Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa
File: 7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa (raw, json)
Hash identifier: M/UUJ2a4tgoQHWy8PTi7GkrfqBwKzil28tS7doiw8sE=
Subject key identifier: DC:82:D3:23:55:A2:AA:43:5A:FA:DC:FD:C1:DF:FF:95:22:7E:C0:F9
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848A29B546BA77D31A777FDB480
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 398823
IP address blocks: 107.149.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:54:6b:a7:7d:31:a7:77:fd:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=b43e34cf-a2df-49e1-82e7-aa466c2bf0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4e:d2:d7:e5:d9:fb:ce:40:42:97:e5:f4:18:
22:66:b8:85:29:e4:e2:81:b9:e0:df:d5:c9:b1:18:
9e:6c:74:ad:05:f6:e4:c6:0f:80:24:37:3e:2c:fc:
65:7d:d7:4b:f8:93:d7:f6:fb:29:32:4b:c1:f6:12:
07:16:f1:73:7c:1d:a0:8d:8b:a5:45:a2:92:74:f3:
1c:be:e5:99:67:6b:93:a7:03:79:7c:1f:bc:96:1b:
e6:40:44:4e:7e:1c:66:e5:ef:65:86:91:41:a9:fa:
28:bc:ab:0a:6e:55:86:d1:d0:a4:66:4c:28:dc:a8:
5e:f7:8d:a2:62:2b:9c:7f:61:bb:c7:f9:de:25:0f:
e2:1c:7e:0d:83:dd:de:13:4f:1d:b6:4a:e4:ab:c6:
32:69:54:25:01:a0:f7:7d:74:dd:b7:85:47:08:35:
76:f0:0e:90:42:31:1c:ee:a7:c1:f9:fc:22:68:08:
eb:7e:01:87:e5:90:d9:fc:59:ec:86:9e:68:ae:5b:
c5:e2:83:07:c8:5d:2e:52:ca:81:9d:e8:8a:53:c6:
15:f5:2d:2a:63:6f:2b:4d:ab:43:85:5a:99:84:ac:
dd:83:c4:a5:0b:89:01:46:41:ba:7e:12:cf:4f:36:
85:6e:4e:83:ad:a4:31:d5:02:39:7f:bb:a5:c7:c2:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:82:D3:23:55:A2:AA:43:5A:FA:DC:FD:C1:DF:FF:95:22:7E:C0:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:c8:ae:e4:20:36:c5:c0:33:14:80:c2:a2:82:81:e6:b0:2f:
94:17:95:a0:71:3d:8f:8a:02:c1:ae:2f:c1:df:f8:29:cc:64:
b7:00:8b:29:79:c9:06:90:4d:9b:cf:a6:7f:b8:bd:de:b1:87:
95:3d:56:ac:c0:a7:66:b7:a6:6b:45:ca:c9:68:ac:c4:0f:32:
f0:f6:8f:88:db:b8:8b:67:13:f5:89:51:ef:79:9d:39:9e:11:
f5:fe:4b:ed:46:3c:59:c0:f9:92:d3:08:7b:59:d9:6f:b1:ac:
06:70:ea:be:ae:5d:79:dc:2a:1f:eb:61:d8:3d:77:de:c0:d6:
a6:f5:e5:bd:50:8c:57:49:75:ee:e8:39:a1:5d:a1:3f:a9:8e:
26:74:88:c7:5d:39:31:77:a1:42:9e:75:a7:ec:a7:33:a3:8f:
6e:dd:07:85:ac:b3:4f:31:30:3f:0c:a4:90:30:1d:e1:31:a6:
7b:ba:aa:31:32:33:e3:b7:3e:5b:30:b2:47:da:85:10:df:0a:
e7:77:a1:c2:b8:39:be:94:ee:8a:ba:77:e1:8b:4c:a1:c8:11:
5d:ce:5b:8b:73:95:d0:65:68:97:5a:c9:ec:b0:c4:94:56:32:
b7:2c:62:56:ff:54:15:57:17:f0:9b:df:f4:ae:e9:0f:57:06:
80:82:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:06 2025 by rpki-client