Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa
File: 38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa (raw, json)
Hash identifier: m7Ro2JJH7p1Ns4mFb28Ipax4s26B1pJ5LKIrBZAxUf4=
Subject key identifier: 33:D4:B4:D6:74:3B:A5:C5:D5:E9:9D:D0:3F:D8:09:02:89:50:0F:9A
Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial: 010D0C9F43285848265FF563587742207B153E00
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 18914
IP address blocks: 107.161.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:f5:63:58:77:42:20:7b:15:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=78c7131b-77fa-4155-bd46-95adbfcb38e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:a7:d4:6e:83:e0:e5:cf:1f:b3:66:75:7a:
13:ca:ff:5d:a8:a1:f0:e6:3b:e4:85:45:65:1c:b5:
82:7b:46:e5:48:af:1a:d4:fa:80:60:f3:1b:4a:ba:
18:b5:f6:79:7c:4e:22:cd:d7:1d:a6:4f:e9:0c:52:
33:fb:9f:e4:17:4a:0e:da:16:87:88:7b:d5:7a:8b:
b2:08:82:ce:06:9b:6d:a5:02:25:9c:17:58:3d:de:
69:37:0d:1f:01:00:bc:71:fd:53:3c:aa:c2:b4:57:
56:f5:dc:ba:c2:c5:08:5a:12:8b:8e:8e:85:15:9f:
32:00:61:27:ab:ea:ba:6a:e8:92:95:cd:41:88:46:
23:8c:c3:34:ce:56:d1:de:52:a0:dc:4e:c7:56:b6:
ed:93:28:5e:82:79:bc:9e:ac:6b:09:3a:26:e3:fa:
42:de:80:af:65:c9:35:48:43:cf:28:c5:56:c1:fa:
38:1d:2a:cb:e8:84:51:89:be:70:de:9d:0a:b4:1b:
7a:db:7b:a0:a3:d8:16:f4:c1:ed:53:6b:ad:4d:76:
b3:cc:5f:cf:d8:86:e5:8a:44:a7:e1:52:d4:a1:e6:
5e:c6:ca:7b:47:60:51:36:79:a3:40:b7:ef:02:a4:
2d:7a:ee:a2:7a:94:01:59:96:ea:30:6c:22:c7:ab:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D4:B4:D6:74:3B:A5:C5:D5:E9:9D:D0:3F:D8:09:02:89:50:0F:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
X509v3 Authority Key Identifier:
keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
sbgp-ipAddrBlock: critical
IPv4:
107.161.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:70:bb:9e:0e:73:fb:37:8f:73:f7:d0:8a:01:05:f2:b0:e5:
86:97:19:7f:14:23:3c:70:99:1c:07:2e:95:dd:aa:6a:91:0e:
47:19:6d:d8:78:75:5b:87:93:c8:d6:7c:45:a1:f3:4b:74:41:
30:9c:90:a4:12:61:8b:b9:5f:0f:7f:37:ef:6c:23:f0:3b:1c:
9f:94:9e:67:0a:b0:9f:f6:c2:b4:8f:14:ef:96:f0:2c:be:b0:
78:29:87:63:f0:b3:7a:62:1d:35:b6:46:28:c0:08:ae:2a:68:
5a:4c:8d:e2:7e:ad:f9:8c:73:f4:22:f8:a4:83:0f:15:1f:7d:
04:b2:f9:ca:21:ce:9e:31:7d:f9:5c:d1:c4:1d:3f:2c:94:5e:
d6:aa:ec:5f:db:0a:fc:86:91:4f:92:96:28:65:b0:46:83:86:
ef:66:08:ad:2d:1a:22:7b:9a:6b:8c:c0:aa:8f:46:87:49:a6:
e0:3b:b4:b1:81:c3:86:ba:72:7a:04:8f:21:e8:e7:b5:57:27:
61:9b:51:7b:4f:51:f5:91:78:53:50:8f:56:0e:8e:8e:2a:4e:
ff:e6:e8:1b:a9:32:a3:b1:dd:e5:12:bd:dd:87:75:62:a8:a4:
4e:83:d5:b1:81:53:20:9f:c5:16:39:53:ab:85:ec:1f:0b:6f:
2a:56:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:12:56 2025 by rpki-client