Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3031b8ab-37d0-3807-a567-ad748c7b1712.roa
File: 3031b8ab-37d0-3807-a567-ad748c7b1712.roa (raw, json)
Hash identifier: kCIaMudGIaTfz1Fh0uTvvcmTk/rGyxyfGqOSYIvwZzk=
Subject key identifier: AD:DA:42:8E:0A:4A:D8:E0:27:5B:2A:75:2E:AA:CA:73:6A:9C:C1:8C
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858488DAB4775A4A83906D8BD4180
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3031b8ab-37d0-3807-a567-ad748c7b1712.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 149.23.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:47:75:a4:a8:39:06:d8:bd:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=951b3bb9-708a-469b-a6e9-a35814641650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:47:e8:3a:c5:b9:73:e6:56:1f:63:3e:90:
99:ba:aa:22:f2:5b:7b:3b:7e:5e:62:c1:5b:88:65:
66:99:ca:77:94:fb:8c:ac:40:f8:c7:48:6e:ff:38:
8d:0b:52:a6:1f:b6:13:0b:05:c5:1e:87:43:88:2b:
9d:39:45:aa:94:b6:f3:e1:5f:43:ce:76:7f:87:f3:
a4:19:6e:72:bf:66:2a:4e:00:8b:1b:8c:58:d7:d8:
09:60:7d:03:db:e5:1d:90:42:3b:d3:86:cc:1d:49:
0d:1b:9d:0c:51:b5:fe:c9:c8:d9:c3:ac:0c:b5:cf:
d4:74:49:18:d1:fd:42:cd:cb:20:97:96:38:7c:e9:
cc:d6:77:31:ba:30:c8:7f:34:5a:4e:13:b4:34:04:
f7:ad:41:c5:eb:a7:9b:15:14:c9:f3:d5:f5:ab:78:
ae:89:58:a6:2d:9d:9e:e2:4e:8f:86:18:f5:7c:d6:
61:10:6b:10:7c:62:f7:69:63:ff:47:ba:4f:ac:90:
1d:02:6c:b2:12:24:25:a9:6f:82:ac:2a:af:21:59:
3f:e3:7d:90:04:68:3a:c7:fe:4e:5b:57:b6:9a:57:
2f:b7:a1:bd:d4:82:27:48:ec:a5:34:e4:e1:ec:e4:
9b:c9:61:65:9b:8d:bc:ad:58:0c:39:0c:b1:82:d3:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:42:8E:0A:4A:D8:E0:27:5B:2A:75:2E:AA:CA:73:6A:9C:C1:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3031b8ab-37d0-3807-a567-ad748c7b1712.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:07:42:40:f5:6f:13:ac:6d:51:fe:ea:6d:36:f4:71:fc:28:
4b:bc:71:52:4d:04:8d:4b:ed:0e:f3:95:62:bf:d5:e8:c2:47:
68:bc:cc:6b:ff:09:95:fc:20:b9:4e:18:92:d5:1c:91:75:6c:
fb:55:c2:6e:a5:a3:70:4c:9a:60:37:5f:d6:14:93:8a:44:8a:
41:6e:43:69:03:bf:8f:32:2c:54:36:d6:51:4d:e8:5d:3e:74:
52:b0:9e:ed:29:27:78:03:a8:0f:1c:65:7b:a9:0e:e2:3d:cd:
e5:d7:2b:c6:c0:a2:6b:6a:f7:09:fd:d4:20:46:44:49:46:7d:
63:22:2b:bd:83:29:ba:a9:5e:ac:2a:ae:75:3d:bf:5a:e1:fd:
d7:81:2a:aa:22:fc:40:16:11:2a:ee:af:5f:19:90:a0:37:01:
d0:77:0d:17:40:a9:44:2e:11:b8:47:ea:05:f0:52:a5:ae:ac:
57:78:0e:e1:75:c5:c4:1f:95:95:2a:2f:26:4c:7e:fa:1b:3a:
24:e9:00:55:92:3f:9d:74:4d:b2:97:b5:02:d4:72:ac:a3:ca:
d6:cb:25:93:52:43:b2:4a:ae:38:f2:d1:7f:ee:70:18:20:0f:
a4:18:1e:f7:05:4c:7a:f5:40:20:d8:a7:1d:70:7f:c0:09:00:
a3:4b:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:53 2025 by rpki-client