Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65d06cf7-8099-43d0-8296-1498027241df/af1fd21a-e0ab-3e63-8fc6-4a97e82db539.roa
File: af1fd21a-e0ab-3e63-8fc6-4a97e82db539.roa (raw, json)
Hash identifier: zGW4J9Zu5btmKZkqMaiJ2dUwED8Xogy9i1F334vukE0=
Subject key identifier: 41:9B:F3:A3:12:F6:44:3D:09:B1:62:E1:84:74:B2:C3:83:EA:47:68
Certificate issuer: /CN=65d06cf7-8099-43d0-8296-1498027241df
Certificate serial: 010D0C9F43285846C0EA89170C92A2476987DC00
Authority key identifier: 86:C8:F6:96:83:BD:E5:34:04:E9:0A:6C:DD:C7:56:16:70:81:74:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65d06cf7-8099-43d0-8296-1498027241df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65d06cf7-8099-43d0-8296-1498027241df/af1fd21a-e0ab-3e63-8fc6-4a97e82db539.roa
Signing time: Sat 03 Aug 2024 13:00:37 +0000
ROA not before: Sat 03 Aug 2024 13:00:37 +0000
ROA not after: Fri 01 Nov 2024 13:00:37 +0000
asID: 14618
IP address blocks: 151.148.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c0:ea:89:17:0c:92:a2:47:69:87:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d06cf7-8099-43d0-8296-1498027241df
Validity
Not Before: Aug 3 13:00:37 2024 GMT
Not After : Nov 1 13:00:37 2024 GMT
Subject: CN=c5c42f00-4d79-4529-a4f9-bacc11f58af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:b6:9a:60:a0:21:7e:1e:d5:c8:63:f1:d6:
97:44:57:9b:c9:0b:9b:e5:b3:f7:3d:50:87:3b:3b:
6e:81:47:e9:95:28:c8:f7:4a:ef:2d:9a:e6:b4:e9:
de:ef:77:73:43:cd:12:4d:c4:79:d7:d6:b5:8b:68:
af:68:7e:ae:78:e0:b5:90:1c:d1:3f:ea:0d:9e:69:
b6:9f:35:ff:28:a8:61:cf:85:e4:88:b1:fe:40:df:
9a:01:c9:b8:20:a4:f8:06:36:b9:f2:e2:07:86:96:
cb:6d:b3:87:d8:81:ba:5a:c9:17:20:d7:73:80:41:
1e:8b:f1:b3:98:b5:64:a7:09:d6:33:a0:60:7b:ad:
0a:2d:f9:1e:e1:00:78:dd:0e:91:47:a4:5b:3d:6d:
bb:91:27:66:c5:26:b1:05:1d:d7:d9:f4:7a:ae:a1:
74:f2:fe:94:fc:31:2f:d5:67:12:08:70:d5:c2:9d:
73:d7:e3:96:af:33:72:d3:14:30:33:d0:e0:89:d8:
f7:c5:fe:01:19:73:b0:87:fc:a8:30:0a:2d:b0:e8:
b6:00:fc:fa:54:95:31:9e:24:be:b9:6b:2d:dc:50:
fb:1c:38:48:13:70:50:2a:f9:af:a5:ff:8b:c2:5e:
ed:8b:d5:a1:f4:cb:83:fe:12:31:d4:c0:dc:d4:34:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9B:F3:A3:12:F6:44:3D:09:B1:62:E1:84:74:B2:C3:83:EA:47:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65d06cf7-8099-43d0-8296-1498027241df/af1fd21a-e0ab-3e63-8fc6-4a97e82db539.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65d06cf7-8099-43d0-8296-1498027241df/65d06cf7-8099-43d0-8296-1498027241df.crl
X509v3 Authority Key Identifier:
keyid:86:C8:F6:96:83:BD:E5:34:04:E9:0A:6C:DD:C7:56:16:70:81:74:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65d06cf7-8099-43d0-8296-1498027241df.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:f0:ad:de:d7:8d:ec:66:56:83:64:de:03:85:0b:ed:48:85:
a8:d2:87:72:01:a0:9a:b9:a4:33:9b:20:d1:81:ae:1f:13:6f:
3c:df:53:c0:c5:bb:74:e1:02:d7:1e:ca:85:46:3a:28:47:ca:
35:21:dd:5b:70:c1:2e:0e:ff:98:bf:e3:f0:38:33:fa:e3:35:
9e:45:94:9c:f0:32:93:bc:e0:4a:20:ca:d2:50:51:bc:98:7a:
47:34:96:3f:61:e0:7a:46:22:40:fa:6c:36:09:94:24:f5:c1:
2c:c1:bb:39:3d:93:73:f1:b1:f4:27:c1:5f:7b:c4:c4:b4:b0:
0b:e4:3d:6e:58:25:ba:e7:cb:10:35:35:cf:a0:00:63:e5:38:
63:84:d9:dd:1a:10:f5:6a:3a:ef:6e:58:fe:b0:f6:44:00:19:
6e:fe:a3:e1:cd:dc:df:bf:09:62:ee:db:e6:eb:51:98:ce:90:
37:f0:a5:4a:8b:ee:eb:5b:9a:98:95:71:54:29:79:a8:29:e6:
30:4c:d7:d8:1b:02:17:b4:d7:49:af:53:c0:ac:af:ae:96:40:
77:d4:76:f3:a4:82:b0:03:1e:cc:be:92:ae:7a:d8:77:d7:2e:
40:41:1e:99:47:66:69:17:7c:f8:14:8b:d9:02:17:be:b0:6f:
37:b7:b6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:13 2025 by rpki-client