8:
87:9f:e3:f0:76:03:34:3f:b6:a5:0a:bb:80:1f:a7:
de:ad:74:53:df:3c:6e:ec:e8:8c:c9:45:1e:fa:42:
29:85:74:11:72:e0:2d:0d:5b:a8:82:7a:72:eb:c9:
ae:19:57:65:8c:53:a0:46:81:c7:b0:cc:72:14:69:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:6C:75:09:F4:CC:39:13:53:F2:FD:46:FC:57:CA:20:0A:E2:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.244.0/22
198.44.170.0/24
198.44.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:d5:0d:2b:fe:91:4d:25:4b:f7:b4:f4:c7:3e:db:5b:80:30:
23:69:91:5a:3e:d8:42:f3:20:f8:45:9b:19:5f:48:99:00:44:
36:11:37:16:a2:ee:29:51:dc:9b:d2:1a:9b:97:c1:89:37:01:
67:62:10:8c:5b:13:3a:98:f3:3d:45:c4:2c:73:1c:fb:1c:cc:
36:a4:ab:6f:d2:67:10:a9:42:36:a5:86:6f:2b:dd:71:9a:72:
9b:ef:82:2f:49:59:a1:92:0a:38:2b:67:93:b1:47:a7:0a:32:
3d:e5:d8:c2:76:18:71:c5:84:33:ff:57:2c:4d:f0:a5:64:c9:
88:d1:93:62:a0:04:9d:ac:29:24:7c:b5:d5:07:b0:8a:b2:32:
de:22:e0:3f:20:48:f1:64:d8:ef:e6:fc:c9:06:1a:a8:a3:9f:
ca:60:29:e0:c7:6f:8e:33:44:51:ae:b3:5e:b4:97:79:ee:2e:
92:ca:c4:bb:b1:5e:3d:30:30:36:1c:6b:8a:19:b5:d5:0d:b8:
24:c8:0a:ea:d9:b0:81:cd:df:91:9f:79:b1:51:0b:b6:73:f4:
6f:25:4f:ce:c6:85:63:4b:1e:80:cf:3a:2d:fe:fb:e4:cb:46:
22:81:70:9c:c3:35:8a:00:f5:6b:a7:01:df:8f:1f:32:f0:70:
a4:0f:66:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:08 2025 by rpki-client