Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c0b24489-852f-36e4-8bfb-88f702345814.roa
File: c0b24489-852f-36e4-8bfb-88f702345814.roa (raw, json)
Hash identifier: 5x8tvU3Dxa8JuQgZB/g3PR20Ho85ejFI1Ba1fKOVuXw=
Subject key identifier: 35:76:F3:1F:55:76:9D:92:69:EA:91:FB:C3:13:33:D7:B5:03:14:A2
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F432858481C9A91729212F23DBD344DA0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c0b24489-852f-36e4-8bfb-88f702345814.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 21859
IP address blocks: 107.148.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:91:72:92:12:f2:3d:bd:34:4d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=50b480a5-ba39-446d-9677-02b11f2d9039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ed:bb:99:0c:ff:41:7a:8c:2b:45:19:60:ff:
34:71:b0:c0:af:c1:77:2f:d5:8f:17:ba:91:08:d8:
7d:c6:31:da:00:1c:65:5d:71:45:31:78:ad:a8:15:
06:5a:7b:e8:40:6f:c8:14:2f:66:2a:6f:3f:3d:f5:
73:2d:7d:f1:a7:7a:42:42:ca:e6:a0:3c:89:b0:73:
47:65:72:04:c0:ad:a7:e8:f6:3f:2a:90:54:71:69:
e0:92:4c:de:25:3b:b7:08:b5:da:72:20:aa:37:37:
05:65:6f:c8:c6:79:60:28:4d:0b:7f:c9:00:ac:66:
9c:81:23:60:5e:d5:a2:5a:19:cd:48:db:54:13:38:
3f:48:52:d6:c3:6a:b3:e1:0c:28:6f:b2:0a:ae:c2:
e0:32:19:69:96:f9:4c:c9:0c:4d:f1:7a:b0:e3:18:
03:c4:d6:d9:69:27:82:30:31:03:3f:e5:8f:e4:d6:
c9:2c:e5:1f:d2:38:b3:ee:93:f7:df:44:60:3e:7b:
b2:7c:07:e5:e3:f4:c9:7d:da:38:35:be:65:a6:ae:
d4:65:be:57:9f:4c:b7:3b:18:7b:19:c2:b3:b5:6c:
ed:55:c5:63:c0:c5:34:85:1e:37:ff:c9:d8:24:c1:
a2:74:45:49:fc:ca:eb:21:b1:46:a9:ff:fa:6f:07:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:76:F3:1F:55:76:9D:92:69:EA:91:FB:C3:13:33:D7:B5:03:14:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c0b24489-852f-36e4-8bfb-88f702345814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:61:68:df:c3:7b:fc:2a:8d:80:7c:ce:bb:5a:64:f4:cb:9d:
44:a9:16:a3:6b:b9:3c:00:ad:18:42:5f:8b:d7:8b:88:d2:b4:
66:20:a8:18:f7:22:a0:55:e8:58:de:62:87:35:ed:3e:bc:c4:
c4:42:27:20:f4:75:7b:0f:37:d4:83:62:8e:c2:d4:6d:e1:5d:
3d:8d:15:5d:e7:39:ad:3b:8d:e4:f4:eb:04:5d:5b:92:46:50:
05:33:9f:45:cd:ed:f7:22:a4:ef:82:2b:4b:dd:a4:b8:83:48:
bd:29:e0:f0:d3:38:50:14:8c:74:99:8a:9b:81:bb:f2:2f:82:
c7:ba:13:27:67:76:5e:60:b0:b6:eb:05:41:4f:03:b3:60:12:
7e:db:79:72:42:53:db:1f:4c:b2:be:74:fc:15:06:d5:bc:24:
38:a9:fb:ee:a7:84:14:50:43:d1:cb:f4:6a:b3:d6:72:30:c0:
c6:83:f7:eb:52:0a:4b:fe:ba:8a:d8:62:52:ea:2f:a0:cd:90:
8e:e8:f8:5d:e7:63:e3:2b:e1:0e:46:2e:d2:13:d7:6a:16:79:
76:a9:a8:de:61:c9:b0:fc:98:e2:2a:57:1d:10:0c:92:76:13:
50:02:5f:40:ad:ef:1f:12:f8:16:da:7f:d6:f4:3e:da:f6:28:
a9:6b:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:19:23 2025 by rpki-client