Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa
File: b0d4a783-aede-347d-a376-96810f016fda.roa (raw, json)
Hash identifier: eXQy+DCPku5Kid0X03W9jxrk0ZGntFLjcKxBQ8it4Q4=
Subject key identifier: F5:EE:A3:9B:CE:0E:AE:90:AE:89:8F:BC:8F:52:46:7E:E0:45:BA:D6
Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial: 010D0C9F432858487FB5DA15BFB8AF2425BC6F80
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 19551
IP address blocks: 107.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:da:15:bf:b8:af:24:25:bc:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=5a920803-1c22-404c-afa7-c6b5e57786bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:a5:60:09:8a:2e:eb:da:8d:de:7e:2c:ec:
66:e4:50:91:d2:56:d8:d2:c0:af:a1:74:6e:14:ee:
b1:86:b4:63:af:62:ee:97:9e:5b:94:2e:38:1d:87:
61:b6:dd:c9:f9:3a:66:31:ef:59:9d:ee:39:e4:b1:
2c:98:da:8c:00:da:93:bc:09:f5:b3:a0:c5:bb:ea:
3f:44:52:1e:00:9c:bb:50:29:cd:0d:38:08:dc:48:
ba:f4:e9:f9:90:30:64:bb:07:b2:69:1e:65:b4:a4:
4f:a5:a8:8c:e1:0e:7a:ca:57:b5:c0:45:d3:36:23:
68:24:52:fe:8f:e3:3b:ee:1e:1a:59:ad:00:cb:c5:
07:ff:54:8a:01:4f:57:6c:c8:79:02:b5:8b:4c:2b:
69:b7:9b:32:0a:6c:bc:e4:a7:17:55:1a:ea:bf:86:
a6:cc:ed:12:55:59:3f:b7:00:94:1a:20:00:9a:e9:
46:e0:92:f4:00:7b:af:bb:b7:23:0d:67:ae:62:59:
bc:6a:8f:13:b6:0d:21:ad:33:4b:7d:19:70:b4:05:
03:41:3d:b1:60:78:34:84:32:49:dc:70:b3:b5:a5:
15:0b:58:c9:45:09:84:81:27:a3:c0:38:95:ef:5f:
b2:5a:84:aa:09:e8:46:51:6a:8c:da:29:d5:21:59:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EE:A3:9B:CE:0E:AE:90:AE:89:8F:BC:8F:52:46:7E:E0:45:BA:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
X509v3 Authority Key Identifier:
keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
sbgp-ipAddrBlock: critical
IPv4:
107.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:46:10:d2:30:d7:83:12:29:89:0b:5a:dc:12:b0:39:f4:5f:
0c:c0:79:36:7c:c8:3f:73:ad:9c:70:d2:40:35:a7:23:8f:1d:
02:18:1a:22:40:ff:ae:0e:0b:06:6c:f1:39:92:a3:ca:09:b9:
52:95:ff:10:a8:cf:ee:e2:f6:c7:68:b5:67:2d:3a:84:60:ad:
fb:2a:4e:f5:3f:52:ce:5a:f5:e8:35:c4:52:77:9c:ff:c2:df:
bb:a4:77:4a:c6:63:52:43:03:25:74:ac:12:70:64:e9:48:21:
49:c6:e5:f5:3d:1d:13:3d:32:b6:6e:0c:7c:bf:8b:80:bd:1f:
5c:d1:36:31:cc:21:f7:93:8a:7a:de:73:42:55:56:58:ed:d5:
96:9a:01:c2:46:d5:5e:37:1e:d8:f4:dc:ef:d3:9d:a8:59:69:
6f:c9:a4:2a:c1:05:a3:13:ef:06:7c:6d:92:88:55:64:c0:be:
54:ec:ed:23:dc:53:bc:02:05:21:7e:a9:9b:6f:23:31:4c:61:
7b:a1:c5:31:25:35:88:43:3e:11:97:a8:6f:f8:77:61:f4:57:
1d:8f:9b:18:bc:47:95:3d:74:86:e2:e7:31:b1:43:67:7c:dc:
44:58:5a:ef:99:4e:d6:d9:4d:48:c7:b9:75:03:e4:cc:9a:bf:
1d:ed:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:36 2025 by rpki-client