Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d3dbc1d1-07b4-37bd-b097-bce911bfb095.roa
File: d3dbc1d1-07b4-37bd-b097-bce911bfb095.roa (raw, json)
Hash identifier: 35L5iF15rAhQh4ZyarITQHwrmMp9rrtLqmC6FpCal8Q=
Subject key identifier: F2:50:C8:98:BB:64:0E:AA:3A:29:95:0C:2E:D0:FB:F1:A2:C3:09:70
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858486C2B251CAF08BC638B91C2B8
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d3dbc1d1-07b4-37bd-b097-bce911bfb095.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 11404
IP address blocks: 107.190.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:25:1c:af:08:bc:63:8b:91:c2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=2c1b5a25-5d9e-4b5b-a469-310a32b44eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:2e:11:8d:33:90:3b:55:a1:2a:88:14:90:
0b:5a:a2:8a:fe:f3:8a:b5:51:52:b2:74:3c:e3:7a:
a1:b4:90:cb:1f:ac:d9:7c:88:3e:38:00:4b:ab:ee:
b8:fd:71:67:25:b1:b6:df:6d:ab:0a:fd:32:52:84:
47:d6:49:67:71:81:fb:1d:9d:a2:a5:3b:8c:6a:7e:
bc:2d:4a:ba:35:10:fc:25:54:95:59:6d:8a:64:53:
b0:32:55:8b:9c:36:5d:fd:28:d9:f0:9e:b8:b2:85:
86:3e:b9:ad:5f:10:b9:3e:46:da:c5:d9:ed:11:c8:
3e:27:1c:50:fd:92:1b:03:9d:d3:4b:a3:ab:45:7b:
22:a7:80:77:e5:f2:06:eb:8e:cc:a2:e1:2e:94:33:
eb:cc:90:62:0e:5f:83:92:d8:85:ee:dc:c5:fe:ba:
c8:88:3b:29:10:d7:d1:86:27:cf:1b:fd:ac:a6:70:
3d:12:eb:a2:de:36:cf:d9:97:42:f9:54:25:6b:71:
6c:d1:57:38:03:b0:c9:49:b3:8c:41:c8:d8:04:56:
74:85:b0:60:fd:18:29:ef:e2:65:5a:de:e5:f9:65:
eb:73:65:73:8d:77:08:e1:61:1e:f8:db:5d:be:28:
10:61:2e:41:3a:da:77:ae:19:56:e4:19:9e:86:5b:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:C8:98:BB:64:0E:AA:3A:29:95:0C:2E:D0:FB:F1:A2:C3:09:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d3dbc1d1-07b4-37bd-b097-bce911bfb095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
107.190.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:55:45:35:93:54:30:ee:b1:81:50:62:65:68:ab:58:5e:69:
1d:c6:ba:64:be:51:91:a9:d5:d7:a8:e9:a4:e3:2c:c6:0a:fc:
de:91:b0:89:70:fc:ec:d5:34:17:4f:20:61:07:6f:6e:34:a0:
51:60:cf:e7:ed:f5:26:e9:94:9a:3e:ac:3f:b6:b2:cf:51:99:
30:0d:5a:9a:7d:1c:8e:9e:a5:24:34:7e:e2:2a:d2:88:89:19:
55:05:b9:a6:79:b4:45:20:bd:ce:12:64:86:9d:f9:f1:98:15:
70:25:b4:88:f7:f2:47:bb:8a:88:a6:a7:0d:22:d7:de:3c:65:
cf:d8:61:76:0f:ed:7b:b1:39:60:68:25:83:db:c8:fb:36:72:
b3:aa:35:17:dc:1a:b1:bb:a8:ea:88:86:a0:34:a5:91:ee:84:
2d:d7:0c:30:44:62:d2:60:ac:10:a0:59:ba:7a:20:d5:03:72:
0b:4a:76:d8:4f:0c:05:4e:a0:2b:41:bc:57:98:55:bb:93:a4:
3b:ea:45:0f:4d:c5:a2:e5:c7:f4:86:1e:d5:e0:4e:2e:10:bd:
f6:28:9b:9e:f7:73:06:9d:e9:38:33:fa:77:8a:f1:02:74:b6:
ba:59:96:59:d5:87:bd:a5:6d:b2:02:16:b5:e0:b6:4c:4a:93:
eb:0e:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:03 2025 by rpki-client