Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f9afc641-80e9-35b5-a87c-dd68d73febac.roa
File: f9afc641-80e9-35b5-a87c-dd68d73febac.roa (raw, json)
Hash identifier: ENWImETOH6l4T+h5t0i89bWtD3XF7Qu+hm3hE9PNINE=
Subject key identifier: 88:1C:FD:5B:E4:9E:66:08:E3:17:5D:52:E9:2D:4F:5B:03:2E:D3:AF
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848090FBD0278F60F4C0334CE00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f9afc641-80e9-35b5-a87c-dd68d73febac.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 137443
IP address blocks: 107.151.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:bd:02:78:f6:0f:4c:03:34:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=c0d77bcd-25be-499a-9363-49df6286b0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:25:7a:10:e7:6a:54:1d:94:61:ef:8e:ae:de:
88:85:00:eb:fb:18:fb:13:2f:db:f3:8f:fe:86:c9:
6b:06:b8:9d:ce:8b:08:b4:31:19:2d:51:d8:77:ba:
a7:5a:e7:71:77:3e:0f:02:db:2e:20:2f:b5:d5:bf:
73:53:0e:31:3c:5f:69:e7:7a:d2:be:ec:31:e8:a6:
63:d5:ba:36:3b:84:cd:b5:4a:13:ae:58:65:1d:d9:
f8:39:33:26:fd:a4:da:d5:a2:23:5d:a9:31:bd:4a:
fa:2f:4f:82:cd:2c:f7:07:46:a4:8c:8d:34:f0:06:
20:cc:7b:9b:c5:12:cb:9c:62:e5:0a:ab:81:9f:09:
a6:9f:bb:ed:d2:c5:1f:15:56:90:61:8b:0f:ab:b7:
fe:cd:3b:4a:ff:c2:39:d8:7f:99:08:e2:6a:b0:ab:
c1:ff:61:b1:13:0c:8b:71:e3:4d:62:10:af:63:21:
1d:a1:dd:15:78:62:eb:cd:0b:63:3e:ae:2d:bf:01:
68:84:b0:7b:0a:f7:b9:14:7f:8c:e8:5d:b8:8d:5d:
8f:38:ff:69:49:b4:66:7d:de:97:86:e0:b5:dd:af:
fd:08:ff:87:6b:7e:2e:0d:a3:09:79:32:86:0d:dd:
da:24:81:77:45:77:90:84:15:c3:99:ca:26:c9:59:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1C:FD:5B:E4:9E:66:08:E3:17:5D:52:E9:2D:4F:5B:03:2E:D3:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f9afc641-80e9-35b5-a87c-dd68d73febac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:92:f5:30:26:95:c7:4b:69:7f:1b:85:9b:c9:36:31:d6:48:
f1:d8:f8:7b:16:27:77:0e:88:8d:00:34:db:91:58:32:b3:fe:
5a:2c:af:14:64:8d:62:c9:23:db:ff:59:11:05:1e:38:4d:f9:
81:c8:11:9b:21:c8:ed:4a:65:ba:fc:a6:f3:88:b9:c0:cc:50:
21:dc:21:e8:a3:89:dd:2d:01:45:76:1d:18:8a:94:1b:8b:e4:
e6:30:f0:f4:d0:ac:3c:f1:ce:fb:6a:1d:da:bd:a3:a1:40:b3:
4e:84:9c:78:e5:1b:14:4a:f6:7a:32:3d:34:21:2b:c0:c0:05:
68:ee:86:87:9a:e0:5c:b3:ea:04:5c:48:7b:38:40:e9:f5:b6:
aa:ae:6a:3a:dd:dc:4a:e4:09:1b:49:5a:40:3e:41:fa:1f:1a:
6b:b6:61:3e:e9:43:e3:3e:c2:32:82:41:57:27:52:ab:83:68:
54:99:96:c3:55:b7:b0:c4:10:4d:c5:a2:f0:a1:80:1d:b1:95:
4d:d9:bc:7d:88:7d:8b:f3:6e:71:88:b6:db:89:e9:9d:9f:86:
74:8e:d5:7d:e7:5d:67:d6:f1:6a:a0:d6:4b:44:4c:63:be:79:
da:24:b0:fe:33:c5:7a:51:6b:7a:32:63:bb:80:b0:45:64:d8:
b1:d2:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:07:51 2025 by rpki-client