Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
File: 5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa (raw, json)
Hash identifier: 7MvsXNnZRyh8qj34JzM5nmF1GDFbsI35M/YKCfEnprs=
Subject key identifier: 3E:71:B2:B6:76:BD:1C:28:B6:38:CB:E2:DE:EF:29:E9:55:E7:EB:A1
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848388559D1699C3886A5F9B1D4
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 398823
IP address blocks: 107.148.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:59:d1:69:9c:38:86:a5:f9:b1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=3945dccb-2c62-48b7-b1c9-3e3737c2cb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:f6:01:cb:83:ff:71:40:5c:3c:c9:fb:25:
5c:5f:b9:30:e3:cf:ac:c8:e9:85:08:ae:c3:2b:d4:
bb:17:7b:6d:22:9c:97:90:3b:f8:e4:42:b0:4c:96:
82:53:70:e9:62:9e:13:bf:47:ab:a2:23:f2:c7:f8:
8b:6f:b2:8f:fe:80:5b:55:e5:c6:10:4b:10:60:c8:
08:34:cf:78:26:d5:ca:64:88:de:4a:60:db:69:20:
40:1f:da:67:11:94:4f:f3:5a:d3:eb:b4:4e:ee:18:
58:82:2a:4c:3c:6b:70:41:0a:d2:79:46:df:7d:82:
15:a4:34:44:66:5b:ee:19:1b:29:c4:dd:a1:f8:ba:
3d:ca:f9:65:20:5a:8b:2a:c2:88:e7:e7:34:9f:df:
87:08:0d:93:fb:18:da:f5:18:d4:21:58:0a:2e:8c:
fd:a7:a4:57:9a:12:66:b7:0d:0c:3c:c1:db:72:c3:
a0:40:2c:0e:6e:5d:51:8c:19:84:fa:3d:2d:af:35:
c0:a8:8c:d2:07:83:7a:d9:52:f7:fe:c5:02:0d:78:
8a:47:2a:f7:5b:3d:76:b7:e9:eb:df:08:cb:7c:8f:
79:a2:5a:2c:31:57:8d:fb:9b:ae:cb:0e:1c:71:a9:
c4:36:87:fa:97:12:19:29:cd:37:7c:33:5a:9d:bb:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:71:B2:B6:76:BD:1C:28:B6:38:CB:E2:DE:EF:29:E9:55:E7:EB:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:b2:df:d7:33:d8:78:06:92:64:b8:18:ef:4d:6c:c4:8f:4c:
cf:cf:02:8d:f5:ff:78:39:7a:6b:11:05:6d:69:99:04:24:53:
e1:79:50:4c:1b:da:76:bd:9a:a5:b1:33:72:60:1c:a2:c9:4b:
c1:fa:bf:69:e5:73:89:47:92:a3:b1:13:7a:4c:33:10:42:3a:
2f:8b:2b:15:bc:3c:37:0f:c5:15:8b:e3:2b:46:e9:53:01:93:
9d:86:2d:8a:14:70:56:4d:90:e8:94:8d:76:f6:b6:29:88:a0:
b2:eb:60:6a:97:8b:b7:17:5b:28:7e:ed:18:73:96:04:93:a4:
01:42:3a:1d:c5:10:7c:89:39:60:63:51:38:b5:a4:48:ad:01:
ff:9b:3b:cc:4c:b7:52:77:9f:47:66:8a:4e:b6:96:54:19:5b:
1f:ee:31:9e:2c:a8:35:65:8c:3f:4c:5e:8a:a6:47:12:dd:68:
23:3d:84:67:47:f2:71:9f:f3:a9:67:60:53:13:0d:2c:78:4b:
f5:ab:1e:17:77:76:0a:07:37:ad:4c:b2:75:cc:93:99:d0:80:
c1:b9:d8:2e:b7:5c:6f:f6:22:25:21:b3:2f:c5:a7:a1:ef:1d:
c2:65:d3:63:24:fa:1c:c8:32:43:0b:f8:e1:96:3b:aa:13:1f:
0c:08:2e:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVnRaZw4hqX5sdQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
Mzk0NWRjY2ItMmM2Mi00OGI3LWIxYzktM2UzNzM3YzJjYjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lj2AcuD/3FAXDzJ+yVcX7kw48+syOmFCK7D
K9S7F3ttIpyXkDv45EKwTJaCU3DpYp4Tv0eroiPyx/iLb7KP/oBbVeXGEEsQYMgI
NM94JtXKZIjeSmDbaSBAH9pnEZRP81rT67RO7hhYgipMPGtwQQrSeUbffYIVpDRE
ZlvuGRspxN2h+Lo9yvllIFqLKsKI5+c0n9+HCA2T+xja9RjUIVgKLoz9p6RXmhJm
tw0MPMHbcsOgQCwObl1RjBmE+j0trzXAqIzSB4N62VL3/sUCDXiKRyr3Wz12t+nr
3wjLfI95olosMVeN+5uuyw4ccanENof6lxIZKc03fDNanbsHzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5xsrZ2vRwotjjL4t7vKelV5+uhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNWNmMWYxMTEtZTQxZC0z
N2U4LTg5OGMtNjE5MzlmZTRhOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5SGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyy39cz2HgGkmS4GO9NbMSPTM/PAo31/3g5emsRBW1pmQQkU+F5UEwb
2na9mqWxM3JgHKLJS8H6v2nlc4lHkqOxE3pMMxBCOi+LKxW8PDcPxRWL4ytG6VMB
k52GLYoUcFZNkOiUjXb2timIoLLrYGqXi7cXWyh+7RhzlgSTpAFCOh3FEHyJOWBj
UTi1pEitAf+bO8xMt1J3n0dmik62llQZWx/uMZ4sqDVljD9MXoqmRxLdaCM9hGdH
8nGf86lnYFMTDSx4S/WrHhd3dgoHN61MsnXMk5nQgMG52C63XG/2IiUhsy/Fp6Hv
HcJl02Mk+hzIMkML+OGWO6oTHwwILms=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:47:18 2025 by rpki-client