Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fc93fe7b-dc7f-3da9-96b6-1838a9fe858c.roa
File: fc93fe7b-dc7f-3da9-96b6-1838a9fe858c.roa (raw, json)
Hash identifier: bBbtHmSrsZFWxcjR7GELo22jYGplJI0EZ+Wqe0hB620=
Subject key identifier: EA:30:00:37:2C:33:C2:EB:97:8C:68:52:B4:51:F0:4A:71:0F:49:05
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F4328584802151324F106EC2393883180
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fc93fe7b-dc7f-3da9-96b6-1838a9fe858c.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 134365
IP address blocks: 107.151.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:13:24:f1:06:ec:23:93:88:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=f357b53f-0304-46d1-82bf-7e81cea39ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:35:4b:4c:c2:e0:04:fa:44:7a:7b:40:30:
0e:c7:8a:51:39:7b:b0:60:a4:52:81:ad:88:fa:4b:
c9:94:34:7e:bf:8c:13:0b:50:a5:00:86:01:34:a3:
b4:ff:5b:b7:50:45:03:ed:85:de:6a:19:41:36:fa:
31:45:69:d2:a8:a1:e5:06:5f:31:a3:6a:d3:79:33:
98:42:2c:17:38:a1:aa:e3:09:4e:f2:87:4b:9e:ca:
74:74:d6:73:39:91:24:81:d3:d6:2d:9c:95:36:55:
93:49:5c:68:3a:34:54:e4:9f:6f:c1:fd:b1:90:7e:
f5:30:56:18:6b:6b:e6:20:a6:88:e3:9e:48:b5:ab:
a4:9c:3b:1c:9f:45:ed:9a:05:cc:b1:ea:d2:67:58:
a8:19:09:ee:fc:b3:01:e7:78:49:e5:9c:81:e5:1c:
d9:82:44:c6:01:ec:97:1c:3c:03:ed:8d:27:a0:ca:
8b:b0:1b:be:4d:ba:68:2b:1d:aa:fc:51:10:23:bc:
0b:83:e5:13:df:d2:b5:ee:05:14:39:ee:d1:fe:44:
74:9b:9f:e9:b6:68:01:4b:70:1c:2c:7c:81:2e:42:
e0:a9:15:9f:b7:71:c7:24:11:11:c0:8c:10:98:aa:
3e:93:6b:fc:0a:4b:58:fd:34:72:28:1b:ea:b4:27:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:00:37:2C:33:C2:EB:97:8C:68:52:B4:51:F0:4A:71:0F:49:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fc93fe7b-dc7f-3da9-96b6-1838a9fe858c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:6b:05:96:94:d1:e7:63:99:93:df:45:93:33:c1:56:8d:09:
43:06:38:89:99:d9:1e:ca:2b:29:52:72:7a:ab:22:ad:19:9a:
cb:95:ff:f6:7c:a1:4f:ba:99:b9:a1:1d:24:94:e0:da:10:84:
b7:b6:7c:cb:8a:9d:c7:58:62:db:9c:44:59:ce:7f:20:a4:00:
54:da:d2:81:62:d9:7b:7c:66:22:88:bf:45:8c:46:93:fd:21:
1f:f0:c0:dc:a4:27:38:be:87:7c:73:09:2f:50:d8:11:bd:fd:
a7:9a:35:3e:83:ef:91:91:35:57:c8:78:74:ba:49:d9:6c:96:
c2:96:9b:53:d5:52:26:33:b3:4c:7b:7e:8a:37:9f:c4:38:2f:
74:e1:db:67:ca:5c:76:30:55:a3:18:0e:67:ea:8f:e5:aa:20:
71:a5:67:9f:16:ed:f3:7f:18:ae:24:54:ba:7f:c4:7d:be:ce:
e9:b0:9e:1f:2b:72:81:db:bb:56:23:6c:c7:70:32:f9:1e:e5:
bf:54:c5:d9:d3:37:60:31:33:1c:21:5b:87:72:60:32:13:00:
6d:c2:30:4a:52:68:91:46:0b:a7:2f:f7:14:00:da:7b:d1:e1:
9d:57:da:d8:1c:8d:b4:f4:6f:d3:74:87:bc:2f:3c:b0:e1:3d:
67:bc:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:01:59 2025 by rpki-client