Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa
File: 23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa (raw, json)
Hash identifier: Ncp1cAG2vxWuP94ULy0UCcqChmI1OVJdw5g94zt/nDo=
Subject key identifier: 2C:A0:40:AF:69:BE:60:A4:8A:11:8C:09:07:85:83:74:36:40:06:E5
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848388559C1B19966CDF201DF38
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 398823
IP address blocks: 107.148.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:59:c1:b1:99:66:cd:f2:01:df:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=dab4608b-45d3-4ed9-9208-9b75bf2d656e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:33:a2:33:ac:5e:30:4c:4f:35:82:e4:49:3b:
46:5a:60:e9:10:6f:d7:68:d7:d1:68:0a:8c:c5:9c:
5a:dd:e7:9b:48:c8:46:e6:8b:85:62:f9:92:40:a9:
86:3a:5c:90:29:7d:c9:6a:68:e9:03:62:c8:5d:51:
ca:48:97:e3:9f:c4:cd:ad:b3:4c:f2:1f:1f:ce:d0:
a2:f2:ec:ef:e6:1a:c3:21:85:2e:d5:a8:e0:f7:f4:
b8:e1:6a:f6:7f:27:11:93:c6:d0:83:3f:0d:1f:d5:
ec:28:73:ba:3c:f0:1f:01:27:2c:d8:cd:30:76:15:
cc:5b:4f:0e:40:fa:52:12:3c:2f:c2:ca:05:de:de:
ae:04:58:b0:6e:1b:de:dc:c5:63:f7:05:91:dc:3d:
1f:9c:9b:69:8d:dc:36:4b:4d:85:3b:ac:25:96:e7:
f0:ed:42:8f:c5:58:39:d9:70:e3:aa:6a:56:48:28:
b5:a1:a2:21:e7:5b:08:eb:6c:7b:9b:3a:a8:4a:fa:
15:46:62:bc:eb:c8:23:47:41:7e:a4:aa:1e:2c:e0:
65:4c:b4:af:89:7c:3c:da:ad:c5:1e:14:8a:8f:b3:
eb:19:30:93:92:e8:b7:37:be:f9:2e:19:fd:05:bd:
63:02:fb:79:98:1e:c0:dc:bb:a3:88:dc:d0:2d:be:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A0:40:AF:69:BE:60:A4:8A:11:8C:09:07:85:83:74:36:40:06:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:99:2f:8c:3b:bb:78:2a:5f:d1:a5:0f:9b:c3:39:fe:49:3d:
1b:b3:84:8a:aa:c4:16:75:31:bf:5d:1e:42:04:37:cd:8b:96:
b8:c3:ca:af:88:1f:7a:78:22:48:22:8c:ef:c5:b1:ee:46:cd:
d1:b7:27:18:c3:96:25:24:70:ad:b3:27:f6:b3:cb:f0:02:91:
10:85:03:55:21:4a:7c:24:f9:73:76:a8:22:42:80:22:da:2a:
51:9e:09:52:31:a9:03:3d:a9:26:24:3d:b8:8e:f9:72:f5:0c:
ea:c0:30:2b:56:1f:00:c7:33:8e:17:80:3a:87:ef:c9:43:33:
ef:85:d5:48:1e:43:b6:e2:cd:5a:5f:21:22:c4:b3:31:9b:82:
d2:ff:12:d4:bd:10:74:ef:ea:19:8d:b6:5e:9f:e7:dc:a3:8b:
79:b1:8d:e6:44:d7:77:77:0d:bf:fc:d5:c0:d6:c6:fa:cb:b2:
14:a5:c6:16:13:ae:97:60:34:68:bb:f3:33:d4:8e:95:4f:d5:
be:31:30:fd:82:c4:37:b7:6c:28:ce:12:14:ed:95:76:4b:fa:
fb:2b:9d:b6:f2:16:82:75:f7:33:c6:b7:7b:0c:69:9c:a2:86:
a9:71:43:ce:5d:61:1d:b9:b6:37:29:0c:70:bc:5f:ac:4a:35:
e7:ec:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:24:02 2025 by rpki-client