Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/341df8fe-5a18-36e1-8fb8-b8dddc15c885.roa
File: 341df8fe-5a18-36e1-8fb8-b8dddc15c885.roa (raw, json)
Hash identifier: 4EcBLkGGnaHBk7ptdLbbwYaxU8BNlz/no91Dt8DC7ZM=
Subject key identifier: 30:E4:CC:82:DE:FF:B7:1A:76:D2:DC:AD:52:20:36:EB:4C:93:8C:E3
Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial: 010D0C9F4328584891DB2D2C96B50D19A9625224
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/341df8fe-5a18-36e1-8fb8-b8dddc15c885.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 14956
IP address blocks: 107.189.15.0/24 maxlen: 24
107.189.16.0/21 maxlen: 24
107.189.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:2d:2c:96:b5:0d:19:a9:62:52:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=c2988110-8904-49a2-a8bb-1a01132683ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:df:4d:90:1d:6e:82:fe:e7:35:fc:aa:13:
dd:c1:e2:a4:5e:80:9f:db:67:4d:a6:d3:d7:24:6b:
39:75:96:80:77:84:f1:35:33:7d:ee:f6:5e:67:9e:
8d:58:24:1e:55:75:55:b8:b4:90:d5:5d:8b:07:92:
4e:92:bf:f8:9d:2e:0b:f1:ca:ad:28:5a:75:4c:c6:
32:da:99:6d:b0:44:6a:04:5b:b3:eb:37:54:ca:09:
06:38:b7:c7:d5:50:cd:26:99:c6:f8:07:0e:a3:43:
3e:17:3b:7b:d4:93:db:3e:36:3b:be:9a:8a:90:e8:
3b:72:01:d5:19:78:0a:97:b8:55:6c:cc:e5:cf:2b:
de:b5:4a:c2:16:aa:79:50:ce:f4:de:a0:03:ff:a4:
25:f9:a7:b7:41:33:0e:e8:01:54:03:e0:c9:93:33:
58:ae:25:5c:1a:63:35:5f:46:15:60:6f:c8:40:58:
19:e2:46:30:d1:2f:23:0c:d1:e4:03:11:b9:67:58:
ea:f2:c6:53:58:dc:05:a0:c9:02:8b:64:ed:b6:66:
5b:07:09:a9:b7:0e:c7:66:a8:ae:35:51:ef:b4:00:
1b:c0:4e:fa:67:5d:9f:53:d4:13:d0:1d:7f:cd:7e:
98:fc:a3:62:6c:66:e4:c0:3f:c1:c3:01:eb:10:3d:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E4:CC:82:DE:FF:B7:1A:76:D2:DC:AD:52:20:36:EB:4C:93:8C:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/341df8fe-5a18-36e1-8fb8-b8dddc15c885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
X509v3 Authority Key Identifier:
keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
sbgp-ipAddrBlock: critical
IPv4:
107.189.15.0-107.189.27.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:87:d4:b9:ab:17:d0:5a:8f:ba:35:c8:6d:92:7d:f0:5d:05:
6a:4c:9d:26:72:af:44:44:67:56:9a:25:f2:d8:11:58:79:d7:
11:4e:44:fa:d0:db:98:c4:52:a9:ca:cc:13:38:df:2f:9d:88:
c1:4c:8d:2e:39:b5:5b:22:7e:24:c5:60:cb:42:76:37:a1:8e:
65:df:e6:a0:7c:0c:52:18:06:c1:aa:b3:63:c2:aa:3a:a3:0d:
69:b7:a8:c8:b5:47:18:d5:a1:5e:cc:00:f6:ca:c2:17:a7:f7:
6f:78:87:b8:60:1d:d6:4c:48:bc:e7:71:4f:c8:e0:ac:67:c7:
d2:6b:b8:b1:67:97:5f:78:1b:ec:6c:1d:84:ab:ae:42:6f:c2:
9f:53:3b:bd:eb:15:b0:85:a5:d4:17:76:42:75:81:b1:36:75:
ed:dc:d6:4a:6e:04:d3:69:77:b2:9e:7d:28:8a:fc:30:82:ba:
59:d3:50:c1:5d:a5:bb:2b:2e:c8:5d:7a:92:42:fa:c6:1a:18:
e1:0a:d9:fa:c2:a6:3d:40:7e:33:f9:7b:41:02:2c:1c:bb:56:
be:15:7c:ef:d2:86:e4:de:38:90:f0:59:d0:cb:78:ed:44:5f:
2b:a3:50:2c:41:63:ca:5e:c8:37:89:13:68:da:0b:db:53:09:
96:a2:d6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:24 2025 by rpki-client