Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8c9416af-d52b-381f-9f3e-042f411072ed.roa
File: 8c9416af-d52b-381f-9f3e-042f411072ed.roa (raw, json)
Hash identifier: DgUpwJHLZXiO+FnXsXk6MMC844nZ445X91kXvCHY4m4=
Subject key identifier: 3A:7A:BF:EC:48:A0:63:5A:CC:FF:B1:EB:01:10:84:D5:8E:7F:6A:70
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F432858492E13B7935A9CA2A4E729C440
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8c9416af-d52b-381f-9f3e-042f411072ed.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 54600
IP address blocks: 107.149.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:b7:93:5a:9c:a2:a4:e7:29:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=e40e1caf-2d4e-42b1-a8af-d97922b8b26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:d4:99:a3:ef:e8:93:1e:a5:17:98:95:bb:
5a:b2:f9:b0:2f:a4:cd:e4:8c:01:7d:f2:1f:e8:99:
06:ab:72:22:02:23:19:fa:e9:09:31:5c:76:4d:62:
43:45:10:25:f5:0f:31:03:49:fc:13:4e:16:56:a9:
84:41:66:84:8c:f8:b7:81:bd:7f:fa:44:c9:57:73:
6d:fb:2c:36:d4:d4:49:e0:79:07:f4:4d:28:e6:54:
55:94:b5:24:a2:9c:a3:5f:98:9c:5a:10:6e:2f:3c:
81:7c:d4:2f:d4:1e:20:93:b0:88:f0:44:cf:4b:ee:
0a:bf:bc:b1:ad:5a:00:6f:41:13:ca:29:ce:bb:af:
8d:54:64:87:27:17:5f:00:67:03:83:4c:30:53:36:
81:22:f0:29:2e:b2:66:ae:84:74:ea:9e:85:54:74:
98:c9:61:15:a2:ce:02:ac:89:69:f1:3e:75:bc:b1:
f2:96:2f:05:fc:9a:4e:d1:f4:bd:db:af:e5:7e:01:
8c:3d:a0:a5:aa:c2:97:46:58:9e:2c:8c:10:42:02:
14:9d:77:dd:dd:dd:a4:22:86:13:c7:b4:6a:cd:1a:
c5:b2:77:e1:c3:ef:4d:49:29:e5:9e:bf:30:ea:48:
4e:5f:c1:f5:01:fd:69:c3:86:9c:9b:10:21:5f:28:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:BF:EC:48:A0:63:5A:CC:FF:B1:EB:01:10:84:D5:8E:7F:6A:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8c9416af-d52b-381f-9f3e-042f411072ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:18:55:72:bc:ca:e4:71:ae:a9:61:c9:a5:9a:fd:de:4f:0c:
10:f8:1d:92:0a:91:34:4c:08:69:c9:26:a1:7b:b7:28:a8:dd:
3b:9b:87:7d:c7:64:b1:40:86:7d:de:41:e8:f7:03:72:93:cf:
ad:79:da:83:52:02:26:e9:58:d5:a4:e2:91:d4:e8:2c:ac:8c:
b6:5c:e9:30:c0:6b:42:a1:b5:a3:0f:3f:05:35:d6:db:06:8b:
fc:f9:4e:e2:62:a7:76:b3:86:21:d7:c7:9d:05:97:8c:48:f6:
2c:f0:20:ae:4c:85:71:54:ba:62:11:5c:7b:31:61:fb:17:0f:
87:45:ca:6a:a4:b6:9a:8c:4f:89:e5:8c:90:d4:7d:50:6e:0b:
44:a2:50:36:ae:36:95:61:1d:1b:31:63:cf:0d:ca:40:f7:cd:
d2:bf:38:85:b2:67:21:3e:45:db:1e:cf:18:9c:87:04:35:c5:
e5:9c:f9:b7:29:ce:62:dd:7a:a3:30:d3:ab:df:f3:26:9f:fe:
c9:9c:34:c4:2e:c9:0e:39:3d:38:fc:c6:f5:fd:da:25:13:17:
5c:64:be:09:8a:44:84:fc:96:5c:1c:8a:ae:8d:55:96:70:1f:
ff:22:71:f1:23:da:b5:86:1b:b2:ea:40:3a:68:8f:66:92:8f:
43:d1:e3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:26 2025 by rpki-client