Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/54fd4066-0f9a-3f61-9122-ac13547aeb65.roa
File: 54fd4066-0f9a-3f61-9122-ac13547aeb65.roa (raw, json)
Hash identifier: rKyIseP7YUzKuYo9onhpR1PfEU2f+ZSq84TdvE5fSSM=
Subject key identifier: 6D:C9:51:56:14:49:DD:3D:BE:D3:C7:5E:FE:25:28:68:F4:D1:5F:3E
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858488DAB3D06B28223E459153160
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/54fd4066-0f9a-3f61-9122-ac13547aeb65.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 33442
IP address blocks: 149.23.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:3d:06:b2:82:23:e4:59:15:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=91a71485-b676-47c9-b653-3e642681f8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:6b:30:93:2a:50:6b:5e:e5:cc:81:1f:23:
89:6b:4b:24:37:ef:fb:54:9a:12:c3:7c:da:2a:65:
77:9c:37:75:d6:49:8c:d4:b1:06:3d:1a:8a:2e:06:
a8:a6:63:73:a5:5e:69:09:8f:69:07:c7:06:01:68:
1e:20:fe:26:8e:3d:02:22:3c:c0:f2:0b:b7:bf:9f:
3c:42:c1:72:42:99:4d:e8:37:9e:22:4e:7b:4a:ab:
f5:d1:1f:a9:48:17:4b:c4:1a:c0:1d:a1:20:49:e0:
3d:d9:dc:e1:2f:69:25:4f:4a:74:b1:16:20:43:3d:
6d:c2:73:88:ff:f0:0d:38:a3:72:47:53:8b:de:5f:
83:cf:f8:71:e5:cb:7b:54:bb:87:b6:3c:13:ac:f3:
a2:1f:0b:45:5e:d0:be:38:02:12:1c:d7:18:9a:33:
0f:a2:a3:22:29:94:96:57:71:0c:dc:b4:35:2c:99:
4f:3d:8a:f7:9b:81:01:85:2e:d0:75:fd:fe:2e:4b:
07:96:ae:a2:d1:df:05:86:f3:d9:7d:9d:08:f8:d5:
30:91:ad:d4:4e:48:e4:28:60:50:e4:6d:e2:e9:d8:
56:e2:06:aa:8a:64:7d:29:6b:c4:b3:c9:47:92:a6:
cf:c5:b7:7c:27:e8:e0:6f:6b:50:d4:27:5d:71:29:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C9:51:56:14:49:DD:3D:BE:D3:C7:5E:FE:25:28:68:F4:D1:5F:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/54fd4066-0f9a-3f61-9122-ac13547aeb65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:89:3c:66:b3:c0:c9:29:d1:0c:f7:26:59:4b:fe:a4:35:93:
0c:21:ce:fa:80:c9:cb:83:78:c5:81:6f:aa:6a:46:e1:81:3e:
4d:7a:64:53:3d:2c:f4:3a:4d:b2:9a:eb:1d:66:28:5c:bc:e1:
d6:bc:ae:2f:ce:82:25:fa:28:ef:c4:b5:d0:98:de:7e:cd:ae:
30:d7:6c:18:ed:3b:a5:2f:16:11:42:be:33:12:d1:9c:77:ff:
f6:e7:9f:29:de:36:2d:ce:8e:26:9f:c7:6b:fc:bd:45:1c:e8:
26:61:38:e5:60:cb:d3:9b:70:23:a9:34:30:ce:24:1e:27:c8:
2b:5a:ec:90:4e:ef:aa:31:f2:8d:ea:30:94:0c:2b:00:df:6b:
5c:c5:96:d2:87:4c:de:ef:43:8f:ec:d5:3b:ab:f0:8c:23:4c:
bd:ee:52:d1:e1:5f:f2:9f:71:ee:6a:f1:99:47:8f:69:13:80:
7a:e0:13:40:7a:92:d7:d2:39:19:69:bc:01:03:e9:46:79:98:
77:f0:93:d6:7d:e9:5e:2a:fb:0f:6f:ba:c3:a2:3c:f4:98:f5:
d1:55:9b:1d:79:2f:04:d6:13:b6:2f:e5:44:b2:9e:fe:6c:5f:
c7:8f:39:31:fa:ac:da:90:c5:dd:e2:e7:8b:18:0a:02:17:a6:
35:75:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:44 2025 by rpki-client