Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa
File: 5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa (raw, json)
Hash identifier: G6EHvLYet8rLqLHy/t5Bff7Duq5XVxkA7qRseg0Vao4=
Subject key identifier: A1:78:06:BC:DE:FA:5E:68:AF:0F:B8:28:CA:A2:99:EB:57:02:D6:C9
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584832F02B37BD897938C707B3E0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 398478
IP address blocks: 107.148.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2b:37:bd:89:79:38:c7:07:b3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=1dd2f4ff-2cc7-4ee5-88d6-07d824c2d0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:8b:21:d6:fe:b6:4a:f4:28:c9:03:d7:f5:
37:fb:cb:f4:f5:b9:e9:f1:16:a4:6e:68:17:16:02:
21:da:95:3e:27:74:e2:9a:03:dc:ae:ef:86:28:df:
98:71:c2:3f:8a:16:95:a3:68:8d:f4:7d:db:ff:a2:
89:3a:2e:b2:80:22:3d:f8:37:e8:63:d7:f4:fa:88:
3f:02:b9:a6:0e:5b:e7:bb:2e:5d:e0:a2:f9:bc:26:
f3:18:4f:e9:a6:c9:80:bb:34:87:42:cf:c1:ca:ad:
24:35:b0:df:e7:5c:6a:ec:60:ba:14:91:03:58:97:
a4:24:b5:d6:99:8b:8d:6d:51:02:9a:1f:03:bc:c8:
41:7a:7b:a8:15:9c:29:51:91:ab:78:c0:52:87:91:
96:45:b0:a7:19:9b:88:ee:5e:7f:73:0c:4f:4f:d8:
ba:19:49:44:2c:8e:73:37:bb:4c:bd:b5:45:10:bf:
f0:ca:71:83:41:45:4a:6f:c0:e5:bc:6b:f8:7a:34:
fd:54:75:c6:8d:aa:35:fd:90:92:96:f6:b9:53:4a:
2a:13:f7:9c:10:0e:05:10:db:6b:77:1d:3a:fd:79:
7b:ef:76:b2:89:a4:28:ce:f5:21:84:d8:7c:01:de:
ac:cc:bf:27:65:0f:dc:eb:a9:cb:57:05:80:cf:0a:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:78:06:BC:DE:FA:5E:68:AF:0F:B8:28:CA:A2:99:EB:57:02:D6:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ea:47:1e:88:c6:f2:4d:03:0b:0b:85:f1:1a:1c:20:d8:08:
f1:5f:26:38:2e:bc:7c:f8:8a:93:30:a6:4d:a6:03:57:db:a7:
67:cb:7c:07:07:10:25:e6:53:47:70:cb:ee:ac:08:82:2c:1b:
cc:05:07:8b:fc:4f:8e:6a:59:38:c8:d5:41:7b:d3:1a:21:da:
ad:e1:8b:b5:4e:51:d3:c9:d8:55:28:15:1c:fd:3a:4f:5f:ea:
29:54:2b:af:ba:28:cd:db:87:51:02:46:d8:59:c1:e9:c8:3b:
28:96:7c:0f:5d:32:74:80:af:e1:da:0a:4a:e6:24:47:57:a1:
79:27:9a:9e:d0:66:b7:2a:80:e1:56:f1:da:cd:55:8f:be:6a:
58:28:4d:da:f0:08:f1:05:23:01:04:84:05:1b:de:bc:07:39:
d3:40:59:66:08:8c:88:7f:fb:51:d1:27:7b:4c:fd:d1:7a:52:
51:b6:a7:4b:37:a6:fe:f7:62:8d:d1:48:af:bd:fc:1b:72:2b:
82:59:7b:15:14:3e:6e:9e:80:88:68:0b:15:16:8a:1f:5c:e2:
a7:47:15:b7:56:9a:49:bb:fb:47:e4:28:62:68:9b:9d:75:15:
b9:8c:b9:72:84:8a:c5:8e:7a:13:f4:d6:30:ec:14:c6:a3:4c:
c4:06:6a:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8Cs3vYl5OMcHs+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MWRkMmY0ZmYtMmNjNy00ZWU1LTg4ZDYtMDdkODI0YzJkMGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlseLIdb+tkr0KMkD1/U3+8v09bnp8RakbmgX
FgIh2pU+J3TimgPcru+GKN+YccI/ihaVo2iN9H3b/6KJOi6ygCI9+DfoY9f0+og/
ArmmDlvnuy5d4KL5vCbzGE/ppsmAuzSHQs/Byq0kNbDf51xq7GC6FJEDWJekJLXW
mYuNbVECmh8DvMhBenuoFZwpUZGreMBSh5GWRbCnGZuI7l5/cwxPT9i6GUlELI5z
N7tMvbVFEL/wynGDQUVKb8DlvGv4ejT9VHXGjao1/ZCSlva5U0oqE/ecEA4FENtr
dx06/Xl773ayiaQozvUhhNh8Ad6szL8nZQ/c66nLVwWAzwqRnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF4Brze+l5orw+4KMqimetXAtbJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNTAzNDI5NmQtN2VmNS0z
OWNhLWI1NmEtZWY3YzhiN2Y4ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5TsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvqRx6IxvJNAwsLhfEaHCDYCPFfJjguvHz4ipMwpk2mA1fbp2fLfAcH
ECXmU0dwy+6sCIIsG8wFB4v8T45qWTjI1UF70xoh2q3hi7VOUdPJ2FUoFRz9Ok9f
6ilUK6+6KM3bh1ECRthZwenIOyiWfA9dMnSAr+HaCkrmJEdXoXknmp7QZrcqgOFW
8drNVY++algoTdrwCPEFIwEEhAUb3rwHOdNAWWYIjIh/+1HRJ3tM/dF6UlG2p0s3
pv73Yo3RSK+9/BtyK4JZexUUPm6egIhoCxUWih9c4qdHFbdWmkm7+0fkKGJom511
FbmMuXKEisWOehP01jDsFMajTMQGanI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:59 2025 by rpki-client