Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/06f84869-0410-3ff5-8f59-50940386cd0c.roa
File: 06f84869-0410-3ff5-8f59-50940386cd0c.roa (raw, json)
Hash identifier: RMFP+Co8CVMUcgbYMnb2uKAhLZauL4Tt6w1QkaRptgQ=
Subject key identifier: EB:83:9D:31:10:13:A5:C8:0A:47:74:85:49:EF:08:43:9F:2E:54:93
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F4328584949FE9517A2656C1543770780
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/06f84869-0410-3ff5-8f59-50940386cd0c.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 18434
IP address blocks: 147.249.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:95:17:a2:65:6c:15:43:77:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=c2c068e5-8495-479e-90b7-3831b0172e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:5f:e8:6e:a3:51:4c:15:76:46:1f:11:c7:
4a:b8:19:67:c6:8d:38:fd:29:84:b8:41:f6:49:02:
48:43:e2:63:84:1f:fd:7d:47:1a:c6:5a:87:53:17:
44:4f:e3:f1:37:cb:50:f2:85:1c:8f:84:ad:e8:e9:
36:aa:f4:cf:76:79:f4:b3:d3:9e:ee:e7:a4:7b:7e:
10:99:13:1d:95:13:bf:0e:cb:07:41:02:f0:57:d0:
ab:c9:f6:66:69:ac:e4:a0:57:42:d7:44:b9:de:bc:
0c:89:5a:f2:c6:7b:4c:78:ca:fb:97:e0:d1:98:e6:
6d:e1:2d:ed:7a:68:76:ba:76:96:d3:33:8f:3a:5d:
c3:f4:f3:0b:76:41:9c:e7:0e:e3:1a:36:3f:55:4e:
bb:5e:c2:58:f7:fd:40:1b:08:d4:48:f7:3c:7a:f0:
b9:f7:4a:13:a6:14:3b:39:64:4b:3a:b4:4e:1d:71:
8e:fb:46:72:24:5e:48:d9:6f:1d:63:f4:ab:d7:ca:
39:11:49:f8:f5:48:5a:30:08:ee:f8:3d:c9:64:93:
4a:22:6f:17:cc:96:71:ca:27:5a:d7:d1:1c:ac:24:
99:80:1d:2a:7d:32:77:8e:02:8c:23:6f:e1:67:15:
b3:92:ae:6e:68:68:7f:05:e6:fa:ba:ad:f3:bb:04:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:9D:31:10:13:A5:C8:0A:47:74:85:49:EF:08:43:9F:2E:54:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/06f84869-0410-3ff5-8f59-50940386cd0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:30:2d:68:76:e4:66:7f:03:5a:aa:61:ff:9c:89:bd:45:06:
2b:91:a9:f3:28:36:7c:5d:d7:52:e2:66:37:c9:db:43:53:e7:
2b:e2:e9:7e:f7:03:97:fd:b2:4b:6f:d1:b3:93:ff:62:c0:ea:
4d:e8:a9:1f:67:1f:e8:cb:f8:20:5f:c5:da:16:8f:cb:dd:1b:
38:20:df:2d:37:32:95:bb:1e:01:2b:f2:0b:5e:39:b5:1f:9b:
de:50:aa:5d:d2:fb:64:40:14:88:d8:a4:66:7b:f6:cd:38:5a:
75:2a:ca:3d:c9:bf:86:aa:14:ad:85:b7:09:f0:a5:6d:94:2b:
e4:c6:07:34:ee:32:f9:1a:cb:e4:96:ca:07:fe:87:83:f3:e5:
38:3b:1a:aa:45:6a:d5:23:7a:b6:2d:4e:22:d1:83:a1:b4:a6:
f5:57:75:6a:0a:c7:fc:95:18:99:40:da:eb:b5:3d:5f:e2:b0:
d5:58:c4:6a:c5:e3:4b:1c:81:e3:4c:eb:b0:c8:de:a8:09:71:
2d:62:8a:2c:fc:d9:d2:75:fe:a0:a9:49:42:4a:f8:4d:be:d2:
ab:7b:99:47:3d:a1:00:7c:81:99:69:71:69:c2:34:c5:28:58:
e8:43:63:77:a6:05:1a:95:2d:70:5a:4d:4a:5e:eb:21:c5:d3:
76:b5:c4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:47 2025 by rpki-client