Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/83b266a8-92b7-3018-a36b-711439e055e8.roa
File: 83b266a8-92b7-3018-a36b-711439e055e8.roa (raw, json)
Hash identifier: qu7hOxDBGya07FYDW2ZP1J3r2u5L4lGmLAGCnbIBvQE=
Subject key identifier: 19:D0:E3:52:84:99:D8:BC:B4:CF:F3:0B:09:5C:D3:34:AB:F5:73:3A
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F432858492183FCDA7E830DDB68BBE614
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/83b266a8-92b7-3018-a36b-711439e055e8.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 21859
IP address blocks: 107.148.161.0/24 maxlen: 24
107.148.162.0/24 maxlen: 24
107.148.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:fc:da:7e:83:0d:db:68:bb:e6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=11aaf213-41a2-4e31-954e-e6c85f47c0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:82:fd:e9:26:9b:65:88:f9:08:21:ee:a6:
34:10:39:5c:72:31:28:5b:49:2a:6e:ad:74:24:fc:
ff:98:8c:46:07:c8:6d:95:c8:0e:45:d3:78:61:2c:
d3:bd:46:75:9c:0a:88:37:88:25:8e:cd:32:25:52:
3d:2d:eb:88:59:57:9c:9f:ce:5e:b1:70:a8:66:28:
c9:ac:03:48:64:4d:52:a2:7c:e1:7b:78:4e:23:3d:
74:8d:62:eb:2f:1b:3e:e3:3b:67:6a:d4:65:f0:a7:
a5:78:5d:d6:ef:85:04:83:f8:cf:c1:7f:d7:4d:49:
ac:08:b1:c2:02:28:4c:43:a0:9a:e5:87:2f:37:dc:
ad:90:95:0c:90:43:5f:5b:44:2b:36:ce:e7:70:92:
da:9f:80:3b:04:c3:9e:8a:60:e6:7d:94:d4:a9:44:
30:4d:4b:3b:a3:f8:b5:2c:a6:86:f8:ab:0b:24:0b:
c7:42:79:ff:ba:67:fb:3a:a1:58:c9:2e:cb:80:b9:
0c:ee:a7:7f:07:cc:c6:de:9f:77:f0:9e:d9:6d:9c:
90:ea:9b:d8:cc:4b:4d:f1:26:9b:80:bd:67:b0:e6:
27:81:a4:db:ec:0c:4e:5c:98:16:99:22:a1:61:9e:
14:33:71:94:48:71:1b:99:be:6d:51:f9:14:58:17:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:E3:52:84:99:D8:BC:B4:CF:F3:0B:09:5C:D3:34:AB:F5:73:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/83b266a8-92b7-3018-a36b-711439e055e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.161.0-107.148.163.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:eb:dc:d8:8b:1a:60:20:1f:84:86:ea:cf:f4:27:f3:2c:70:
46:34:3a:8e:d8:cc:8d:2a:77:7b:4e:0d:59:1a:e1:57:fd:7d:
55:a2:d4:78:c4:a8:23:af:d1:d3:f6:7f:bc:4b:28:8b:78:5c:
bc:8f:06:47:0e:a6:13:16:00:3f:2b:6b:4b:a1:83:87:31:a3:
71:23:37:3e:a3:fb:3b:48:7b:5d:25:67:c0:7a:da:31:91:22:
4a:e1:29:82:75:5f:19:a9:58:1a:ca:f1:3b:38:b8:2c:26:3e:
91:d1:cf:a4:d2:65:a0:a9:aa:95:6a:87:4f:78:9a:df:6d:4f:
59:f1:13:40:8b:ae:44:d6:90:55:85:ce:cf:73:c2:6e:04:7c:
ea:ae:47:1a:97:a4:23:d8:5e:0c:91:28:94:cd:c3:63:c4:68:
0a:76:4c:05:0d:9f:65:00:29:9c:68:c2:ce:b6:db:33:18:d8:
82:70:0f:30:35:17:42:1d:08:5a:f3:bd:44:01:22:a2:5e:45:
dd:ed:fa:53:65:5a:02:7c:d5:29:ed:07:b0:c9:99:72:c1:41:
3b:10:7a:0d:a4:4e:24:ef:72:02:9c:1b:7a:f8:2f:69:f8:9d:
a3:3a:e8:e5:a2:d2:71:18:db:fb:1e:97:47:9b:67:5e:e2:57:
f7:c9:e7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:46 2025 by rpki-client