Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bd41c4bf-f778-37d4-9a05-c46983387f80.roa
File: bd41c4bf-f778-37d4-9a05-c46983387f80.roa (raw, json)
Hash identifier: 7T3k8qR/B510zo9SkcfFSqXFtHSijjF7/t1q8lNirSw=
Subject key identifier: 03:1B:CF:0C:BF:5D:0F:EC:F5:95:E0:9E:21:E0:C7:41:57:FE:F2:18
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F432858484EB10A03B22CB9FEB5921580
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bd41c4bf-f778-37d4-9a05-c46983387f80.roa
Signing time: Tue 24 Dec 2024 00:36:39 +0000
ROA not before: Tue 24 Dec 2024 00:36:39 +0000
ROA not after: Sun 23 Mar 2025 23:36:39 +0000
asID: 54600
IP address blocks: 107.149.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:b1:0a:03:b2:2c:b9:fe:b5:92:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Dec 24 00:36:39 2024 GMT
Not After : Mar 23 23:36:39 2025 GMT
Subject: CN=d9cae702-0b50-4f3b-bdaf-1436c138c788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:8a:ce:68:a4:0d:55:05:48:5a:01:e6:73:
08:54:32:19:90:d5:47:8b:9e:a5:8f:ee:bd:78:87:
a4:27:c9:31:cd:e1:a6:98:14:fe:ff:04:32:23:52:
ad:10:48:70:c4:95:8c:a7:7b:24:c6:78:0d:ba:c5:
1f:ab:60:b8:e7:bb:07:bf:f8:b8:dc:5d:a6:75:fd:
b2:23:77:91:34:5f:c0:dc:47:95:d3:9f:f3:d3:7e:
84:2d:d0:6a:37:05:25:8a:b9:b1:7d:f1:56:25:a6:
b5:6a:6a:21:6f:89:5d:f7:a1:af:1b:0f:a6:6f:f5:
1e:ff:ae:60:db:a8:20:f7:f3:e9:86:61:d3:a1:48:
19:a2:8c:72:90:b6:e0:59:f5:bb:53:66:b5:7a:88:
1e:84:9c:ca:eb:95:68:1e:ca:18:d4:b3:be:d1:b5:
40:09:64:14:c8:fc:6b:d6:b8:83:97:92:8e:3a:d7:
99:35:3e:23:af:b2:d3:dc:f0:96:5b:8e:d5:eb:f2:
f9:f6:85:f8:94:14:5b:eb:d7:df:67:7a:91:33:03:
84:6b:0b:3f:1e:08:76:80:e7:33:5a:39:5b:c6:15:
b4:1c:b5:21:f1:9d:dc:fe:f7:01:d3:79:67:2c:20:
d0:3f:23:36:f4:57:88:70:82:d2:c1:ab:4c:8e:af:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:CF:0C:BF:5D:0F:EC:F5:95:E0:9E:21:E0:C7:41:57:FE:F2:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bd41c4bf-f778-37d4-9a05-c46983387f80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ef:07:9e:3e:7f:4e:90:1b:78:1a:45:24:ff:8f:f6:a0:a8:
89:29:f2:8d:08:9c:11:c3:47:09:6d:3c:88:65:c4:e8:6c:a3:
61:ed:57:ee:53:cc:24:50:d1:ff:b3:82:98:84:6d:19:07:67:
26:99:38:f3:4e:df:58:e5:77:4c:76:dc:fc:c8:be:90:ad:47:
37:d1:14:60:58:04:96:4b:72:25:2d:55:9d:ef:4f:d2:16:fd:
f4:ba:fe:3a:a3:be:f4:7d:94:96:31:75:ea:26:6f:6b:64:df:
0d:c4:ec:70:ef:46:31:60:0f:ec:de:14:ad:63:ad:27:5f:57:
8d:a4:83:50:be:e9:08:31:24:83:31:35:28:06:fc:bf:75:79:
84:9e:76:7e:f7:a3:5c:b1:45:32:f4:ee:a2:41:60:80:f5:b7:
e0:cf:45:61:ef:a7:b5:b9:fe:69:2f:65:6e:ea:32:97:95:75:
97:1e:3e:0e:53:c8:a0:32:f7:ce:4b:06:9c:89:e1:66:b5:c5:
13:16:ec:4a:62:6f:75:6e:db:4d:b0:22:a2:28:8a:68:00:58:
d2:7e:d3:1a:17:b8:ae:c8:f6:e9:b8:3d:a5:33:ef:28:4d:bd:
96:a7:83:31:c9:24:27:e8:04:f5:c8:22:c6:b0:d2:06:14:79:
e4:da:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:56:20 2025 by rpki-client