Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa
File: a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa (raw, json)
Hash identifier: NPnGLRNcEIjxrBIA1P7A+9rp6qg1lfkbfA4Py29kB7U=
Subject key identifier: 07:01:10:7E:97:F4:71:A0:AE:6F:51:BA:7E:A3:44:03:23:6D:61:79
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB5D8E88E3165C765BDC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 107.144.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b5:d8:e8:8e:31:65:c7:65:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=484c4c25-5e79-4a6f-af06-f23c0ee1fca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4e:fd:65:ef:2c:e5:15:74:c7:9a:e4:78:fe:
d4:71:5c:eb:ac:b6:ac:2c:0a:cc:34:d0:e0:9c:85:
fd:6a:36:1d:ff:7f:52:0b:b4:72:de:a2:30:55:55:
ce:5b:52:d9:f2:ff:8c:1a:50:d1:e7:ea:71:19:b1:
27:9f:6e:19:c8:4a:3b:b2:32:a0:c0:81:5e:70:0d:
25:dd:9d:74:9e:6d:bb:16:16:c3:5e:55:1e:78:5a:
86:94:bc:fb:06:25:de:97:8c:43:75:d2:c1:78:b3:
8f:a7:a9:4d:b0:40:52:90:4e:9b:89:1f:80:d7:b2:
7c:b2:b1:47:95:f4:ee:7b:8e:3a:61:40:1c:00:1b:
3b:d8:00:1b:34:b9:41:1b:91:47:e6:c6:9b:a0:d4:
54:3a:34:19:35:31:66:e2:11:ee:f1:53:ff:2a:bf:
61:9f:f5:17:b2:69:33:59:b4:ee:f4:8c:b3:e3:1d:
e2:32:9c:25:b2:85:24:17:09:c0:01:f6:8c:24:59:
29:ea:8a:60:62:80:fd:51:26:76:b4:af:ad:97:bc:
fa:cf:c5:f5:f6:93:30:20:0e:c0:b0:60:af:4d:29:
14:68:0c:9e:89:c0:b8:26:5f:29:f1:70:cf:40:f4:
04:c2:1e:a1:a5:41:ca:34:2d:24:e0:a8:c9:23:34:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:10:7E:97:F4:71:A0:AE:6F:51:BA:7E:A3:44:03:23:6D:61:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
107.144.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:46:1c:70:c3:8d:7d:72:67:d7:f8:18:9f:a8:f2:5e:fb:71:
1c:9c:69:e4:43:ba:53:45:61:ba:3e:d4:42:7a:b7:46:31:20:
a0:73:f9:c2:48:4e:e8:aa:e1:53:2f:6c:71:38:68:f2:a1:74:
5b:2c:d2:77:fd:5c:cf:c2:f8:5c:ee:bd:40:90:d6:f2:94:5c:
5e:62:26:06:12:ab:23:f7:1a:17:d6:d5:09:90:28:64:9c:01:
78:e7:74:3d:10:44:34:c1:b1:1e:56:25:e7:9d:b9:f2:9f:9d:
99:70:83:99:e4:3a:e1:ab:75:bb:a3:6c:e0:c7:7d:5f:62:40:
a4:8b:18:0b:a3:5f:cb:df:71:06:e4:d0:f6:47:3d:41:47:f7:
45:5c:32:d6:39:c6:d0:33:ea:47:8f:7b:ea:34:43:eb:3b:f8:
a0:82:ea:c4:56:fe:ea:ba:e2:45:7f:35:24:6e:59:f8:ef:88:
f4:a7:c8:e2:3d:a9:db:3c:e0:cd:a3:60:8c:2a:46:74:bc:6e:
de:60:7e:98:48:78:69:45:eb:d4:bb:c4:6b:41:db:57:99:e4:
51:ae:4d:d0:80:3a:85:aa:84:9a:90:1b:aa:06:31:91:4a:57:
59:74:c1:31:d1:37:9c:64:9a:ca:b4:7c:69:d6:a2:b7:1a:6d:
03:46:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:44 2025 by rpki-client