Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/cfaf1db5-a51b-3003-9278-e3adf5469f16.roa
File: cfaf1db5-a51b-3003-9278-e3adf5469f16.roa (raw, json)
Hash identifier: oQIyf5NyLv7BL9KDf6dPVUgS47ySY2ZR95Pu2Bk0me4=
Subject key identifier: 4D:5F:AA:4C:F1:85:7A:BA:15:01:A8:42:63:1C:BE:E1:FD:15:57:48
Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial: 010D0C9F432858492D47CDEAEA40758D47B059C0
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/cfaf1db5-a51b-3003-9278-e3adf5469f16.roa
Signing time: Thu 13 Mar 2025 18:09:53 +0000
ROA not before: Thu 13 Mar 2025 18:09:53 +0000
ROA not after: Wed 11 Jun 2025 18:09:53 +0000
asID: 54641
IP address blocks: 149.117.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2d:47:cd:ea:ea:40:75:8d:47:b0:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
Validity
Not Before: Mar 13 18:09:53 2025 GMT
Not After : Jun 11 18:09:53 2025 GMT
Subject: CN=151bf0b3-6e08-4c20-940f-121241abfde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:1b:6f:bb:b3:44:21:7b:62:fc:7f:b0:f2:
4b:ba:8e:c4:6d:59:e1:5f:24:2d:22:47:92:35:b9:
3a:ca:2b:d8:a4:9a:8e:36:0d:04:fd:c3:01:e0:23:
2a:18:38:26:a6:be:58:13:a7:0b:4a:a0:2f:ce:0a:
dd:94:a7:ab:c7:f2:c7:16:e2:0b:10:d7:9e:56:ff:
bf:5b:ec:65:d2:7a:ef:df:e5:df:51:19:b2:b2:69:
65:ef:97:ec:c3:d8:7c:dc:77:de:44:07:ab:ad:ac:
aa:e1:95:15:86:84:39:1c:82:86:83:b3:06:0f:f4:
ab:5f:08:58:71:3a:88:f8:ec:65:7e:b0:f4:25:c2:
25:be:0c:2b:51:92:c9:da:45:4c:5d:43:c6:4f:e1:
72:be:e1:10:be:7a:1a:a1:d1:79:49:73:82:9e:8b:
d9:a2:67:92:27:35:75:43:6c:6a:ea:01:0f:ff:31:
3a:1b:9d:be:59:2f:3e:f5:38:45:8d:31:55:3f:35:
3d:a4:b8:bd:25:47:de:3a:38:aa:b1:2e:a7:2b:f8:
ed:af:c9:42:f5:ee:c5:3a:25:09:ae:12:6a:3f:4f:
e4:09:5a:56:5c:94:47:5f:3f:f8:cc:66:ac:e8:57:
c0:7a:1d:e7:b8:94:5b:cf:51:53:cc:44:6e:83:3c:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:AA:4C:F1:85:7A:BA:15:01:A8:42:63:1C:BE:E1:FD:15:57:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/cfaf1db5-a51b-3003-9278-e3adf5469f16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
X509v3 Authority Key Identifier:
keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
sbgp-ipAddrBlock: critical
IPv4:
149.117.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:b4:a8:c8:a5:c8:f9:6f:77:e4:c5:1a:5b:e8:7b:7b:d9:9f:
de:f9:d1:af:cb:49:bf:3d:85:eb:26:74:5e:3c:ea:1d:9b:7d:
38:d7:47:e4:fe:f9:47:10:e9:50:50:56:f4:87:72:0c:e6:4d:
f0:92:23:da:33:a0:55:8b:32:7f:a4:df:17:e1:da:56:43:31:
19:25:cb:04:da:58:50:ae:bc:2c:24:b1:13:6c:5a:bf:ed:d5:
9f:7b:fb:da:78:86:06:d8:0a:53:2f:00:91:87:5c:db:9e:0b:
31:9b:28:73:20:0f:fc:86:55:b2:b5:f8:a3:e8:87:09:8b:fb:
25:9e:42:60:33:03:e8:fd:62:0b:bf:91:a6:d6:c7:15:d2:55:
b0:5a:09:ff:36:9b:ef:46:a4:de:83:ee:aa:0a:4a:1a:ea:98:
ea:31:cc:30:cd:d1:62:36:dd:cf:3f:a1:44:22:5c:e2:35:45:
3e:8a:c1:d1:ef:b1:7b:f8:1e:4e:6a:60:89:22:d0:17:77:04:
fe:9a:92:32:4b:b3:57:e3:6c:41:53:32:0c:d7:76:28:66:7a:
de:0d:74:ae:55:04:cb:65:c1:c8:dd:e2:e7:ab:7a:be:1e:2c:
0d:ef:39:ea:82:bb:8c:04:45:b7:b7:c8:a9:f6:94:59:6f:91:
10:3b:3c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:46 2025 by rpki-client