Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/60623203-daff-3e15-a5ec-65fb060c99f7.roa
File: 60623203-daff-3e15-a5ec-65fb060c99f7.roa (raw, json)
Hash identifier: SpNSX64a6XpKfXoCC9ThGnEDIOYzOOg29x5sb+ORrLc=
Subject key identifier: BD:D9:A9:DF:8F:29:4C:3D:AE:2A:B8:A3:AC:03:52:C7:CE:B4:E2:EE
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858482AD3C93881C06F0154F8F900
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/60623203-daff-3e15-a5ec-65fb060c99f7.roa
Signing time: Wed 11 Dec 2024 04:17:34 +0000
ROA not before: Wed 11 Dec 2024 04:17:34 +0000
ROA not after: Tue 11 Mar 2025 03:17:34 +0000
asID: 137899
IP address blocks: 107.151.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:d3:c9:38:81:c0:6f:01:54:f8:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 11 04:17:34 2024 GMT
Not After : Mar 11 03:17:34 2025 GMT
Subject: CN=b28033f1-f6fe-44c9-95ab-73b4182b1e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:43:64:70:79:83:5f:f8:c1:fd:ed:29:33:
20:0c:a8:1d:91:64:aa:cd:48:43:7f:83:54:0f:3d:
97:78:3f:e0:58:a5:0a:08:92:84:7e:0b:ea:20:aa:
15:1c:26:90:20:06:f6:b5:97:18:f6:6b:ee:7e:02:
b3:bb:97:c2:39:72:88:c1:f0:ba:47:d6:53:08:ac:
13:df:64:ce:68:47:ec:1d:55:37:ec:2f:af:9d:aa:
70:7c:a0:a8:76:fb:3e:17:65:ab:86:5f:f3:e8:b4:
84:d2:a1:e2:34:09:ad:d7:b3:9b:c0:1c:d5:82:08:
08:b4:be:29:6e:26:e4:3f:92:54:fe:da:51:9d:49:
3d:77:74:08:0d:bc:1b:31:2f:9a:94:ef:0a:9c:44:
68:2f:b0:5c:fa:a5:f3:19:a4:46:74:51:3a:53:c4:
ab:52:ad:07:eb:7f:c4:83:cc:4d:24:63:d2:38:71:
0a:48:6d:9e:ee:fd:7f:15:cd:af:79:e7:25:b4:07:
97:7b:9e:28:76:90:38:a5:ec:8c:4a:d2:a3:ab:ed:
74:70:96:5a:cf:00:60:4f:b0:e6:6c:91:f1:5d:ea:
70:a9:90:2b:52:bf:d1:09:e7:64:79:1b:30:f3:aa:
97:53:a2:bf:ea:a5:a1:76:52:d6:88:44:5b:8e:a8:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D9:A9:DF:8F:29:4C:3D:AE:2A:B8:A3:AC:03:52:C7:CE:B4:E2:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/60623203-daff-3e15-a5ec-65fb060c99f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:ea:9e:8c:ac:04:94:e4:ab:d9:31:52:a5:8d:60:d1:83:fb:
8e:f8:02:06:79:4a:11:ca:d5:5a:c9:95:2a:db:6f:e1:e3:aa:
cd:4c:d6:fa:d0:16:34:c0:2b:67:46:da:40:b4:00:15:8a:ea:
21:0e:c3:3b:a1:c9:51:e5:64:d7:73:d6:de:89:5f:f0:dc:9a:
f6:78:eb:73:cb:a7:e4:89:4c:e9:9e:bf:55:d2:dc:18:03:eb:
25:7d:39:f3:99:99:fa:04:3c:e9:47:e9:fe:ed:35:db:e2:74:
d2:b3:99:55:db:53:cd:c1:04:c3:47:cb:04:fd:ea:0c:54:81:
40:b8:b0:ea:69:36:b9:2e:77:1c:1d:7b:af:76:59:0e:5f:a2:
3f:7a:29:b9:bf:1f:ad:d6:b9:ba:6d:0d:f5:b7:d2:bd:d9:8c:
be:bb:ff:c7:20:22:c6:7f:57:38:4a:fb:07:be:3a:da:c6:97:
77:55:61:5e:8f:6f:7e:08:e8:b3:45:d0:bd:49:fc:fd:3f:80:
f1:1c:7f:b9:5f:40:af:83:af:12:01:48:ce:73:30:52:29:15:
6c:82:ca:87:08:5b:47:50:7c:e4:8d:09:61:df:6a:f2:cc:e7:
ab:00:26:7f:67:cc:f1:93:ea:d8:ee:ee:ea:46:08:1a:ab:a1:
a9:4b:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:02 2025 by rpki-client