Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa
File: 24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa (raw, json)
Hash identifier: w99ff/FubnsZzeG89IacIwgEmZipitndvVcmKB8hvIg=
Subject key identifier: 33:20:2F:C0:30:18:CD:C8:EC:D4:6C:CA:12:AE:87:A5:C8:90:C1:F6
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F43285848D0ABAF7FB3A1A5298C68FDA0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 202276
IP address blocks: 149.19.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:af:7f:b3:a1:a5:29:8c:68:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=c7cd0c8f-f493-4720-bb0f-9ea8eb39c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:45:f2:b9:0a:04:67:9c:01:35:d2:b2:68:
52:90:28:27:c5:f2:f1:44:f7:16:ab:f0:c1:6f:26:
db:b6:38:9e:7b:8e:ca:69:5e:6a:21:01:b8:70:1d:
ea:49:83:be:06:ca:21:03:65:63:bc:11:93:5c:cf:
8e:0b:45:11:5a:43:d4:e0:d6:92:83:f2:22:71:24:
04:f1:01:09:77:09:3d:7a:7e:e0:c2:67:d5:94:5a:
aa:03:66:ed:43:d5:05:e6:94:24:53:21:76:06:81:
0d:fd:06:7b:3a:1b:79:f5:92:38:6f:ab:eb:5f:bf:
d3:cf:2a:7a:ae:52:35:90:3b:86:5d:04:b9:3c:92:
d8:e7:eb:9b:d0:67:e0:dd:c3:bf:da:ac:c0:b2:e9:
ab:9d:28:5b:7f:07:8e:49:d5:3b:6f:a6:2d:80:44:
76:5f:a2:ae:e5:19:34:d2:6a:1c:56:f7:f9:d7:3a:
00:f6:c2:c4:8e:b0:3d:da:5a:f4:f4:d0:8f:1b:20:
33:24:ed:2e:04:f1:e0:f4:68:7f:12:89:80:e5:38:
20:98:99:2e:5e:0f:a7:c6:9e:62:e5:8b:b3:53:34:
26:5a:cc:b9:29:14:cf:5b:48:26:e3:65:8f:c3:54:
26:03:98:3d:5b:18:e2:cc:31:b3:6b:0a:b1:47:eb:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:2F:C0:30:18:CD:C8:EC:D4:6C:CA:12:AE:87:A5:C8:90:C1:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:f7:8c:50:86:8b:69:f9:3e:f8:95:8b:83:e8:ba:58:07:97:
8f:bb:c0:42:94:2c:72:2d:63:8e:4f:8f:f7:6e:03:0e:da:0e:
4c:2d:5e:a3:32:74:32:46:ac:8b:e3:15:12:be:b8:03:7b:04:
08:18:a2:6f:cb:25:1e:a2:91:36:ad:2b:65:96:ed:26:dc:75:
1c:d4:f9:f0:66:3e:69:38:31:06:71:e9:d1:fd:5d:32:b9:e0:
09:11:6d:e4:eb:43:a2:5d:37:dc:9e:be:ea:7c:06:e1:d0:c4:
d1:4d:a8:40:1f:a0:ec:65:f1:b8:b6:e6:cd:b1:95:7b:13:79:
31:53:2e:f5:d5:6e:29:9b:57:29:ff:71:6a:a0:ff:4e:36:8c:
1d:91:47:b1:5b:10:d2:25:cb:95:81:d4:8d:b3:7d:2a:15:4e:
37:ba:74:fe:aa:8a:fb:bc:79:0f:99:42:4d:e8:55:72:fc:fa:
c6:a6:bd:f9:c6:34:77:b4:93:58:88:ce:35:a5:6e:2d:42:f2:
da:b8:19:57:1d:de:32:8e:43:cc:a1:dc:a5:88:b4:81:e9:11:
2e:2f:4a:31:30:d9:d5:10:0a:da:91:04:c3:af:bd:3b:35:5c:
bc:2d:a5:f8:de:ed:69:e6:a5:18:ea:2d:a9:bc:b1:09:5c:ff:
3f:44:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:50:36 2025 by rpki-client