Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a6447836-c53d-3cdf-ab2a-c3db72297447.roa
File: a6447836-c53d-3cdf-ab2a-c3db72297447.roa (raw, json)
Hash identifier: 2DejWYsS28abczL0k3/92l98I18UGxiNfMhfg9MIsOw=
Subject key identifier: B2:B2:A4:E9:02:DC:DF:32:34:27:FB:0D:01:57:B2:4A:95:4A:A7:35
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285849350EA5CB5B7FB0DE9435BA00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a6447836-c53d-3cdf-ab2a-c3db72297447.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 398993
IP address blocks: 107.148.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a5:cb:5b:7f:b0:de:94:35:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=0040263d-2b26-4e88-8fc2-9fe09773c6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:95:41:45:41:35:03:3e:84:ae:5a:0a:8b:
ac:f9:db:7f:1a:8d:91:b5:06:87:3d:ce:59:be:5c:
d6:14:cf:78:c3:46:60:6e:ab:3d:4a:dc:d5:75:74:
d7:76:dc:11:fb:0f:3a:28:1c:ec:66:d9:52:4e:04:
5f:bf:25:ac:4e:70:b4:44:01:bc:cf:db:ce:73:83:
33:fa:01:f5:d5:b5:10:46:8c:3d:a2:50:b7:1f:64:
75:e8:79:46:8a:de:59:4f:5e:48:04:7a:fe:81:17:
bb:5b:67:c1:e7:1e:2c:dd:86:36:f4:dd:a0:b3:3d:
ad:fe:ef:a7:83:fc:e5:33:ff:d3:56:b2:2a:e9:e1:
d3:00:27:6d:a5:7f:c8:b4:52:27:82:63:d6:9f:b7:
34:58:0c:ba:22:64:20:1d:2d:26:ef:b7:dd:f2:6f:
11:ca:45:63:5f:a8:51:ed:3c:ba:a3:85:d5:50:29:
50:93:40:d2:d3:b9:fa:40:8c:03:f9:9b:7e:69:0a:
85:ed:54:1c:b5:95:43:d5:43:bf:3b:05:57:37:37:
7a:ed:89:b8:3b:a8:44:f2:0b:8b:21:9e:a9:7f:77:
12:a2:3f:e7:97:e2:66:8f:c3:6a:38:b9:47:86:a0:
df:ce:0c:ad:60:a5:2f:ab:f8:db:be:2c:62:49:91:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B2:A4:E9:02:DC:DF:32:34:27:FB:0D:01:57:B2:4A:95:4A:A7:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a6447836-c53d-3cdf-ab2a-c3db72297447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:de:97:ca:ef:72:0f:aa:99:e0:96:c6:78:0d:c7:9e:1f:4d:
6f:28:13:2d:6d:15:84:3b:89:3d:98:6f:14:19:66:d3:14:b2:
3e:d7:fe:fd:54:0d:38:70:8f:fa:1e:43:6a:32:5c:29:1d:ed:
e6:dc:89:e7:35:1c:82:a2:33:11:e2:d9:a0:33:79:05:08:1a:
c3:e6:96:9a:86:1c:b5:3f:ed:6c:18:85:96:06:ba:ff:81:7a:
55:23:71:36:0b:ed:c0:7c:5d:c3:a1:c7:89:53:13:2e:95:db:
07:8d:36:aa:69:57:7e:f9:95:17:4e:36:01:13:e9:16:d2:e2:
4e:a3:4f:5c:2c:f9:0b:4d:db:38:29:64:d5:43:fa:60:78:78:
36:ca:45:18:80:b4:ba:ae:1c:a8:89:1f:c7:0f:de:8b:e0:27:
67:69:cd:9c:3e:40:f4:b9:ac:4b:77:69:13:99:80:fa:ee:71:
69:c0:1d:30:96:cc:5e:6d:5e:22:01:72:08:24:dd:01:f8:c9:
5d:73:27:42:2a:4d:d9:ad:02:39:1e:a8:de:24:f8:d6:36:a2:
a0:16:be:ee:aa:48:16:28:18:65:86:3d:f2:13:32:80:aa:2d:
94:fc:57:de:0c:69:09:57:19:7f:96:e3:d5:a6:e0:8f:f7:dd:
75:c9:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:16 2025 by rpki-client