Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a936ef8-0cfb-3031-9c09-6fe1b1c31458.roa
File: 0a936ef8-0cfb-3031-9c09-6fe1b1c31458.roa (raw, json)
Hash identifier: WFIHZpNCxIgqtElO4V1Rf2C6PEF5FGkE3JM9flDxp1U=
Subject key identifier: A1:49:B6:C6:72:72:8B:29:FA:37:90:3B:89:42:F5:82:94:FA:3D:EA
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848A29B5256CBA1F687FA9A9500
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a936ef8-0cfb-3031-9c09-6fe1b1c31458.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 398823
IP address blocks: 107.148.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:52:56:cb:a1:f6:87:fa:9a:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=2007bac1-10cd-47ca-bb90-802d80ccf2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:5f:82:35:05:ec:b5:bf:e3:2d:86:3b:de:
73:4e:b3:e5:88:53:85:a7:1b:94:be:79:cd:fe:1b:
0f:d3:49:1f:ef:83:ae:3b:ab:b7:1d:37:51:cd:4a:
68:40:44:0e:7f:b7:70:18:40:a1:9b:b6:c9:3a:d5:
70:f8:72:2a:45:61:8d:7f:a8:d8:db:41:21:45:cc:
92:69:6d:1c:0b:10:2e:e1:c9:32:69:67:e8:2b:28:
c3:b6:e3:c6:ed:8f:08:79:9e:df:13:ac:c1:b2:c8:
78:c2:67:d7:21:f2:cb:bc:e4:4e:c2:6f:86:f4:00:
be:17:ea:2c:29:60:a4:1c:6c:39:b0:eb:1e:94:35:
38:09:f2:58:23:b0:0f:72:96:fe:e1:e9:84:7b:7e:
dd:02:d8:44:4c:5e:ab:b5:2c:15:fa:14:26:dd:0f:
ae:62:31:27:bd:7a:52:33:fa:87:4b:e1:4e:da:cd:
7e:58:5f:97:6f:b3:1e:c6:f0:1d:bb:94:52:01:69:
46:b0:60:cb:4d:0f:b9:69:d0:b2:05:48:4a:04:42:
2f:fb:2e:f1:27:b5:c1:83:0e:02:41:2d:d6:4b:f3:
76:23:27:a4:82:bf:18:fc:d2:14:e7:f6:77:1d:60:
82:c1:9c:8b:cb:a7:8d:37:38:ba:1c:dd:49:c0:2a:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:49:B6:C6:72:72:8B:29:FA:37:90:3B:89:42:F5:82:94:FA:3D:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a936ef8-0cfb-3031-9c09-6fe1b1c31458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:68:e5:e5:65:7e:84:37:b8:9e:de:25:4e:3a:72:36:d8:63:
ca:21:7f:0f:d5:2e:59:99:4e:e9:73:30:86:66:e8:e4:80:e1:
68:b0:21:ab:c3:cf:e0:7d:0a:ff:ca:a1:d4:28:dc:7b:3c:cc:
ca:58:8d:98:67:18:79:25:88:a6:c5:d1:03:91:6f:5a:1e:84:
50:23:9e:d6:14:3a:75:aa:22:d0:3e:0c:43:1e:19:b2:b6:82:
fb:a1:27:cd:53:f9:9a:e0:f1:e3:f3:03:62:f7:19:f0:d9:d0:
12:e7:81:c8:7d:4a:48:f4:94:ab:74:98:6c:fa:6b:b9:82:9d:
18:95:a8:5c:2e:cc:48:73:14:59:1f:51:87:fb:1c:f8:a9:80:
cd:5c:02:04:99:d6:53:a0:bd:f1:b0:73:65:94:9a:2f:60:88:
e2:f0:21:f5:d2:24:a9:7a:99:0c:9a:47:fb:f6:97:0d:40:f3:
a3:05:41:b3:03:36:6a:1c:38:90:26:3b:7c:c3:70:00:6e:2f:
57:36:8e:94:70:87:cb:39:32:d3:bf:4b:9b:f2:4a:5a:3d:11:
bd:2c:b4:98:c2:e3:f2:f5:3e:03:6f:88:64:5d:23:82:f9:8b:
19:16:75:9e:9c:74:07:d5:d5:3c:04:e5:65:e2:60:78:f5:0b:
80:16:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:24 2025 by rpki-client