Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/138415a0-5b7e-31ea-8bf1-c65ebaafd948.roa
File: 138415a0-5b7e-31ea-8bf1-c65ebaafd948.roa (raw, json)
Hash identifier: 3qxhkQOGyREAEFhmNHkmLVmHWtRLczecudwViPaquyI=
Subject key identifier: CC:1D:98:37:E5:80:F4:48:0B:D9:EF:B2:BD:69:AF:33:3A:24:96:08
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F43285848059541184E0D73F2DA0AFF00
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/138415a0-5b7e-31ea-8bf1-c65ebaafd948.roa
Signing time: Wed 27 Nov 2024 20:06:39 +0000
ROA not before: Wed 27 Nov 2024 20:06:39 +0000
ROA not after: Tue 25 Feb 2025 20:06:39 +0000
asID: 7018
IP address blocks: 107.166.16.0/22 maxlen: 24
107.166.20.0/22 maxlen: 24
107.166.24.0/22 maxlen: 24
107.166.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:05:95:41:18:4e:0d:73:f2:da:0a:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Nov 27 20:06:39 2024 GMT
Not After : Feb 25 20:06:39 2025 GMT
Subject: CN=949c98f3-ff33-48c3-9f1e-53880b5b05f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:e0:c1:67:87:21:ee:c1:93:6a:f0:9d:05:
6a:67:09:fb:84:13:ea:25:d0:aa:b4:e4:c3:e3:36:
22:25:db:f9:f5:41:48:8f:3c:c3:22:0a:6a:d1:d6:
5f:8d:9b:95:03:32:55:d8:73:01:b5:89:c1:d7:a2:
61:be:c8:01:7d:78:d2:3d:05:31:c0:1d:0f:1f:34:
90:b0:2b:f4:f2:ce:9d:19:3f:f3:61:d3:f8:32:f0:
53:1a:ae:e0:49:8c:30:7d:b3:52:88:10:46:fd:86:
60:ea:14:5e:9d:d9:d0:04:32:47:60:01:a8:6e:c1:
fb:b7:6e:41:63:67:c2:22:5b:7c:4f:9d:f0:ea:1d:
9d:fd:9c:cb:02:3a:5a:9d:56:13:12:54:82:e4:13:
f0:22:82:81:9e:37:43:6d:34:51:ae:b5:e2:33:54:
2b:ea:77:97:f2:8d:83:8f:9d:09:43:9e:fb:f4:48:
9b:4c:6f:70:08:b1:ce:a0:d0:90:42:cf:c5:a4:d7:
e1:cb:96:20:0c:aa:3f:b6:1d:eb:95:0a:52:07:d5:
d3:28:f2:b3:5e:42:be:6a:15:6c:88:37:f1:35:a4:
47:64:ca:51:11:77:c1:94:90:f1:67:74:ad:da:9a:
2c:8d:2b:05:47:1a:16:20:df:ab:be:ac:c9:df:d1:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1D:98:37:E5:80:F4:48:0B:D9:EF:B2:BD:69:AF:33:3A:24:96:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/138415a0-5b7e-31ea-8bf1-c65ebaafd948.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.166.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:6a:de:ed:ae:f2:7f:da:9e:ae:89:f1:ef:da:e5:01:e2:a5:
47:c9:32:fd:9e:4a:68:0d:6d:7b:32:50:33:cf:10:fb:70:8d:
38:70:ae:b8:96:0a:34:a6:4d:5b:16:65:70:6a:ca:6a:c4:2d:
ad:13:b9:c7:66:4f:16:3b:b8:4e:fb:99:62:40:5b:4f:7a:74:
65:74:2a:ed:14:22:f7:15:46:b1:5f:1e:fe:35:b9:9e:0c:60:
37:f8:3d:b2:85:9b:1b:2a:e6:d9:d4:cf:6d:9d:9d:0d:79:5f:
39:3a:aa:0b:51:af:5e:f6:7b:84:89:87:4a:4c:31:09:4b:8b:
8a:9a:6f:bf:75:49:20:ab:99:2f:d0:a5:e1:85:0d:0a:4b:47:
c8:06:41:95:54:10:d2:17:11:e4:cf:7e:6a:93:a6:37:b3:1c:
c4:de:d6:1a:2f:60:86:37:fc:07:ca:e1:c0:c4:b3:30:d0:e1:
ad:97:98:d6:dc:af:76:85:47:ee:e2:ac:1a:02:2a:3b:e4:60:
ce:8a:cb:f5:78:48:83:fd:c5:b1:f9:19:fc:8a:84:dd:fe:1d:
7c:b8:d9:42:1f:ed:6e:23:dc:ad:9c:73:e2:98:0b:4b:3e:30:
2b:0a:ed:43:a3:c1:61:2e:ef:dc:b3:ff:02:56:c8:76:75:93:
cd:f7:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:04:56 2025 by rpki-client