Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa
File: 04ecbba8-a20a-3de9-9e0a-adb751a99684.roa (raw, json)
Hash identifier: ZSeUaVjVf9lRemlKcJETBprKS1Qe6acaRPccJSEGZy0=
Subject key identifier: EF:5F:67:73:A2:CC:AC:6C:30:F4:A4:85:E0:B0:12:E7:08:2A:DD:66
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848159FDDE4FA12278E263F0380
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 137280
IP address blocks: 107.155.51.0/24 maxlen: 24
107.155.52.0/23 maxlen: 24
169.197.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:dd:e4:fa:12:27:8e:26:3f:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=5dc4a7f0-b21b-41e3-9d26-ec71d934ce71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:91:a8:ae:50:89:f8:c0:4c:41:c7:79:5b:
92:8a:4e:1a:3f:6b:82:8b:28:1f:23:a6:95:31:1d:
4f:5b:11:b3:3f:18:44:72:ba:e4:7e:98:f0:df:9b:
9c:42:c3:f3:af:a4:d3:b3:7c:96:af:c5:24:c5:f8:
2b:42:05:65:92:37:27:9f:fd:de:9e:b6:d8:67:22:
73:ca:9f:3e:e8:46:43:8b:fb:bc:09:f4:d7:85:03:
ca:c1:c1:14:8f:f8:c3:5c:88:01:72:e9:de:1b:7e:
75:0d:13:c2:67:31:ee:77:b4:ab:ea:25:0f:1d:a9:
22:bc:cb:03:79:2b:b1:05:aa:57:dd:f7:f5:c0:cf:
14:0e:de:70:f1:64:15:0d:7c:07:78:2c:c1:62:e9:
ca:5f:2c:3b:d2:2f:8b:20:4d:80:4a:81:8f:10:af:
80:c5:5b:ce:1a:89:d8:02:a1:88:50:c8:78:2b:51:
63:09:8f:e8:8f:dd:47:17:5c:a5:5e:77:19:81:ca:
66:ab:08:77:dc:22:6e:14:9f:5b:16:3a:97:ec:84:
60:0f:ac:08:46:b1:c2:49:36:e0:4d:0d:94:97:ea:
e6:16:89:db:76:bc:ac:28:db:6a:4e:05:71:88:52:
c5:f2:f7:f3:ba:85:bd:16:e9:4d:f9:8a:18:59:3b:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:67:73:A2:CC:AC:6C:30:F4:A4:85:E0:B0:12:E7:08:2A:DD:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
107.155.51.0-107.155.53.255
169.197.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:1c:05:1f:34:2f:95:80:6f:1b:92:ea:97:c3:12:c3:4a:c2:
4c:0d:65:2a:ad:99:f4:27:ed:2f:bb:36:72:11:c2:85:b9:b7:
5d:f9:d3:e5:ee:31:62:ef:31:55:73:9d:b6:aa:3d:3c:a9:e8:
6a:5c:ef:99:73:9d:21:d7:48:5a:4c:76:33:af:1d:5c:8e:4a:
5b:4c:1f:47:a5:5f:0d:ca:67:b5:72:98:70:94:94:6b:ce:ab:
ca:fd:2f:3f:38:3a:26:24:60:b5:18:cf:df:e1:a6:9d:3e:5a:
d0:f0:a5:95:cb:29:da:0f:09:e0:d3:34:6c:2a:0c:e1:83:e7:
f2:72:be:43:60:46:cc:ef:ea:97:1b:b0:e6:fc:da:59:68:d1:
97:b1:7f:dd:61:fc:03:28:55:4f:f5:7b:20:ee:ca:10:39:c7:
2e:19:06:5d:ee:67:7f:2b:ca:56:ed:42:c5:b7:28:75:af:b4:
6e:9a:d3:a2:4a:fa:b6:46:71:e3:8a:af:5c:04:43:e3:9e:3c:
21:b1:d8:ba:40:fb:38:90:f0:44:4f:8f:87:f9:02:ea:f5:94:
f2:4e:1b:87:a4:05:73:54:87:6f:63:bc:28:6a:db:91:aa:66:
5c:d9:b1:fd:9d:b4:e7:35:89:9e:65:c3:64:43:96:8d:2f:21:
bb:28:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:41 2025 by rpki-client