Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa
File: 30a47725-29f4-31fa-88b6-51de560106ef.roa (raw, json)
Hash identifier: X5/evpJ7AEzvqYnlfGVVl5qUuvvnw0J0zRmPgUhQ4No=
Subject key identifier: 62:B3:BA:DB:15:01:D4:A4:2C:CC:0A:C9:48:01:C1:45:D0:6E:15:E4
Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial: 010D0C9F43285849350E9253CCF8183DB4079DE8
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 396905
IP address blocks: 149.19.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:92:53:cc:f8:18:3d:b4:07:9d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=94c73b97-df3d-49a7-9637-97980e0c5109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:39:e1:7a:34:b6:2e:da:06:b1:84:94:7f:
1d:1d:ef:5b:39:a7:db:19:cd:24:86:72:fa:d3:ec:
e8:c3:52:1e:1f:ec:dd:8e:3e:93:e8:80:3d:6f:8e:
27:2f:2a:e6:72:d1:9e:34:42:59:60:95:5e:43:5c:
29:8d:75:a0:c0:0a:4e:cf:2c:46:8d:e5:38:71:ed:
bf:ca:25:cf:de:88:d7:0d:e8:ba:87:cb:b4:21:0d:
66:68:53:93:4b:b0:9f:57:7e:a8:37:b2:64:56:07:
3f:6d:c0:bb:a3:cf:fb:66:78:49:b6:04:dd:2c:aa:
53:f4:c8:fc:5c:59:ca:fb:f2:61:74:d8:ea:5c:47:
a3:0d:06:df:95:96:50:86:c3:8c:86:c5:49:85:ce:
8f:b1:49:d4:c3:c4:18:2c:87:f7:e1:82:a2:c0:0c:
70:e1:f6:03:7e:44:7f:f3:94:8b:56:39:21:1b:68:
e6:6a:d9:ff:ad:20:d8:f5:01:87:df:88:af:0c:6c:
db:ae:f8:fd:02:9a:92:5f:76:63:cc:b4:6f:0d:78:
c5:59:c9:8f:e7:dd:21:48:6d:f7:99:90:08:76:d2:
0d:c6:f7:ad:3d:a3:ca:c1:b3:ef:ba:5d:a5:52:12:
65:e0:22:e6:21:c8:a5:c8:35:78:71:f4:a4:49:1d:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B3:BA:DB:15:01:D4:A4:2C:CC:0A:C9:48:01:C1:45:D0:6E:15:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
X509v3 Authority Key Identifier:
keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:43:61:a8:2e:86:26:fa:e0:09:e4:fc:c5:3f:11:7e:79:d4:
c3:7b:05:ed:40:2f:75:0c:9d:4f:9d:ab:f1:56:f1:4b:12:0f:
5f:d7:b3:b3:3a:60:e8:f1:42:08:cd:46:7b:15:c1:44:49:dc:
f2:a9:be:62:22:91:83:8d:86:04:53:4d:b9:82:f8:56:db:ea:
e2:96:2a:75:a5:f2:f3:84:1e:78:86:22:2e:20:56:2c:6b:fd:
fc:1e:a9:26:1c:c9:6f:b0:0f:e0:78:e0:16:51:96:d0:20:38:
3c:4f:d9:57:33:e3:b7:62:d2:62:90:8f:7a:71:f8:1c:08:ca:
c1:cc:88:0f:51:7c:b9:9c:39:f6:d6:cd:7b:97:1d:5f:12:29:
3a:0f:59:17:0a:f4:d4:6d:a5:1b:4a:12:e6:ba:e6:1a:f2:47:
1d:fe:6d:4e:96:e3:30:c0:89:e9:91:40:f6:28:4d:10:ef:4f:
da:fb:c8:30:35:5e:e6:1c:4b:8c:52:0b:1a:67:49:1a:e4:ed:
8c:07:ad:5a:36:80:a4:c9:49:62:36:f6:ea:95:eb:42:77:49:
fc:2f:37:fa:e4:ca:c4:2f:e1:81:34:22:59:25:e8:a4:28:ca:
71:2e:ea:97:e8:99:15:28:e2:f8:c6:2d:ee:49:36:ee:31:25:
d0:a5:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:47 2025 by rpki-client