Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa
File: c844993d-f4dd-313b-b5c9-8354c562e673.roa (raw, json)
Hash identifier: m/bLZB3kagO2J+nq4dFuY+bAW1Q24Kbj6CJtVT+BMys=
Subject key identifier: 44:6E:CF:CC:61:6D:E6:03:37:63:7E:8B:CC:CD:21:FF:3C:F6:F9:3A
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F432858482EC00E5EA832E0513B9C8400
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 22925
IP address blocks: 107.181.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:0e:5e:a8:32:e0:51:3b:9c:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=aa447e0f-c5da-49f2-99b1-35bed92c54e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:3b:d0:db:0d:16:5c:67:0c:2d:e8:4c:f6:
9a:53:f9:c7:94:78:16:e3:27:07:cc:94:dd:6d:fd:
06:22:6d:f8:8d:33:c9:26:70:c3:ea:e2:5a:ee:b3:
0b:34:4a:96:a8:19:59:dd:de:b4:3b:51:e2:a3:14:
71:52:8a:7a:a4:cf:2a:35:53:61:37:dd:bd:09:b0:
57:70:b1:5e:2c:87:fd:8c:e8:6e:26:59:d9:f7:67:
07:58:60:fb:f1:f2:d6:94:5e:e6:6c:f1:20:6d:17:
e4:50:73:b5:e6:fc:a1:66:18:51:b2:d6:f9:b8:a3:
5e:29:2d:77:20:2f:5a:e6:62:d2:dd:13:36:91:0b:
e5:2d:37:a3:58:38:07:c2:46:5b:89:71:94:d1:82:
8b:a7:ba:ec:f2:67:c7:b6:25:66:84:7c:85:cf:a0:
2e:5b:fa:62:f9:48:33:b9:88:f5:6f:0f:ab:6a:24:
7e:94:8f:d6:21:0f:6c:6a:59:4f:f5:98:2b:80:54:
e9:47:f0:dd:eb:88:b6:6b:9d:a3:6e:38:07:23:ec:
d2:3d:59:d4:48:bf:7d:3c:3c:c7:75:a3:da:84:ce:
99:db:a8:9c:2d:8f:35:6e:48:17:0c:0b:b9:6a:ec:
6a:eb:66:87:e8:f9:6f:3d:c0:e7:49:d2:14:64:3d:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6E:CF:CC:61:6D:E6:03:37:63:7E:8B:CC:CD:21:FF:3C:F6:F9:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
107.181.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:bb:a9:2c:89:b1:a8:03:72:58:41:0b:4d:83:30:a9:65:9d:
72:ab:e2:2e:ba:6c:10:2a:ae:9a:4f:5f:c3:8b:74:97:c1:99:
4f:4f:07:0c:c7:6c:4a:52:3c:2a:fd:b3:4f:46:50:d5:9c:c5:
37:9c:34:27:19:9b:e5:26:7d:68:c3:cb:ea:d8:f8:01:3c:6f:
24:d3:83:8b:09:da:59:7f:dd:e2:f2:fe:1b:33:44:df:06:bb:
eb:49:cd:7e:20:8a:9e:ab:d7:a7:2a:cc:fe:c5:65:65:99:e7:
55:ee:0a:e5:5f:67:1e:68:f7:c2:03:5c:7e:31:97:e4:5e:3f:
b4:45:eb:cd:21:97:97:16:08:42:c6:16:83:0f:0d:c3:90:14:
39:a9:02:b5:24:ad:d1:e5:47:29:81:8c:1a:a0:89:d3:e9:d0:
60:dc:e0:b0:41:bc:d8:5e:fb:5f:2f:8a:c1:28:8b:be:3e:f3:
6d:3b:1b:c4:af:de:f3:65:a6:13:dd:8f:41:74:da:2c:87:44:
c6:5f:8b:f9:49:f8:be:df:c9:5d:a3:b9:3c:91:32:7c:f9:e0:
bc:ea:ec:88:83:e9:df:51:6c:c7:88:24:69:5b:62:8e:74:ee:
58:fa:a8:cc:4b:46:39:73:55:31:ad:74:57:97:39:4b:f8:7b:
72:0d:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:45:44 2025 by rpki-client