Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5ccec48c-dc4d-30e2-ba4b-ef092b0d332b.roa
File: 5ccec48c-dc4d-30e2-ba4b-ef092b0d332b.roa (raw, json)
Hash identifier: jV4JrK8UJzumf9Tk3WZL52tj0J4s5T2NJ4i4TqWiGIE=
Subject key identifier: 4D:83:1E:6A:5B:C6:EA:6A:51:AE:C9:4D:6C:6B:B0:AC:5D:F8:8F:93
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848A400C176C6C1668D0D9B8E80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5ccec48c-dc4d-30e2-ba4b-ef092b0d332b.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 398478
IP address blocks: 107.148.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c1:76:c6:c1:66:8d:0d:9b:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=0c178454-ef1a-4021-98cd-bb84bdf1beac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:58:19:3b:a1:05:c3:ea:c3:79:85:44:3c:84:
13:a5:bb:4b:a6:8d:86:08:24:2c:fb:cc:08:dd:44:
86:91:2e:5e:b7:fc:84:52:bb:4e:be:85:3a:73:17:
6e:ea:ac:70:75:e8:2c:eb:53:ce:61:7b:e9:e5:43:
bd:9a:48:61:88:43:66:20:18:62:e8:81:c9:1a:f0:
a3:4f:f3:70:a1:1a:21:de:6d:de:d1:1d:78:70:03:
6f:20:8b:21:2a:3a:d6:8b:fa:19:34:30:0c:00:a1:
2d:30:03:ae:5c:30:2d:39:8e:da:ae:e0:39:51:43:
2b:54:64:3f:90:66:b1:6d:95:da:23:04:69:5e:d5:
ce:b7:5c:1d:47:8b:85:44:5b:64:70:69:15:94:e6:
69:1e:fa:de:78:f2:37:f3:5a:48:fb:44:2f:55:8e:
33:b7:bd:b6:38:31:9a:2b:34:a8:6e:e6:a0:59:9e:
3c:ff:93:6f:02:02:db:6a:46:c7:52:02:da:69:c1:
b9:d6:e0:89:d1:60:84:a7:dc:a4:86:27:47:0c:ad:
80:7c:59:4c:57:d2:c5:c9:9e:92:5a:7f:04:20:2c:
0a:70:57:a3:9f:a4:e7:0a:e0:2d:65:e8:86:18:52:
00:48:fc:40:d0:bd:44:34:52:af:28:ef:e4:2f:e8:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:83:1E:6A:5B:C6:EA:6A:51:AE:C9:4D:6C:6B:B0:AC:5D:F8:8F:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5ccec48c-dc4d-30e2-ba4b-ef092b0d332b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:c8:0e:43:89:d7:e7:a2:f8:22:1a:47:56:f8:8f:38:d9:c3:
6b:de:01:1d:56:53:14:e0:b5:0b:05:13:99:e5:25:e8:bf:dd:
6a:97:8d:69:8b:e2:96:63:5c:fd:a2:ba:7b:bf:75:e7:30:3d:
c8:fa:ac:5f:f7:1a:7a:11:7a:fa:60:bc:75:b9:99:96:19:3e:
e4:b8:5e:5e:a4:53:c5:4b:ef:32:01:d6:cc:37:c2:a5:47:45:
bc:6c:ca:a4:fe:63:7a:b1:90:ec:0a:40:7a:16:43:39:54:42:
d3:7d:97:4b:7a:3f:69:18:0c:47:5c:74:ee:ac:af:2c:86:55:
53:d8:0a:6e:6d:6c:74:94:e7:f7:3f:01:d7:8f:50:69:6b:30:
b5:01:5e:63:cf:ef:5d:92:ee:4a:62:96:1b:6a:6d:fa:54:8b:
b0:d8:ea:f5:f3:06:1a:12:09:46:b7:89:7e:8c:5d:cb:1b:2b:
80:b3:6c:dd:d1:94:32:75:b3:17:73:8b:e0:ec:fa:d7:75:73:
bd:27:4b:c9:26:49:83:0f:46:da:5a:37:db:2e:2c:7b:32:dc:
13:cc:96:6a:19:11:fd:b0:ec:f3:f5:e1:42:af:0d:69:cc:cf:
15:ff:e8:6c:db:03:4c:00:8d:27:11:ff:7b:11:6a:5b:58:72:
d4:65:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:42 2025 by rpki-client