Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa
File: a3acc875-a509-3b7a-b1bf-996d362e2ead.roa (raw, json)
Hash identifier: VenNgxiWxHgFal3LpHm8KAxKRzkniaOQvQN4BVKNpTo=
Subject key identifier: 19:7B:77:36:BA:9E:4A:F2:80:17:DD:55:2D:39:98:1C:1E:02:73:A0
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584981D45F6CDC7DE814B7645740
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 399195
IP address blocks: 107.149.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5f:6c:dc:7d:e8:14:b7:64:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=4c3cb0d0-6b21-4402-be8a-61928eb60f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d9:8a:33:96:c0:3d:0d:2f:d9:42:62:08:26:
3f:89:a2:92:68:2d:77:a9:7f:37:4d:1d:dd:73:36:
d4:cf:69:8c:87:8d:31:85:7e:cb:fe:74:d8:b3:72:
46:b4:28:92:75:46:ce:0a:ea:15:53:28:39:aa:8f:
09:f6:3c:28:d1:86:f3:cf:b5:a0:16:a6:86:e9:e2:
9c:39:81:7a:64:64:45:ff:0d:60:38:31:73:89:02:
42:65:d8:fd:78:05:7b:9e:9b:85:33:b2:86:0e:d2:
18:d2:ab:30:2f:ba:20:06:6a:74:64:bc:ec:8d:db:
e9:c1:8f:fd:ab:75:ed:e3:8e:ef:0c:df:cb:9b:08:
6a:66:db:1a:2e:ca:4f:8f:13:2e:28:ce:a4:fd:f4:
bb:f5:52:96:cc:d6:e0:5c:56:80:42:7d:9f:b0:4c:
54:ef:1b:c5:37:6e:72:8d:87:91:95:bf:c3:66:33:
25:47:57:66:a4:6e:98:51:8b:5f:23:a9:e4:53:dd:
a3:0f:2f:97:9c:3d:bc:3b:e1:c1:1c:33:68:87:3f:
2c:99:17:56:26:d8:99:0a:fe:bf:ba:c1:db:c2:a1:
2e:f6:bc:40:45:f3:76:79:65:36:0a:be:be:02:cb:
e2:0d:48:74:b0:ec:33:b2:4c:1e:3f:71:f3:5b:a3:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:77:36:BA:9E:4A:F2:80:17:DD:55:2D:39:98:1C:1E:02:73:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ac:11:dd:ad:8b:1c:52:19:0a:e6:6c:25:af:23:4e:fd:a3:
07:9a:3c:e2:bc:ec:82:83:64:7d:0c:d8:b8:69:9b:b9:67:80:
05:22:78:31:e0:d1:fd:8a:ad:03:e1:30:03:eb:78:21:89:07:
56:59:a7:98:8b:57:9c:56:56:f7:1e:81:8e:3b:94:8a:4a:4a:
da:de:11:d5:27:72:59:a1:62:07:38:37:f4:5e:07:7e:00:03:
b1:bb:be:c0:47:5e:84:99:9f:24:fb:29:c6:35:75:fc:35:2c:
c0:c0:64:bd:0a:7c:3b:b9:96:54:c0:fd:36:c3:07:cf:5e:16:
fb:c6:55:a3:40:e5:57:9e:3d:00:8c:0b:99:55:15:da:21:e2:
a0:33:74:4a:87:3a:59:25:e7:8e:46:64:15:de:d5:23:8b:86:
d2:a9:6b:af:13:1d:18:dc:41:1c:98:db:93:bd:e0:32:8b:4d:
42:62:3f:1e:78:ec:ef:39:f6:db:d5:ac:b2:23:ba:7d:45:24:
5a:78:43:f9:17:61:99:25:70:87:5c:ca:22:70:a8:97:fd:89:
af:41:43:02:5c:15:3d:e0:2f:3c:99:ac:13:a9:93:8e:26:a9:
77:b5:65:9b:ae:a9:c8:a6:bc:71:2a:49:2f:70:23:88:33:e3:
b6:a0:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net