Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa
File: 0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa (raw, json)
Hash identifier: GQzWXccRxTtVUwawlZL4XHunJQBavUD1SHneCSBaYaU=
Subject key identifier: 64:32:84:1E:62:E7:38:97:F1:A6:7B:D3:BE:A0:D0:E8:DC:5C:1D:6D
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848159FF649F85937D25515A880
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 142032
IP address blocks: 107.151.240.0/23 maxlen: 24
198.44.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f6:49:f8:59:37:d2:55:15:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=86cccec1-de9f-4b8d-b989-785ead7bcbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:64:f4:fe:76:89:91:e6:18:ce:6b:fe:2b:
37:66:be:5c:ab:15:12:06:be:d6:6f:b3:70:d5:46:
c0:56:f5:6f:de:ff:b7:c0:c5:5f:93:a5:02:ba:ab:
8c:7f:e3:93:86:1c:88:69:fd:60:c1:0f:1e:79:c1:
8d:6c:c0:b7:a3:80:95:f2:88:4d:ba:0e:93:b2:79:
fd:6c:b4:66:45:1c:71:0b:aa:dd:ce:27:ea:13:44:
21:1e:3c:9e:42:49:b0:d8:28:ea:ea:8d:52:a9:08:
29:93:59:c0:87:f1:0d:d7:0b:93:c4:de:8e:5c:2a:
1d:7f:59:f8:d8:04:4f:9d:a9:81:a8:e0:d6:7e:7c:
2b:04:f8:c1:8a:f3:7d:3e:fb:84:f0:9a:e3:9c:c2:
be:1e:33:89:4b:f2:5a:a7:c5:39:53:b1:10:80:66:
15:8f:75:dc:93:41:4f:0f:83:77:52:1b:b4:fc:58:
87:3e:b8:ff:bf:4d:cc:9c:b6:59:a2:a4:38:9f:a4:
e2:97:fa:1c:1b:59:22:50:67:64:f4:c6:4a:c2:74:
d4:fb:29:ae:61:31:58:63:75:52:03:eb:b0:18:b5:
c9:84:3e:a2:14:7e:a3:ec:6a:34:32:c8:80:cd:84:
06:b1:e7:cb:ef:09:15:c9:aa:95:10:f1:3b:1f:c8:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:32:84:1E:62:E7:38:97:F1:A6:7B:D3:BE:A0:D0:E8:DC:5C:1D:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0f9c707d-bdcb-3c20-9bc0-7b52f6d6f30a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.240.0/23
198.44.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:c4:9c:d6:4e:31:e8:b1:b3:ed:a4:56:1c:69:ea:76:49:c1:
55:35:f9:84:9d:1e:f8:d0:98:3d:de:f8:d8:0c:8d:a1:a0:be:
64:1a:d2:fa:b9:40:f0:1b:3d:3d:2e:50:dc:87:97:84:bd:91:
4f:bb:5b:11:2c:de:6c:c7:f5:61:44:25:04:af:18:27:72:4e:
b8:fb:a5:04:84:85:03:83:f2:e2:94:ce:7f:e3:0a:66:73:cf:
9c:d8:20:f1:8c:d6:f3:92:79:72:94:7b:09:4b:e7:47:73:10:
ca:f6:ce:c2:17:e2:1b:71:b7:c5:66:69:08:d6:1f:ff:cd:5d:
4e:81:65:68:37:b7:c3:76:65:c0:59:b1:79:77:e7:8b:3c:0b:
63:05:19:81:2a:95:9a:d3:24:e8:27:41:32:be:3e:06:a1:32:
19:44:cc:5b:26:1f:3e:93:9d:0b:1d:1d:df:07:5b:80:af:16:
4e:3e:65:29:6b:93:0e:c0:93:04:21:c4:61:dd:af:9b:ac:ed:
3d:90:a3:ca:9c:7b:46:65:2e:a7:1f:b4:6b:dd:34:62:f5:99:
d3:90:16:6d:72:49:27:19:7c:6a:69:73:33:dc:72:fd:7b:e0:
e8:75:7e:b4:a7:11:64:61:9e:00:88:82:a4:95:a1:e0:dd:00:
8a:a9:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:02:03 2025 by rpki-client