Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/cf1629b0-5084-30d3-a82b-ef62f3897328.roa
File: cf1629b0-5084-30d3-a82b-ef62f3897328.roa (raw, json)
Hash identifier: qPXHy5XkKfjXVPNxBjIyD3tgoh6QTJe62DKqv42qcec=
Subject key identifier: 5B:69:78:A7:04:DB:7C:A0:6C:B1:D8:50:6B:63:C6:59:E4:41:74:46
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848F65BE6265E88A807090262D0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/cf1629b0-5084-30d3-a82b-ef62f3897328.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 137443
IP address blocks: 107.151.240.0/23 maxlen: 24
198.44.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e6:26:5e:88:a8:07:09:02:62:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=376cebc4-f4f6-43dd-992a-c031f96849ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:9f:e9:1b:e0:99:6a:dd:4b:89:fc:da:7b:
77:a2:3b:2a:51:4e:45:2d:c1:b5:84:40:4c:b3:b4:
f9:96:29:38:f3:cf:46:f7:76:ee:a1:b7:1a:b2:3a:
50:62:a9:cc:cd:d7:f2:29:91:fe:6b:ae:76:ce:87:
38:3f:76:24:5f:3a:ef:35:fa:3d:cd:ab:fe:81:1a:
5b:6e:b6:58:e1:9e:7c:ac:e4:3c:a2:dc:2a:68:ad:
a0:8a:b4:fa:5d:c2:60:8e:34:92:08:57:9d:8d:88:
4e:1c:6d:69:96:13:2b:d6:aa:ff:4d:d4:4b:6f:ee:
83:c0:17:9e:76:23:1a:4a:dc:56:51:11:cf:03:da:
70:5d:ff:c9:2a:1b:5b:ec:e9:9d:75:d7:8c:58:42:
4f:1e:3c:5a:02:7d:f5:c4:a0:e0:3d:2e:85:a8:e6:
71:36:16:10:04:e1:8c:bb:a9:cc:fa:62:8d:37:a2:
f3:56:9c:79:10:b2:ae:81:26:c1:38:d4:1c:9d:cf:
b6:44:94:1c:88:48:a2:1e:91:21:a1:95:f9:47:d0:
25:fd:65:b7:8f:cc:72:a7:14:44:6c:5f:7c:02:b7:
07:af:5a:ad:32:49:4e:08:64:88:aa:34:b6:a8:c3:
b9:00:7c:7b:7c:f0:7d:8b:fa:17:54:71:16:bc:c0:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:69:78:A7:04:DB:7C:A0:6C:B1:D8:50:6B:63:C6:59:E4:41:74:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/cf1629b0-5084-30d3-a82b-ef62f3897328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.240.0/23
198.44.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:4f:a1:77:9e:39:13:a3:0c:80:5a:02:15:78:0b:5c:e5:a4:
9e:fb:82:9c:f7:2c:f8:d0:3d:53:e6:0f:96:71:2d:7b:82:ca:
8b:76:65:12:33:9e:cb:6a:2a:64:68:03:17:82:db:a3:0b:0e:
d4:09:57:9d:20:dd:48:43:9d:f5:22:ad:47:e4:f9:19:db:e7:
8f:fa:ec:0e:de:d8:a6:94:76:af:10:14:86:3c:77:e8:60:c6:
d9:2d:9d:fe:c8:7f:1a:e6:02:ba:5c:3b:78:5c:91:2d:f4:15:
c7:6e:1d:e2:8e:94:e4:68:c1:4f:45:61:3b:be:5b:51:a5:c4:
d7:47:79:1e:44:61:88:86:3a:eb:23:58:22:18:33:9a:2a:f0:
de:50:1b:43:83:1d:b5:40:07:40:db:f1:8f:e9:c5:74:f3:84:
35:9a:70:26:b0:01:50:1f:49:cb:28:e4:73:eb:5f:83:82:e6:
c4:ce:88:e8:f1:69:66:09:15:89:56:87:12:6a:0a:d3:16:8a:
61:78:45:ed:9c:17:75:74:e9:0f:99:2e:57:7e:a7:bc:11:42:
bb:37:84:8c:4e:96:6f:cb:e2:a7:2e:c7:ca:83:a0:8d:9f:f4:
39:fb:40:94:e1:e6:47:5f:e0:03:b8:56:cb:eb:52:6e:96:17:
9b:7e:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:51 2025 by rpki-client