Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
File: 6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa (raw, json)
Hash identifier: Y5hAGyOQSX5qYySfsVMlpgNziWjfWDGibIC0ghQ7tvU=
Subject key identifier: 1C:4F:95:7F:05:92:4F:50:4A:2A:52:96:04:2B:1D:A7:50:02:8D:58
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858488DAB3C9C71AF5CB45C842040
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 33442
IP address blocks: 149.23.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:3c:9c:71:af:5c:b4:5c:84:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=58f0281e-32b5-4a92-82bf-a84d1b45ea07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:7d:91:fb:8e:1a:48:ec:fb:9b:e3:1f:b0:
8a:79:9c:34:ff:5f:63:9b:24:eb:10:eb:bb:28:c5:
a1:b1:2f:7f:70:78:0f:67:44:5b:61:fb:00:51:b8:
9f:c1:44:ea:a8:99:24:da:40:67:77:8d:92:cf:de:
16:b1:ed:0d:54:f7:6b:ed:46:3a:cc:95:df:b0:6b:
b9:ca:7b:21:16:45:76:be:fe:17:2d:e8:0d:2d:01:
f3:4b:e8:07:f3:e6:d0:08:27:c9:7a:f9:14:a8:1b:
43:24:bc:8d:a1:e5:03:31:41:a7:2d:98:59:60:06:
43:87:10:22:ad:62:54:47:e6:b7:e9:2e:65:42:2a:
39:dc:9a:fc:c7:d7:13:77:da:68:8a:6e:b9:61:4d:
95:4d:e6:6c:19:7d:03:4d:9a:f5:9f:c3:91:d2:98:
20:b6:72:70:53:e8:07:f1:3f:42:f3:6f:f9:fb:d5:
3d:9e:73:e1:d9:2f:5f:6e:30:e7:78:6a:38:f7:75:
ae:38:ec:28:74:bf:1b:4c:e7:72:53:ca:c3:ef:1d:
84:8e:ca:ba:8f:0f:05:d0:71:2a:cf:80:4d:70:6a:
38:28:8b:79:21:71:d1:df:c4:a8:ff:ee:c9:a6:d6:
12:e0:d3:08:63:90:14:dd:79:11:ac:a2:d5:8b:a1:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4F:95:7F:05:92:4F:50:4A:2A:52:96:04:2B:1D:A7:50:02:8D:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d1:82:f5:c7:40:74:b3:e1:a3:d1:03:c0:a5:cb:76:e0:aa:
a3:d1:9f:31:0b:fe:b4:4e:7b:7c:00:c6:14:bf:24:c0:9f:5a:
be:58:62:cd:a0:53:26:8f:d5:e3:aa:24:b0:d0:3a:11:7c:11:
6b:cc:2c:90:3d:3f:5c:6e:e2:30:95:95:9a:44:75:a6:5b:a7:
09:00:36:23:78:26:a4:f1:5a:56:62:37:dc:26:72:28:03:c4:
c3:20:7c:f0:6d:ac:24:fa:27:2f:f0:42:a1:93:96:1f:90:2c:
20:9c:14:14:08:eb:9c:71:e8:32:62:f7:5f:f6:a9:f3:ce:78:
f4:9d:c0:1b:44:9d:46:fe:ea:a2:fe:53:a8:99:a0:0d:ce:13:
93:db:23:b2:ad:a8:f1:45:56:09:9d:13:2c:20:80:61:35:e4:
77:83:45:55:c9:4f:94:cb:c6:1f:9c:1c:44:bd:77:95:88:bb:
f3:64:89:b1:b0:cf:1a:53:f6:16:d1:e9:a9:66:01:2c:1b:52:
f8:7b:2c:d3:13:e5:6c:c5:31:61:ca:3c:5c:8d:d9:e9:10:f6:
30:e0:24:73:77:da:1c:20:43:e1:12:cb:7c:f7:01:50:ec:08:
f5:25:d9:7b:c3:b3:05:fb:d0:78:c7:07:7c:21:dc:10:98:c7:
23:f6:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:41 2025 by rpki-client