Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7cc8eb1-fb18-374a-936c-09033e157e0f.roa
File: a7cc8eb1-fb18-374a-936c-09033e157e0f.roa (raw, json)
Hash identifier: rAypKPNB4EvP0SY8PDJixp37cpqJnuR5KkcPLg0VW/Q=
Subject key identifier: 62:F2:E9:76:EF:F9:67:27:59:0C:2A:3C:59:99:88:49:AC:81:8A:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1170D1A3DDF190F291E5B7
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7cc8eb1-fb18-374a-936c-09033e157e0f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 107.3.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:70:d1:a3:dd:f1:90:f2:91:e5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=139dc654-1973-47bb-89bd-0efbba74c96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:df:90:f3:de:44:2d:74:f4:ac:15:6e:f6:
be:4f:87:3d:31:47:e4:78:0d:61:31:57:ce:ef:34:
56:02:1a:e5:85:0a:f4:b0:32:be:30:c8:6c:2d:b2:
d7:08:79:77:6b:93:99:67:8b:18:8d:f5:79:05:5f:
2d:8c:a9:d6:24:1f:67:33:f5:5a:3f:51:5b:62:21:
68:40:92:a9:cd:be:9d:54:41:5a:59:ed:4a:ed:e0:
92:ea:34:6e:af:f4:cb:93:2a:ba:2d:f4:8c:03:7a:
f0:21:5a:ac:ec:67:14:c0:13:19:5d:a3:1c:c2:7c:
de:7c:11:db:a0:12:f4:d0:e4:06:bd:d5:43:ab:f6:
ea:25:56:12:67:72:c0:68:a2:7e:23:51:24:99:cc:
31:b0:dc:f8:8c:40:14:ce:56:dd:1e:87:d1:86:d3:
3e:52:dd:7a:74:ce:c8:63:90:49:34:7a:72:10:78:
ef:10:d0:c9:2b:70:4a:5f:15:e9:d6:05:2d:cf:04:
42:03:f2:7e:01:be:96:7c:50:8b:77:09:74:28:10:
fe:7b:b8:09:47:a6:bd:70:99:de:54:24:53:30:1c:
d6:db:57:93:9f:c9:65:28:7e:23:26:4f:7f:77:55:
36:fd:82:db:3a:da:56:a0:b4:ef:03:1e:11:88:7f:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:E9:76:EF:F9:67:27:59:0C:2A:3C:59:99:88:49:AC:81:8A:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7cc8eb1-fb18-374a-936c-09033e157e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.3.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:f9:5a:61:4d:79:c4:aa:84:95:99:55:1b:67:92:c0:e0:28:
be:8b:88:32:ba:a9:dc:6c:96:b0:0b:e1:52:f7:7e:f2:b0:6a:
07:6e:2d:34:31:60:b5:76:23:9b:6f:f7:8a:f8:b0:c4:07:0f:
12:ec:b8:24:57:44:3d:9a:37:62:57:2d:e1:48:f3:de:ea:0c:
70:20:22:9b:47:7d:55:88:27:c9:f4:64:74:58:c2:68:03:46:
97:3d:a2:d6:8b:35:f5:f2:27:8a:f5:0b:6a:88:50:c3:f5:ff:
e1:64:1c:40:66:fc:1f:ee:eb:53:09:da:20:70:22:6a:7f:43:
0e:f0:67:4c:e0:c5:1b:7d:b3:d2:9c:6a:4d:7f:8f:27:64:05:
ab:1b:9b:0c:ad:e1:55:59:00:61:9b:f1:f9:00:8d:5b:68:44:
1a:4d:32:82:6b:39:0c:28:ab:4a:0b:c8:45:d7:f4:dc:16:f0:
b4:8c:b8:33:24:74:c4:3d:1c:70:af:d4:b4:c6:39:98:63:cf:
a6:8c:d8:e4:07:57:ef:a0:86:1b:25:8e:40:92:e5:99:54:d0:
ef:6f:98:5b:49:44:1f:69:73:ac:1d:89:26:e6:9e:96:f9:87:
a8:a2:0f:b5:ec:d4:aa:45:3b:ce:95:60:7f:ab:27:96:04:f2:
11:99:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:18 2025 by rpki-client