Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c48540e3-a29d-345c-a58f-8579a57be1d2.roa
File: c48540e3-a29d-345c-a58f-8579a57be1d2.roa (raw, json)
Hash identifier: qwkWVsFRkvvlMc0ZN4r3Fe/u2BnquPn0uKMe4uwKJDs=
Subject key identifier: 18:45:C5:BC:EB:21:21:E6:74:D3:00:DA:0A:D7:D7:D0:EA:07:A6:58
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858480A751F14567B6EE667445A30
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c48540e3-a29d-345c-a58f-8579a57be1d2.roa
Signing time: Fri 29 Nov 2024 14:00:51 +0000
ROA not before: Fri 29 Nov 2024 14:00:51 +0000
ROA not after: Thu 27 Feb 2025 14:00:51 +0000
asID: 134365
IP address blocks: 107.151.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:75:1f:14:56:7b:6e:e6:67:44:5a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Nov 29 14:00:51 2024 GMT
Not After : Feb 27 14:00:51 2025 GMT
Subject: CN=d027d334-65ee-42d1-90ed-c1cad046ba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:7a:de:e8:3a:73:28:7d:d3:79:eb:a8:52:
f4:71:95:f1:09:5f:15:b4:63:18:f8:fb:74:4f:81:
21:79:f0:37:7a:a3:25:97:7d:0d:27:da:09:f5:b7:
ec:78:0b:25:3b:5d:1e:35:52:1b:ab:53:e3:63:26:
d2:87:ca:f1:78:0a:c9:9d:9a:8f:32:2f:d1:19:30:
56:f0:3b:fd:08:db:6c:34:38:30:df:36:f1:2f:c0:
1c:97:07:17:ec:05:99:76:74:7f:27:75:77:18:1e:
80:59:16:67:24:5d:f3:ed:6d:82:43:2f:ba:0c:bf:
e5:10:2e:85:30:01:52:4e:74:31:01:d9:8b:57:79:
e4:b7:5a:27:80:42:5e:6b:88:a6:39:d0:71:36:95:
dc:4f:6e:fa:bb:5f:fc:d3:17:36:fd:a5:62:b1:75:
d7:43:0b:03:43:df:71:e5:12:02:34:00:ec:1d:7b:
32:ac:e5:2a:d8:b1:65:40:bd:50:c6:e1:e4:8f:ba:
6a:56:e1:30:df:df:88:e4:dd:dc:eb:eb:77:a6:ff:
22:24:b0:22:89:e9:91:1e:10:07:5a:b0:f9:c5:85:
9a:3a:13:4f:67:61:00:33:13:5b:bd:85:87:cf:c8:
4a:6e:b1:a6:45:fb:de:0f:1d:84:07:44:cc:f9:76:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:C5:BC:EB:21:21:E6:74:D3:00:DA:0A:D7:D7:D0:EA:07:A6:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c48540e3-a29d-345c-a58f-8579a57be1d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:46:a1:d9:4c:f5:56:44:45:75:d9:a3:8d:d7:da:fc:f2:5c:
09:16:fb:41:39:f2:a4:d9:c0:14:33:e7:d8:a0:84:7b:df:83:
6c:a0:a7:26:46:b4:4f:d1:1e:7b:e6:46:e7:8d:67:32:91:99:
92:b3:85:67:2e:db:e6:84:9b:12:74:3a:78:8c:36:8f:43:14:
9f:e3:a9:d6:52:f5:7b:5e:2f:aa:ab:e4:ce:bd:03:61:33:c1:
c4:0a:d3:56:ed:e4:59:52:c4:bd:64:dc:d7:dd:50:89:7e:df:
03:76:3b:bb:d1:4d:9c:26:10:ce:f2:66:b9:61:a4:0c:c0:63:
57:b5:c9:5b:09:94:e8:35:d0:e3:e0:14:ed:23:c8:cb:50:bc:
4f:ac:ea:3d:ae:a9:69:94:6e:79:8e:99:e1:84:23:04:2e:47:
6c:ce:e2:4a:a0:a0:4a:d7:06:34:ae:3c:e3:9b:4b:f9:82:91:
26:97:90:56:2b:3e:b0:0d:41:05:2e:7d:79:22:06:e0:b9:75:
55:a8:dd:c3:eb:a5:5e:82:25:c0:6c:4e:39:96:49:7f:47:ca:
fe:94:76:34:8d:53:45:42:48:91:43:aa:79:a8:b9:15:d4:3e:
4d:1b:16:0f:51:54:c9:5d:4c:95:bd:29:16:40:b5:2f:a5:0a:
e9:62:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:04:25 2025 by rpki-client