Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fef6e91e-0c5d-3aeb-aee4-93040bd2870f.roa
File: fef6e91e-0c5d-3aeb-aee4-93040bd2870f.roa (raw, json)
Hash identifier: 1B/pl5/v6HbVczi2trCe1yYQ8GKu3uUNsqSeoIoJY+k=
Subject key identifier: 6E:94:15:C8:9C:7C:B5:4D:C3:D2:28:E6:BB:C5:78:64:84:46:AF:71
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848BBBB87CFD97DADEE30087C80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fef6e91e-0c5d-3aeb-aee4-93040bd2870f.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 134365
IP address blocks: 107.151.238.0/24 maxlen: 24
107.151.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:87:cf:d9:7d:ad:ee:30:08:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=bd82eadb-d5f8-434a-a125-7f9f37ec5488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:11:eb:a2:ae:82:d3:2d:4f:5a:22:28:d1:
5e:5a:0d:b1:b1:b6:9f:34:85:67:00:b8:06:b6:4d:
2b:d5:90:fa:53:80:13:89:76:a1:32:db:da:c0:ab:
75:e7:07:4e:48:5f:7b:c0:f9:c8:6f:ca:36:51:c0:
7b:e3:9d:f3:01:61:53:8d:87:84:ad:dc:f0:35:c7:
71:55:d9:10:be:34:81:de:b3:ab:46:9e:24:db:43:
59:1e:9e:fe:d6:e9:4c:f6:b0:b0:44:90:99:c0:a6:
58:2b:d4:08:19:bd:fd:2b:2e:4c:0b:8b:a3:27:49:
79:b8:78:61:78:87:55:ae:00:90:38:7e:27:ac:79:
c2:f5:48:49:ab:00:bf:4e:0a:0b:72:43:df:f8:63:
00:65:34:15:c3:1a:b0:a0:f2:0c:ed:0c:c5:21:a5:
29:f3:0d:74:06:f5:bb:02:7f:17:67:16:14:d6:5d:
44:6c:8f:fc:36:2f:20:f5:f3:72:f3:d1:1f:4b:5e:
39:ad:2c:11:c9:81:fc:af:74:fb:db:e5:55:57:8d:
53:7c:a8:a3:3b:e5:2d:18:9c:b4:f6:f3:07:6e:09:
ca:f0:3d:b7:32:a9:a2:ad:1a:f0:60:7b:f6:09:49:
ec:dc:1f:81:68:97:48:b2:39:f0:e4:1f:5a:59:85:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:94:15:C8:9C:7C:B5:4D:C3:D2:28:E6:BB:C5:78:64:84:46:AF:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fef6e91e-0c5d-3aeb-aee4-93040bd2870f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:79:3a:91:11:b8:11:09:bd:76:90:ee:89:48:ae:36:1e:e7:
aa:5a:ae:5e:17:07:de:de:fb:7f:04:80:a0:f6:e9:53:f2:d1:
32:2e:65:60:91:49:cf:03:c7:68:3c:c8:17:cd:44:4e:6d:c3:
ac:98:d4:e9:ed:55:47:01:ac:4f:73:26:24:be:ce:e9:36:8e:
d3:01:26:68:12:62:c1:fa:d0:60:f0:05:bb:9f:d1:78:ef:b5:
64:b1:f1:f8:da:db:53:ce:da:82:d0:4e:2b:5d:28:83:c0:98:
de:a2:9e:18:c4:28:4f:86:cd:64:1a:0a:b6:46:6e:ba:ea:7a:
b2:b7:52:08:f7:12:07:5b:4b:11:2e:c9:99:af:6f:8e:ed:a9:
22:cd:95:b3:39:e2:f3:80:f6:47:e5:81:72:93:a5:71:21:28:
67:4a:ba:32:55:d2:32:11:61:c0:cf:80:2f:e4:d4:13:c4:46:
cd:f2:73:91:e3:85:f5:a1:dd:b1:78:81:dd:a1:bb:11:6c:ea:
2d:82:68:65:dd:ef:e0:6a:70:8a:2c:f2:be:d3:32:38:63:ce:
2d:bd:03:9b:a3:5d:c5:89:d3:47:2b:36:70:d6:b2:c6:93:cf:
28:d8:9e:9b:d9:cf:5a:b9:a0:b8:8b:19:f9:06:90:84:91:5b:
c7:a2:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:56 2025 by rpki-client