Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/009dd8f6-7c83-345b-84b4-ea046c4312ba.roa
File: 009dd8f6-7c83-345b-84b4-ea046c4312ba.roa (raw, json)
Hash identifier: deAsU7B6/EGBiByGeWu36hUkGZ+Yi97SIovHhiwuaU0=
Subject key identifier: D6:4F:88:03:DD:FC:F1:92:1C:CA:2C:75:D3:3D:2C:BF:7C:5C:3A:C3
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848A29B52BCAF9E281749BFDB20
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/009dd8f6-7c83-345b-84b4-ea046c4312ba.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 398478
IP address blocks: 107.148.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:52:bc:af:9e:28:17:49:bf:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=c6ebc6c5-74aa-42f6-b7f2-0b1db292a035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:88:27:e5:55:d6:0f:a5:8e:b4:d0:cb:de:
80:6b:d8:40:1f:87:52:2a:2d:0d:ea:40:50:0e:55:
56:3c:76:55:c4:92:48:07:b4:c8:68:ca:93:af:8b:
c9:f5:21:d2:de:b9:6d:98:ce:50:c6:e4:55:0f:fa:
59:02:58:46:49:37:46:3e:89:a7:99:41:91:9e:af:
4c:72:e1:78:ab:62:21:46:a0:cd:49:23:92:eb:64:
c9:2b:6d:4c:18:a0:90:41:90:96:18:46:16:1e:81:
93:36:bd:50:e7:1d:37:36:0a:9b:bb:43:df:8a:6d:
9f:f1:4b:e9:15:ea:a1:f0:13:1b:b9:e2:6c:2a:f2:
9c:ea:a9:07:24:29:33:5e:3e:05:d1:19:17:b2:55:
54:18:a5:ec:84:ea:2c:de:c8:a7:bc:22:6c:40:ea:
30:1d:d0:6f:f1:ec:68:09:d7:00:c4:8a:78:ba:1b:
43:f2:79:94:d3:8e:3f:55:de:c5:d1:41:31:bc:b1:
6c:c3:8f:9b:66:91:ef:bb:28:94:7c:c7:5e:61:4a:
fb:57:bf:27:9c:52:8d:f1:70:9c:34:80:7f:fc:2d:
30:1a:ab:31:2b:1a:b4:de:43:00:b8:c0:88:55:af:
66:ab:f3:95:d4:9b:19:de:66:be:00:c0:4f:b8:71:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:88:03:DD:FC:F1:92:1C:CA:2C:75:D3:3D:2C:BF:7C:5C:3A:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/009dd8f6-7c83-345b-84b4-ea046c4312ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:35:a3:c0:e7:37:06:37:cb:aa:2f:0d:56:63:14:c2:f8:d6:
53:c2:e4:e1:17:e3:26:47:86:33:71:fa:37:b5:ef:59:78:0e:
c5:4d:6a:65:1b:ce:f7:fa:84:06:ef:dc:af:aa:9d:7d:21:89:
e2:bd:24:54:b7:00:40:94:f0:74:19:d4:7c:e4:72:8f:a3:2a:
93:10:47:17:0b:8c:6b:e9:42:4d:46:26:f3:1a:21:2e:83:98:
2d:3d:84:83:9f:4c:94:f1:30:95:31:98:48:cb:bf:5d:09:a0:
4c:84:41:48:86:6a:c5:b3:08:7c:95:fd:81:93:91:c3:fd:c0:
c1:41:0a:3d:50:38:12:5e:8d:ed:99:78:31:f3:a2:8d:ad:c0:
1f:c4:5c:48:18:64:29:41:3c:83:bb:9b:4d:9c:63:6f:3e:f0:
ce:8b:48:c2:da:6a:ca:5b:97:36:c1:de:76:fe:1f:ed:75:bf:
3b:15:82:21:b7:c1:c7:66:90:ac:82:72:81:fb:39:80:2b:0e:
96:60:48:4b:3f:6a:74:29:06:c6:81:51:d0:3d:e0:30:3d:71:
3b:49:ea:e7:e8:69:95:49:18:cf:1e:0c:85:3d:89:40:81:fc:
dc:10:36:18:19:43:d0:ec:8b:5c:23:1e:b7:83:36:71:b8:1d:
5b:38:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:45 2025 by rpki-client