Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa
File: 0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa (raw, json)
Hash identifier: j4NU/Mk8X38IznZ3nMrlkAdAOy4O74Uk7SYfgyDyANk=
Subject key identifier: B2:E3:7F:5B:2F:7E:71:9E:4E:A5:65:37:A0:37:02:E7:9D:6A:56:22
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F43285848E16BD2DAEA83AD5CB68D2D60
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 33442
IP address blocks: 149.23.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:d2:da:ea:83:ad:5c:b6:8d:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=f774d1a7-3b47-40a3-ae18-d95751b0be75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:cd:4a:16:64:50:39:ba:53:40:71:f1:f2:
c9:04:26:3a:e6:4d:f8:5d:63:c0:9f:3c:46:e5:30:
97:d9:c7:20:20:46:64:38:ea:c9:d9:0b:19:da:8e:
d8:20:94:84:48:77:e6:f8:7d:9d:aa:1e:88:0f:e7:
03:b0:86:dc:a6:c4:51:bb:01:14:e9:da:44:d5:79:
94:88:6d:03:9f:de:4b:5d:2a:69:5a:e1:47:bb:ef:
1b:e9:3d:a7:81:6e:c5:ed:a2:d6:66:ae:8a:25:c3:
69:38:17:81:e2:98:ed:98:9d:6f:f9:46:1c:8d:1b:
71:1e:bb:25:7c:25:dd:e4:7b:6a:ac:64:74:25:6c:
e8:e5:da:53:ac:23:80:2f:ef:1f:3d:ad:56:3f:2f:
b6:21:92:0f:36:10:02:63:e6:50:a2:7d:54:e6:62:
a5:66:65:e5:c2:16:90:2b:89:a3:6b:4f:2b:26:12:
e8:20:ab:55:f5:65:99:6e:3d:86:b0:41:c2:9e:bd:
97:61:4d:b2:7a:5b:bc:02:b8:e6:21:8d:da:ab:4c:
6b:b5:9c:39:a9:5a:b3:6b:30:94:ee:48:3f:ce:c4:
b6:3f:bd:71:58:84:ba:54:92:7d:9e:9d:e7:1b:4c:
90:f8:54:6f:dc:9a:be:a3:74:7c:34:73:de:3c:b5:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:7F:5B:2F:7E:71:9E:4E:A5:65:37:A0:37:02:E7:9D:6A:56:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:33:e5:56:77:c5:fc:54:6b:a9:32:70:a3:9f:13:e5:ee:8f:
ce:8e:4e:49:b4:d6:19:8d:f7:15:36:64:60:9e:74:4f:f6:25:
7b:1b:74:19:a0:6b:36:20:59:bd:3b:a3:46:06:8a:86:88:49:
d2:6c:d5:21:9c:14:2d:c2:36:c3:d2:e8:5d:49:9d:49:ed:b0:
a0:1a:5e:f7:0e:1c:bd:3d:e9:ae:99:97:26:33:d7:89:6a:04:
3c:e0:8c:f0:e7:42:e1:7a:47:34:2d:c5:6d:7a:06:9f:0b:be:
fd:57:8f:3b:9c:f1:16:12:4e:48:7b:29:f9:c2:3b:1b:92:e4:
9c:0f:dd:74:08:0c:a9:33:e2:4a:dd:f8:93:30:b5:43:04:2b:
cd:59:02:1c:83:cc:5f:ca:81:ac:be:53:ff:6a:4b:6d:5c:e2:
55:0c:f4:21:fc:4d:a0:ae:74:48:f1:30:db:08:fb:bd:b4:a8:
6e:c9:33:c7:8c:3e:1c:1a:2c:15:44:46:5b:de:09:14:e4:0a:
dd:6b:f7:3d:14:f7:d3:ec:de:07:b8:66:d6:72:a4:a1:73:b1:
79:31:0b:e0:0a:6c:2d:62:48:a0:17:7e:5a:95:8a:1a:3f:4b:
b7:ff:e8:de:6a:80:3b:92:56:6f:57:70:8b:c4:ea:e8:44:71:
35:12:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:21 2025 by rpki-client