Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa
File: c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa (raw, json)
Hash identifier: TAtdcHEtPG0X1NPKAom1u96oBI1UzkZrkoRrJxgrs4E=
Subject key identifier: 67:4C:4D:C0:7F:15:66:55:19:28:20:CB:76:68:C5:D8:4E:A8:23:CD
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584981D45EA3BE46D5F16EB7E440
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 398823
IP address blocks: 107.149.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5e:a3:be:46:d5:f1:6e:b7:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=78a01fe1-831e-46bf-9838-23b7362b86de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:72:9c:13:76:58:f3:f2:54:6e:5b:cd:57:
85:52:64:1a:0c:4e:e6:5c:70:81:b2:7d:e9:d0:9a:
3d:bb:19:ed:82:f3:38:aa:ea:36:b4:83:e0:34:86:
47:59:b7:05:c7:34:c3:dc:2a:48:8b:a0:71:68:38:
24:e1:ac:54:40:5b:ff:4a:91:27:d7:95:31:e9:8e:
9d:f3:4c:5c:fc:14:4c:02:e4:a6:4a:09:42:d5:53:
6a:09:28:5b:c4:68:65:07:67:f8:0f:ae:f5:3e:ad:
2d:45:b3:7a:4b:d1:96:c6:dc:03:f9:aa:44:85:db:
af:5e:36:91:d5:6b:be:a5:a2:23:47:4f:59:5f:d8:
66:f4:da:0d:5e:4c:a5:b5:aa:d3:40:1d:db:80:78:
ba:91:21:da:b0:c5:51:83:7e:32:a0:41:f4:67:f8:
09:80:44:3d:74:dd:46:fc:d2:76:7e:f2:60:36:2b:
1f:a2:6a:1c:48:ed:c8:08:81:70:fa:42:0c:fd:65:
b1:0d:a1:c4:f4:7d:63:ab:fc:67:83:63:52:82:04:
5f:92:96:b1:eb:cf:fa:03:bb:c2:02:ef:54:09:aa:
21:5b:ea:88:eb:b3:5e:ce:dd:9e:38:f5:70:16:2b:
d8:7e:b0:6c:68:85:ed:89:58:20:ae:fb:41:ee:dc:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4C:4D:C0:7F:15:66:55:19:28:20:CB:76:68:C5:D8:4E:A8:23:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:57:79:4d:16:11:12:78:c0:b1:28:07:40:56:e5:5e:ae:77:
ac:2e:2c:0c:31:a5:0a:89:d5:b6:ed:33:f2:f1:c4:b8:4e:1d:
60:55:4c:7a:e6:d5:65:86:16:45:c2:03:44:ca:64:03:60:81:
d9:98:5f:f5:e1:3d:1e:be:6d:16:bd:c8:2d:cd:cb:9b:30:b6:
e2:2e:65:63:43:0d:09:39:a0:e5:b1:7e:10:50:74:09:bc:dd:
d5:32:5a:02:b2:31:1b:50:34:a6:c3:2e:bc:af:d9:c6:24:bd:
c2:47:df:70:83:38:b6:d4:b6:00:e6:a9:f8:88:80:85:e9:d1:
6f:0e:a1:80:e4:06:2a:ad:4d:e1:9e:52:d4:ee:5a:b3:c9:a9:
0f:a5:9f:2d:6b:9a:48:6c:ee:1d:fb:e3:3f:57:1a:f8:b5:60:
55:ce:d0:89:46:4a:83:9b:25:b9:1f:a0:ef:c6:73:ea:ea:98:
89:4c:bf:86:9f:0d:77:15:d3:9e:ca:aa:08:9a:05:09:25:92:
67:93:3f:2e:ef:1b:b8:08:df:f7:25:c7:3d:21:74:56:b6:db:
59:1d:26:d6:e1:9b:b9:43:a1:4f:64:d1:41:e0:7f:9e:f1:f8:
81:b3:4f:0b:8e:e2:1c:59:23:ba:f5:2a:0d:6b:07:4f:bf:69:
8a:eb:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net