Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c48540e3-a29d-345c-a58f-8579a57be1d2.roa
File: c48540e3-a29d-345c-a58f-8579a57be1d2.roa (raw, json)
Hash identifier: e53mUQcUEpkJTDaEZSyeXz0KzeCfRt+a7LjxUBu3mQE=
Subject key identifier: 00:AF:D3:E2:39:D6:BB:8C:36:C5:48:34:4D:31:08:2B:5E:9A:1A:05
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848E9CBF1C5C445526C1E4AA880
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c48540e3-a29d-345c-a58f-8579a57be1d2.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 134365
IP address blocks: 107.151.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:f1:c5:c4:45:52:6c:1e:4a:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=dab7a753-e3ab-4a62-a10f-38ae1a5ebf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:20:67:e5:df:85:5f:33:e1:63:55:6e:3b:
06:65:cd:bb:47:82:90:34:38:1b:ac:af:e7:58:0c:
c3:26:62:13:1c:9d:cc:88:54:e5:c6:f9:90:5a:a2:
c9:9f:61:e3:10:9f:5c:a7:11:c2:09:82:8d:7e:12:
4c:41:97:f3:21:4d:e8:49:66:8f:50:81:76:fd:5d:
cf:58:1a:d7:85:28:ec:d3:5c:77:cc:6e:ad:f3:e5:
bf:ec:63:d7:c7:c8:57:b5:42:23:a4:ab:c5:6d:0f:
15:60:9e:ee:a2:45:a9:d0:5d:c7:b4:b9:58:fa:e0:
70:b3:d5:72:bb:10:13:8a:0b:85:88:ee:b9:15:6e:
19:93:a4:ea:98:fd:aa:6e:28:3e:84:80:79:b2:e6:
15:d8:5c:c7:ed:24:79:81:94:02:ce:67:7f:31:38:
0d:7d:2b:94:35:e9:4c:ba:c7:30:0e:76:41:74:29:
7d:74:e9:5b:3e:37:5c:97:02:97:ed:37:c9:a3:05:
f1:0e:52:6a:45:30:a3:f6:dd:b6:e3:33:01:02:58:
4c:28:14:6b:d2:ca:07:49:a7:e5:eb:e9:12:6d:5a:
e1:92:9a:8d:43:a2:58:61:bc:a7:dd:92:72:a4:6f:
0c:87:10:49:f5:a3:d9:0f:fb:3f:6a:47:67:7b:31:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AF:D3:E2:39:D6:BB:8C:36:C5:48:34:4D:31:08:2B:5E:9A:1A:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c48540e3-a29d-345c-a58f-8579a57be1d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3f:e6:72:d4:0f:ea:c6:67:45:b1:39:06:d3:d9:17:5e:3d:
71:19:83:6e:c0:e0:ac:17:e0:2d:cf:c0:6e:24:03:c4:c3:ba:
35:7f:91:68:a6:3c:05:d8:a9:c7:ab:bc:25:11:14:5b:3b:ae:
49:69:b4:63:86:43:43:6c:6b:3b:d3:32:71:84:da:92:7b:77:
72:78:05:76:cf:d6:06:60:10:c5:4b:9a:aa:9e:9b:9e:f9:25:
86:6d:92:9c:ef:8f:10:6b:ea:c6:79:29:36:ed:d0:ed:cc:92:
e8:c2:f7:0f:0f:2f:b1:a6:72:34:cb:d6:d6:03:9d:77:03:07:
a2:6c:c7:c7:fd:a6:2b:92:b9:26:b3:44:0d:e9:15:d4:b8:8b:
77:b0:fc:f9:9b:3a:89:5a:7a:c7:66:c7:a0:76:31:f2:aa:05:
db:b9:c8:78:2c:89:2d:62:ec:b2:45:96:26:21:8b:95:6e:16:
80:99:42:69:f7:61:5e:25:65:79:3e:d0:ac:52:3c:94:2a:ea:
6e:30:5c:b2:b3:bd:0b:ed:d0:c2:ff:06:24:9b:9e:f4:d5:ff:
f1:4b:94:68:25:b9:b9:67:c1:37:a5:6f:52:bc:1f:44:97:bd:
7c:0b:62:12:4d:37:0a:e5:d7:50:bc:cc:2a:d3:e4:85:98:76:
ec:49:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:04 2025 by rpki-client