Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d6f0c9d8-1869-395b-9db3-cf23cb548961.roa
File: d6f0c9d8-1869-395b-9db3-cf23cb548961.roa (raw, json)
Hash identifier: MaG3WUtmPxjJ2fbTwY/dG9ULyrLYgAAFp4+/t5ETgVk=
Subject key identifier: 47:D2:CE:97:FB:F6:E1:BB:00:62:46:6C:19:0B:18:0E:D4:6D:E7:AE
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848A29B4EB5A06280A699054280
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d6f0c9d8-1869-395b-9db3-cf23cb548961.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 398478
IP address blocks: 107.148.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:4e:b5:a0:62:80:a6:99:05:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=27e14264-18da-4800-be70-deceea168400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:de:25:7b:70:76:ef:42:e5:9d:fd:9d:82:
0f:64:bb:ef:ff:e3:2d:07:fc:1a:de:25:8c:dd:10:
b0:bd:8e:31:bd:a6:a3:9a:b4:d9:ed:04:88:2c:90:
eb:02:eb:a9:a8:d0:8d:cd:9d:e9:c2:9b:42:f5:ab:
ba:2c:a8:83:de:76:2b:d7:bf:c7:da:ca:77:45:cb:
0d:a8:07:7a:ec:25:32:7e:76:ae:dc:7e:05:f7:48:
33:41:90:90:cf:83:ad:ed:1e:4a:f1:6f:8f:c1:96:
37:38:8e:e1:1e:98:6e:0e:04:44:cd:77:c6:31:64:
e5:95:b4:c2:41:17:77:8b:cc:41:52:5d:f2:ea:76:
f6:37:73:00:48:e5:dd:6a:89:06:e1:06:18:c5:19:
85:19:1f:9c:1c:d9:b1:47:f1:28:8d:41:8a:60:4f:
2d:7c:30:05:7f:59:b4:e3:51:aa:05:af:16:d9:ce:
5e:d7:98:fd:ea:77:4e:c5:94:da:85:f7:2e:aa:8a:
7e:61:d3:d8:0e:0e:09:52:36:bf:fa:e6:b3:e6:7b:
94:c5:84:32:07:02:aa:37:b6:5d:ca:9d:73:b8:15:
4a:de:87:a5:f2:c6:1f:8d:97:9a:f6:fc:62:67:90:
69:d9:68:ca:e1:c4:25:f3:50:19:3e:c7:8c:f6:60:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D2:CE:97:FB:F6:E1:BB:00:62:46:6C:19:0B:18:0E:D4:6D:E7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d6f0c9d8-1869-395b-9db3-cf23cb548961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.46.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:1d:18:44:57:95:0d:1b:b3:1e:ae:5c:58:a6:31:8e:c3:d1:
cd:f7:e6:c7:53:94:d6:e8:a1:63:9b:25:77:28:7f:9b:e1:7e:
eb:98:38:73:87:b7:85:d5:f7:3c:84:7a:80:4b:16:82:01:82:
cd:03:14:86:d9:77:2e:48:b6:9d:64:3c:e0:b7:cd:fc:55:9b:
f4:56:4b:73:be:8a:4d:4a:49:78:9d:34:29:03:6c:2b:d7:26:
fc:da:f6:67:e4:85:39:6f:c0:a0:3d:4b:62:a8:09:20:c1:eb:
0a:c7:bc:89:8d:74:2e:40:b6:a5:77:b5:60:99:10:fd:62:3d:
d7:83:44:5c:ae:a8:fb:2a:64:98:fb:e5:2f:a2:ff:36:c4:7d:
6e:e1:c4:54:7c:5b:65:11:ec:3e:13:d0:eb:83:72:65:f0:b0:
c6:8d:a2:9e:97:69:0b:37:a2:87:1c:d4:78:ad:7d:ce:37:25:
0d:a7:94:3d:c8:bc:e3:7e:31:48:bf:6f:6e:93:f6:5c:a0:a0:
f1:76:1c:50:63:fe:13:74:f7:51:2d:e7:9e:cd:2b:52:62:22:
dd:d8:ff:2f:2d:ab:6c:c1:02:fa:a4:71:2d:6a:a7:18:ec:39:
46:bc:42:3a:6d:d5:a9:81:06:bd:ee:0d:33:6d:0f:be:22:68:
8f:d3:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:33 2025 by rpki-client