Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80f2e38a-b5df-3a9c-8f39-9e3ae91c0915.roa
File: 80f2e38a-b5df-3a9c-8f39-9e3ae91c0915.roa (raw, json)
Hash identifier: t1biRrxSbk70Pw38fy3mcb1nT2DES/D1XDoyMD1K9YA=
Subject key identifier: DA:99:BD:CF:FB:43:74:23:B3:FA:64:AA:5C:2B:54:E0:7B:E9:50:E8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143EF1C78574A314E3539D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80f2e38a-b5df-3a9c-8f39-9e3ae91c0915.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 107.5.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:f1:c7:85:74:a3:14:e3:53:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=fceab25f-968c-42bd-a2bf-1cd23496a2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:ad:03:8f:b1:2b:d6:c6:74:57:dd:54:e4:
7f:af:17:8f:23:18:7e:7a:bc:ed:a9:67:6d:73:61:
d5:51:04:56:76:86:5b:c8:34:e2:5d:13:3d:c4:c3:
a0:da:9f:df:f3:26:a4:af:b6:53:3b:ab:11:ea:8c:
d6:f5:03:76:6b:ea:9c:a1:d1:1c:47:03:ae:d8:93:
a0:03:2a:1e:80:c4:5e:03:64:bc:6b:3d:19:0e:fb:
ff:96:34:65:cf:58:99:a6:cd:aa:b3:f0:f3:c0:ad:
0e:f1:12:5b:e8:e9:f3:d5:fd:67:71:91:19:98:94:
91:6c:b7:02:08:78:3b:b1:1d:49:ba:59:7c:8c:05:
02:37:04:10:70:9a:34:f0:ec:08:b0:1a:e2:7e:d3:
c3:4d:7c:c3:a3:ed:85:84:c8:2a:c8:be:37:34:7e:
75:d0:1c:e7:37:f9:a9:ed:55:a1:ae:4a:74:ca:96:
27:23:37:aa:91:c7:87:3f:d1:9c:a6:c3:7a:ee:9b:
2e:00:19:84:2b:3e:3a:03:05:05:cc:04:e8:25:67:
a5:0b:5d:ad:fa:8b:51:1e:16:fa:02:9f:28:52:59:
b1:09:5e:a3:18:ef:b3:7a:b0:19:a9:d6:dc:54:2d:
00:e3:3a:cf:cd:49:4f:ab:b4:ca:22:78:e9:fa:7f:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:BD:CF:FB:43:74:23:B3:FA:64:AA:5C:2B:54:E0:7B:E9:50:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80f2e38a-b5df-3a9c-8f39-9e3ae91c0915.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.5.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:a9:d6:04:26:8e:85:66:57:37:bb:e4:04:0e:1c:6b:f6:b9:
e3:2e:0c:04:1d:0d:c9:ab:4f:f4:69:f0:c5:c5:25:98:86:ca:
b0:7c:4b:24:56:10:dd:94:df:60:8d:87:08:2f:3d:d0:8d:70:
06:83:45:89:7a:f9:49:ca:bf:82:c4:f9:c2:cd:c2:35:fe:bb:
22:97:a1:75:19:71:9f:1e:fe:ab:b6:95:c1:b2:8c:47:12:57:
f3:67:79:31:f2:ad:b2:0c:51:6c:b6:cc:73:b3:dc:a6:53:61:
76:59:b3:ab:45:5e:ce:6e:2c:04:3b:28:ea:f6:b2:f1:97:c9:
4e:d4:a1:41:62:41:d7:ba:1b:83:68:1a:fb:a5:a8:21:e6:26:
0a:6f:06:98:95:8a:e0:d3:cf:61:84:b8:da:7f:3b:aa:a8:40:
f9:d2:62:be:a2:45:b5:d7:62:ab:a1:3d:7a:c1:fc:ee:38:f0:
30:2a:dc:dd:90:9b:e0:2e:09:a5:11:4f:40:7d:f8:7f:f4:b4:
23:58:8e:42:40:ab:23:c6:93:44:17:9f:32:20:97:0b:16:e1:
15:37:4e:0e:f2:09:73:dd:97:b5:31:7a:0c:91:61:35:60:90:
c3:bf:7f:08:0c:2b:b8:98:aa:3d:c4:0d:7f:de:0f:7e:9f:bc:
c3:3a:b5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:48 2025 by rpki-client