Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ac552a2b-d615-3a4e-8628-4ce5f40e3b95.roa
File: ac552a2b-d615-3a4e-8628-4ce5f40e3b95.roa (raw, json)
Hash identifier: j+dx03a2hCHlishfq47JwTUoiCLQDpBGjsgUWkSp/iE=
Subject key identifier: 36:4A:A8:F2:FC:65:73:FC:DB:B5:CF:2F:F0:42:21:94:89:C7:76:E0
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858482B1FE6FD33AA5D10B2BA2D00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ac552a2b-d615-3a4e-8628-4ce5f40e3b95.roa
Signing time: Wed 11 Dec 2024 06:50:56 +0000
ROA not before: Wed 11 Dec 2024 06:50:56 +0000
ROA not after: Tue 11 Mar 2025 05:50:56 +0000
asID: 142032
IP address blocks: 107.151.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:1f:e6:fd:33:aa:5d:10:b2:ba:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 11 06:50:56 2024 GMT
Not After : Mar 11 05:50:56 2025 GMT
Subject: CN=050daae0-8d35-4869-a364-02119dd36f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:74:3e:71:de:97:11:35:6e:c4:6d:d2:6d:
11:d9:72:c1:a1:af:e2:54:11:d6:bb:47:24:8d:9f:
86:68:23:66:6d:2b:0d:10:3c:e2:35:e5:1a:e3:82:
9f:a3:5f:02:da:1a:69:f4:7b:6f:1a:a0:b8:77:4d:
cc:ec:21:68:47:ba:3a:1a:75:10:88:69:51:45:62:
6f:dd:82:63:d0:89:a0:4c:cb:d4:4a:a3:a9:70:10:
36:3d:bd:4c:38:73:32:00:cf:01:09:43:76:9a:9f:
07:50:df:bb:ae:61:ac:2f:e8:99:8f:b7:fb:f6:3d:
63:94:b1:46:40:a7:c8:97:7d:1a:8f:85:81:e9:21:
d3:59:95:0c:c4:28:4e:24:bd:fd:bd:60:e8:e5:0f:
16:f6:1a:90:09:4d:5b:ff:ba:e0:1f:6b:b3:44:85:
ae:7d:8d:f1:ac:5f:35:26:59:da:a7:7c:4d:0b:35:
b1:5a:52:a4:81:c5:04:a1:da:30:65:e2:01:51:00:
25:55:e2:0f:fb:9a:25:d7:79:ea:24:6a:8d:16:81:
a7:d8:19:33:8c:95:99:14:ea:17:e1:1f:12:da:a5:
c0:87:64:fe:a9:4a:be:3c:d4:93:84:d0:6a:de:d2:
a2:9d:c8:d9:f9:a6:39:b4:b0:20:03:2d:8b:ad:98:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4A:A8:F2:FC:65:73:FC:DB:B5:CF:2F:F0:42:21:94:89:C7:76:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ac552a2b-d615-3a4e-8628-4ce5f40e3b95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:15:9d:53:a7:9e:8b:0a:9f:75:35:f3:c4:b6:62:95:4d:a1:
1c:d4:8a:40:a8:5d:b7:2a:43:dd:53:58:24:13:3d:a5:16:c8:
26:99:8e:d2:91:2f:24:a6:a0:53:7a:83:e7:0c:7f:8f:08:b7:
df:a3:61:20:bc:d8:29:51:d3:89:fe:2e:06:b9:7a:d6:8e:68:
a5:8e:7e:b7:41:e9:f1:e2:9a:fb:28:cb:ad:a6:28:59:b2:7e:
e0:2d:39:c1:26:f0:3a:bd:3b:f5:d6:4f:00:58:9c:ff:a7:06:
db:65:bf:46:fc:47:ce:09:47:90:6b:00:38:72:5c:c7:da:5c:
fe:ec:71:77:4a:bc:a7:a5:9c:49:d9:f3:1d:f9:65:7e:6d:ef:
f9:15:7d:15:f4:cc:87:1b:ee:4c:ea:a2:5e:1d:e9:26:1d:94:
77:af:d4:ce:17:eb:53:91:39:f9:77:32:71:b5:4b:7f:d9:5b:
50:5a:4b:3e:93:40:54:ca:19:a4:00:2a:cb:45:cf:18:0b:d7:
ca:3d:ac:4b:dd:a6:e7:80:b9:6e:89:45:c2:5e:be:06:a4:da:
63:5c:64:e3:a2:f7:a6:8b:bf:1f:b5:01:e4:45:1c:d4:a1:eb:
4c:fc:ab:0e:a8:04:ba:6f:a2:1b:bb:31:c2:f8:bd:6e:84:26:
b9:26:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:12:10 2025 by rpki-client