Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/04c5c32d-6c80-31df-a7f8-ae7b89e0b81f.roa
File: 04c5c32d-6c80-31df-a7f8-ae7b89e0b81f.roa (raw, json)
Hash identifier: RUxK24Id4L8qCevx9qTsWSHW/vA6ZkOJiNqiSdatUqA=
Subject key identifier: 4B:30:97:CE:EE:94:BD:05:E1:4E:F2:DC:06:53:40:4A:47:9E:CF:47
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858484D75939E785399CA0935B780
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/04c5c32d-6c80-31df-a7f8-ae7b89e0b81f.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 21859
IP address blocks: 107.151.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:93:9e:78:53:99:ca:09:35:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=79b139d3-1507-4db8-b0ef-90a2b3ea7cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:b7:bc:df:cf:f7:b6:f4:1e:f0:14:6f:b0:
3d:6b:1b:08:16:ca:cf:96:8b:bd:f5:b0:1a:85:4a:
e3:f5:31:f2:67:ee:eb:39:0d:cd:99:3b:69:3a:12:
4b:22:28:63:db:85:00:97:7f:79:37:58:5a:76:35:
5e:76:94:62:36:cc:28:7f:81:0b:91:35:eb:95:5d:
1c:b1:98:29:ff:ee:95:40:86:c4:4d:77:0f:92:cc:
10:e1:3a:d4:4a:8d:e3:88:70:86:dd:f4:3f:cc:1a:
b4:24:ae:07:6b:9c:ea:5e:c8:70:2c:8d:71:58:54:
4a:90:ca:fe:02:d1:1c:3c:1c:c1:d0:3d:cc:01:05:
a7:3e:94:c1:86:34:26:17:32:71:4f:a2:f8:f4:2f:
6e:25:f9:24:79:da:da:d4:18:bf:7d:2d:61:2c:ac:
2f:89:47:f4:c1:39:76:00:47:96:d2:a8:46:e0:8d:
2a:34:02:ce:05:53:3a:2c:b3:52:7b:d2:24:8f:08:
f0:77:09:4c:82:28:6a:40:2a:6c:61:df:7e:03:b9:
8a:9a:ce:59:f1:2e:9b:3c:7c:ce:2d:85:a6:cb:96:
ad:d2:d2:14:2e:62:ad:a2:d3:99:89:47:9f:6c:bb:
02:7a:f1:a9:90:48:66:56:3d:57:c5:de:f9:82:0e:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:30:97:CE:EE:94:BD:05:E1:4E:F2:DC:06:53:40:4A:47:9E:CF:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/04c5c32d-6c80-31df-a7f8-ae7b89e0b81f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:3b:51:20:7d:18:cc:e1:89:55:e2:48:cb:3c:97:95:63:73:
9f:7e:94:12:55:c2:5f:3b:0f:4e:76:24:8a:3e:bb:be:df:23:
f4:39:e5:cc:68:a4:88:98:e5:71:35:05:82:5a:a7:f7:8b:0a:
7e:76:c6:ef:d8:23:b6:ba:8a:9a:7f:f4:ad:9a:8a:a3:ca:af:
5a:eb:8b:2e:55:ee:f8:8b:29:1a:44:44:02:f9:d8:2c:5c:d5:
56:4f:ef:4b:35:91:52:03:be:98:b3:39:0c:e3:68:da:75:17:
e9:43:76:6c:36:a3:ce:98:cc:fe:1d:01:7f:be:0f:93:ff:95:
29:74:5b:e0:8e:d9:1b:fb:44:dc:eb:6c:50:7c:95:26:79:08:
06:94:f2:06:7e:20:3f:4b:18:a9:a6:4d:5c:3b:66:06:78:61:
cb:7f:16:72:ee:fa:58:a0:e2:7b:8c:eb:ec:cf:19:54:85:d1:
e9:55:80:ae:d2:14:c0:5e:06:d2:59:94:bc:ef:97:61:73:5f:
ea:72:28:27:e1:8e:19:2f:51:08:8a:d9:63:42:58:19:8c:9e:
d5:b9:e0:b0:11:29:ba:5c:8c:4d:97:3f:b4:f8:47:4e:0f:5f:
ce:a3:bf:a7:06:41:20:37:06:db:7f:0a:8d:14:a5:43:00:90:
fe:23:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:13 2025 by rpki-client