Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/39cf7394-6892-3201-b148-f346c4594aff.roa
File: 39cf7394-6892-3201-b148-f346c4594aff.roa (raw, json)
Hash identifier: l1W7Og1Lt9VdD3Af8tecHgMzgiDX7XvQw1XbhtIo8AQ=
Subject key identifier: 6B:C4:37:10:66:54:7C:BA:2C:C8:EC:CA:4D:AD:F7:B4:8B:D5:2C:EC
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848A29B540EF361848730638830
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/39cf7394-6892-3201-b148-f346c4594aff.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 394432
IP address blocks: 107.149.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:54:0e:f3:61:84:87:30:63:88:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=2ea44dd4-eabf-4658-8a14-9e64ab56210a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:87:65:12:7c:ca:c9:40:f5:c0:03:29:97:
8e:5b:02:fd:e7:10:54:b3:0c:3e:ff:24:4d:52:70:
72:d8:78:17:ab:22:7f:71:3f:3e:7f:93:12:20:8f:
78:50:15:c3:8f:30:cd:3b:0b:51:29:46:f3:1d:f5:
eb:94:64:38:17:23:14:b0:ea:c0:50:59:66:ec:6f:
00:3d:ef:74:31:1f:d0:73:44:c0:50:f7:2e:d8:2f:
f4:7f:ad:5a:e2:8b:d2:3b:ea:04:bd:a9:61:a0:f0:
58:da:71:4f:94:bb:34:c1:c8:f9:b0:d8:ab:48:68:
94:0e:76:3f:58:51:56:e4:b7:6d:88:bf:74:22:65:
7b:5c:e0:71:bc:fb:f7:17:9c:8c:b1:3a:68:75:5b:
3a:aa:ae:6a:c9:d1:10:25:79:10:e8:a9:42:f9:46:
f7:3c:cf:10:4f:d6:24:09:9a:66:73:ff:5e:21:c4:
db:c4:95:e9:57:ff:6d:60:8f:bd:87:6a:7a:53:65:
17:95:88:cb:d2:38:d9:0e:1e:1c:84:5f:9c:d1:eb:
c0:f6:63:a0:96:ab:c8:df:c5:46:c6:7d:97:9b:15:
a4:9b:f6:f5:21:bf:d2:86:ad:12:66:83:c0:d4:1b:
38:5e:45:22:96:a4:36:c4:8f:9f:90:46:49:d3:17:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C4:37:10:66:54:7C:BA:2C:C8:EC:CA:4D:AD:F7:B4:8B:D5:2C:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/39cf7394-6892-3201-b148-f346c4594aff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:2c:9f:e6:f2:0f:36:a6:2b:29:bb:94:2a:32:0c:aa:5f:02:
14:af:c6:7e:07:ae:43:23:70:d0:53:fa:30:f6:a9:0f:79:e4:
86:c0:dc:73:19:54:b5:cf:76:9c:4e:5b:b5:05:a9:a5:a7:27:
7a:37:44:6a:6e:c9:e5:90:b6:04:3a:80:0b:05:f4:fd:8a:79:
c7:98:2f:ac:26:eb:fb:51:83:9c:16:0d:72:fe:fc:d9:a2:cf:
94:a1:1c:70:43:84:1f:41:a9:f0:8f:1f:6a:da:8b:0e:33:36:
15:2d:84:d0:a5:fb:d0:f5:37:88:71:7c:0c:60:4b:72:ea:08:
d9:a4:4d:1e:f4:b3:2e:03:3a:4b:af:79:24:dd:13:ac:ab:9c:
21:a6:f5:22:fb:47:d4:77:7f:de:62:a5:63:3d:88:67:25:19:
30:68:96:37:f4:7e:d1:a1:06:a4:31:d9:36:8d:71:cd:d2:e4:
51:d0:68:44:87:bf:c7:67:73:f7:29:23:e3:51:05:c9:ac:16:
7c:9b:27:4b:b7:1a:01:8e:68:ef:79:28:32:58:ac:3e:d0:f2:
de:5f:0b:89:26:6a:1f:c0:9a:8d:f8:10:11:70:a6:47:c4:3a:
e4:ba:20:4b:6c:d4:89:96:d0:fc:2c:86:f9:f8:da:61:41:45:
5a:7c:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:52 2025 by rpki-client