Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa
File: 8ecb86e6-8311-3057-8829-f64fb18d5879.roa (raw, json)
Hash identifier: SUmrwNldovKxNG0+drBdcFi8YI6X7d8QYd+cdhtcs4c=
Subject key identifier: D7:A2:22:0E:F1:F3:8E:5C:FC:DD:C4:15:78:3A:33:40:3F:04:A4:B7
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F43285848D2113B5463BFB8CE2D657BE0
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 33442
IP address blocks: 149.23.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:3b:54:63:bf:b8:ce:2d:65:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=9a9174db-3a8a-4f24-880e-153b9084ed39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:85:9d:6d:20:76:4e:89:1e:8d:9a:41:71:
95:be:27:36:b6:ce:80:3d:ac:67:e1:77:29:29:14:
e9:f4:24:49:da:8e:07:23:bd:96:89:42:e4:2b:1d:
57:7a:1d:46:99:fa:78:6d:bd:55:23:05:67:c5:f9:
cc:ab:48:e2:7a:63:09:d3:e2:cd:4a:ab:65:ad:bc:
8c:4a:30:a2:d9:ee:e5:e9:49:37:20:d5:21:a9:a1:
39:df:40:18:3b:7b:de:5a:2f:24:b8:07:5c:a6:c3:
86:e0:d2:7b:51:13:f9:81:17:b7:19:47:8b:93:99:
d7:1f:15:2a:09:94:d3:be:2d:7a:1a:12:35:02:7f:
fb:9a:ff:0f:47:d9:69:2f:fe:99:64:53:db:30:83:
1f:5f:80:65:5c:b6:ca:b2:c5:4a:93:e2:2a:65:c9:
ac:e9:cd:25:cd:d0:f8:47:49:1f:2b:1f:f8:c5:10:
39:9f:07:ec:e5:b4:b5:33:8d:5b:9a:d5:e7:2b:69:
41:85:4c:c0:1d:35:ac:ca:89:b2:54:a3:f7:cb:ac:
4d:bc:11:ac:a2:cd:92:8c:a0:c4:3f:25:c5:b5:ca:
74:60:03:e4:aa:da:ba:21:08:31:58:5e:fe:e1:3b:
60:be:49:9a:ff:54:c7:7f:66:a2:e4:6c:1e:38:64:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A2:22:0E:F1:F3:8E:5C:FC:DD:C4:15:78:3A:33:40:3F:04:A4:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:cb:7e:03:1c:d7:84:17:a7:7a:24:60:72:b9:e1:26:58:b8:
2c:de:b7:c6:11:f4:5a:d2:fa:6a:8a:e1:a9:eb:0d:6f:0f:34:
80:9e:6f:70:26:9d:92:a6:68:6c:92:f7:46:9e:40:07:43:be:
9c:d5:af:fb:56:c8:c1:9f:91:b4:46:c1:07:fb:d5:10:39:be:
ef:0a:79:11:20:c3:a0:a4:9f:36:11:69:09:c2:80:57:04:e4:
16:28:b0:68:67:58:9b:96:bf:59:8a:3c:22:16:92:46:11:02:
41:19:e5:11:16:f4:22:b8:74:81:25:73:6f:b2:71:98:34:fa:
79:21:15:ca:49:77:91:c9:51:a8:79:6c:4c:97:8a:4e:62:da:
06:a0:b4:63:a7:39:87:3a:36:61:a2:6c:4c:f2:7e:b8:a6:fa:
bc:73:cd:ff:b7:b4:4f:39:a7:fa:2f:34:a8:ef:de:7d:00:12:
5b:28:97:17:1e:e9:67:09:5f:dc:cc:10:6e:3f:53:d4:dd:d6:
4b:c0:c2:60:f6:f9:bd:f7:db:a1:c5:a4:17:a4:bd:b6:d9:8b:
7d:9f:34:9f:ea:37:22:55:83:88:7d:c5:7b:ef:a7:39:bb:ce:
15:fe:bc:ec:68:fe:0f:99:ca:fc:3a:27:d3:21:cf:68:c4:15:
a8:6b:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:12 2025 by rpki-client