Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa
File: 4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa (raw, json)
Hash identifier: 1tJKoWSke1heRKqP0bPUk/gey7BCorpRy7ODv43R7Jk=
Subject key identifier: 65:D5:C2:DE:C1:29:F9:52:F7:79:30:F8:57:E5:47:37:B3:24:6E:B8
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848A29B53572E697A2A8E96EC60
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 398823
IP address blocks: 107.148.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:53:57:2e:69:7a:2a:8e:96:ec:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=b3c66c1f-86d9-4f41-a01c-3e6e381d7f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d5:4a:24:1e:43:91:46:c6:fd:d0:37:aa:d6:
09:59:cc:d7:ec:4e:53:f6:02:a5:86:25:43:35:4f:
93:3b:09:6b:fc:99:a0:6a:4b:64:ee:1b:bc:ed:40:
44:75:01:7d:e6:93:4a:e4:c3:89:96:05:bf:de:61:
c0:d3:b0:ae:62:c1:60:5c:d1:4e:65:22:37:22:43:
fd:61:c3:06:69:99:b7:82:47:a6:d7:21:64:85:b6:
33:0b:5c:8e:d4:43:3e:76:ff:3c:c0:38:96:ce:54:
ee:d2:b4:f3:b2:ce:89:6a:7f:17:6e:ae:0a:3f:3e:
6c:5d:1c:50:33:07:ff:a1:11:5f:ea:2d:47:21:fb:
b4:b7:b2:5d:47:c2:44:65:3c:0a:11:5f:aa:e0:30:
52:4a:57:2f:fc:b2:ef:fd:36:ab:28:7f:ce:b9:74:
47:c5:99:82:d2:cd:5e:ff:9e:fb:c5:23:ac:e8:88:
85:9a:49:3d:25:ea:ca:d8:3a:86:8b:68:fa:bf:57:
70:4f:dc:df:76:51:6d:b2:82:df:a7:55:4f:7a:c4:
92:08:bb:06:1f:f4:34:a0:44:d6:d4:bf:0a:d1:7d:
35:ba:5b:6e:99:af:db:68:c3:08:f7:a7:91:c1:2e:
0b:49:85:be:20:b3:66:eb:27:f6:bf:27:06:13:d5:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:C2:DE:C1:29:F9:52:F7:79:30:F8:57:E5:47:37:B3:24:6E:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:51:27:09:82:25:b9:90:5e:9d:f6:46:7d:7d:49:c2:78:da:
dd:96:ca:c8:84:1b:b7:21:74:1e:bc:81:2d:2d:38:70:e5:c7:
2b:23:90:94:70:6e:a1:d6:89:02:8b:5f:7b:3c:71:42:ea:41:
f4:8d:58:f8:16:e9:87:df:d7:8f:84:98:56:4a:07:50:37:05:
77:4a:88:f5:a3:ec:2b:63:70:90:ee:90:1e:09:ba:7e:64:da:
23:59:e0:e7:5c:1b:3c:98:cf:78:76:d7:8c:35:3d:2d:9d:5d:
79:65:cb:f2:98:b7:61:c3:36:e4:5b:e6:4d:16:7f:a9:83:13:
7e:b1:22:db:63:b0:e7:44:92:ca:61:d2:e5:53:40:0c:71:88:
6a:e7:00:40:fd:3e:90:82:97:f6:b7:b6:e7:49:44:58:be:c5:
6c:df:66:c8:d6:a7:8f:d2:1c:45:04:32:1b:83:26:1a:c0:90:
0a:5b:c9:3b:0f:fd:b9:5b:e7:1c:0f:ac:cc:55:9f:b1:33:f6:
c8:34:72:60:ee:86:06:5e:db:1d:03:f6:0f:c6:a1:b2:a3:93:
86:7d:f0:a7:3b:cb:8d:83:ab:0c:ce:69:a7:93:ac:ce:86:30:
84:e9:25:aa:30:14:06:a3:b5:f2:7f:2e:df:e4:7f:46:33:b8:
48:5e:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:13 2025 by rpki-client