Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa
File: 0bb8b992-e69b-3f68-9228-3d2a8870d832.roa (raw, json)
Hash identifier: CvLcWlYhfhxaZptTuzGzXoXcP28FAH+hF7FwtqkMLa4=
Subject key identifier: 6F:B5:D8:2A:FF:46:02:E8:F5:EF:3E:2B:D6:F0:32:59:52:07:49:33
Certificate issuer: /CN=d8e4c881-0377-49f5-9af5-410d30fb5527
Certificate serial: 010D0C9F4328584943F25B49D302CCAD18A94920
Authority key identifier: F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa
Signing time: Fri 21 Mar 2025 21:01:18 +0000
ROA not before: Fri 21 Mar 2025 21:01:18 +0000
ROA not after: Thu 19 Jun 2025 21:01:18 +0000
asID: 203
IP address blocks: 107.191.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:f2:5b:49:d3:02:cc:ad:18:a9:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8e4c881-0377-49f5-9af5-410d30fb5527
Validity
Not Before: Mar 21 21:01:18 2025 GMT
Not After : Jun 19 21:01:18 2025 GMT
Subject: CN=f15ee8fa-d363-49fc-94da-c5be09d6b239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:2a:0f:0e:d5:97:04:f8:a0:08:c6:5b:df:
7c:58:28:c2:39:14:68:b5:35:39:79:a7:04:4e:b8:
5e:c5:0f:95:09:f1:f6:6e:49:2f:03:d9:e3:8b:aa:
dc:14:f9:cf:7d:84:8e:3e:7a:18:b1:17:9b:2b:d0:
7a:57:56:19:33:15:e9:bb:4e:b6:7f:6b:6d:45:58:
88:a5:4c:f6:b7:25:5e:f2:c3:8a:ca:30:71:74:36:
d0:6c:74:87:b9:87:20:fc:89:d5:4c:b0:16:f1:7e:
f1:b4:8a:32:6a:eb:80:dd:31:58:f9:ef:73:53:39:
4d:c6:81:50:68:30:6f:e4:3a:59:20:c8:74:af:0e:
fa:fa:b4:5d:cc:89:9d:59:dd:63:06:f6:2c:b3:d0:
5a:1b:9f:1e:a0:7b:4d:36:cd:be:6c:20:52:34:d0:
61:14:b2:d2:0b:dd:80:73:eb:83:3f:51:f1:a9:56:
e9:e2:cb:f7:2a:eb:ab:ab:74:73:1d:2e:f4:2f:46:
47:4b:3f:8e:c7:8d:11:bd:ef:ac:60:22:1b:6f:ea:
31:6f:2f:6e:22:e4:a4:45:ec:33:45:31:b6:69:e3:
34:7b:3a:e6:5b:ed:ad:6e:ed:b8:0f:3b:d0:82:b0:
9e:cf:e6:75:2e:27:f2:d5:67:1c:1b:c2:63:90:a1:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B5:D8:2A:FF:46:02:E8:F5:EF:3E:2B:D6:F0:32:59:52:07:49:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl
X509v3 Authority Key Identifier:
keyid:F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer
sbgp-ipAddrBlock: critical
IPv4:
107.191.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:4b:95:ea:56:21:b8:9d:ce:b2:e9:14:96:cc:db:00:5f:6c:
1c:6c:91:07:39:09:3e:2c:1c:c8:64:6c:9f:cc:06:be:b6:ee:
86:67:04:11:f6:b5:d9:e0:f4:e4:c7:f7:9c:d3:19:7b:a1:d1:
53:5c:2c:4c:c7:ff:3c:b4:62:5c:c2:d7:1f:99:76:86:60:f6:
df:2f:2f:4e:d4:f1:06:dc:c5:64:ad:f8:9a:26:27:82:2b:77:
59:df:9c:7f:8f:e9:f8:5d:e5:e1:3c:23:e4:cd:07:e3:3c:a8:
b2:8f:81:ea:cf:1b:b2:57:26:bc:7d:af:f9:b9:34:db:f7:68:
21:12:d4:f4:88:78:f7:3d:cb:2c:ee:97:69:ad:38:01:62:b0:
ab:80:06:77:c5:c3:18:3b:45:59:39:f5:65:ef:00:0e:1b:39:
a0:ca:a4:14:c3:77:09:69:48:11:2e:bc:05:7f:39:76:f8:c2:
eb:cc:1d:aa:d6:11:3a:83:de:4a:14:6e:82:b9:9f:20:aa:80:
36:88:68:4f:08:14:85:b4:d5:62:3d:10:fd:40:c4:c0:68:a5:
3a:f5:59:6e:1f:58:4c:28:cc:a4:b3:a9:42:85:67:c4:88:7f:
45:fa:53:ff:98:f2:a1:58:66:6f:69:04:02:6c:06:bd:68:09:
a1:84:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:11 2025 by rpki-client