Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa
File: 8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa (raw, json)
Hash identifier: ijVXkMzXpL6lli65bz32VQLP+AJ4IkOljAnV7AMl77I=
Subject key identifier: BD:7D:35:AF:79:6A:48:BE:6D:52:24:3B:40:40:3C:96:94:26:35:4C
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F43285849350EAAFAF42ED89355584100
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 18434
IP address blocks: 147.249.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:aa:fa:f4:2e:d8:93:55:58:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=67f47890-9be8-42c6-8cf1-e47f444ba89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:31:81:f9:39:39:c7:d6:33:06:0e:9f:74:cb:
05:68:93:6d:4c:8c:b0:c5:38:fa:7c:d7:ac:89:26:
ea:2f:ea:0f:51:71:e3:24:10:69:f0:de:97:2a:76:
f3:e5:24:13:f4:4f:2a:98:30:1b:b5:2b:68:a4:01:
2e:d9:70:3f:44:86:f7:6d:65:a1:5a:65:be:37:e9:
b2:22:19:86:bc:23:eb:ca:49:3e:18:ce:81:8e:fa:
da:53:69:21:60:7d:05:4f:f3:6e:b3:e3:84:a3:92:
fb:12:e7:4c:17:96:a0:2a:6c:de:a4:e5:2a:41:d2:
0e:07:ee:f6:72:b1:52:e8:0c:5c:c1:d9:9b:e3:f9:
d6:ba:43:a5:e0:57:ce:4f:63:33:ea:fd:04:12:6b:
8e:1b:aa:cf:f3:ec:79:cf:2f:99:8e:81:86:21:90:
55:49:a7:97:4e:94:4a:3e:ee:b2:36:f3:7a:36:0b:
02:0c:d2:e8:b6:35:98:80:8f:34:43:57:4f:27:ac:
08:28:0a:f0:d6:fb:85:9c:e5:52:56:93:8d:3b:75:
e6:34:f8:45:dd:08:30:c1:e3:bc:c0:4d:b8:18:30:
3f:58:09:f7:72:ba:fb:d2:fe:0f:45:eb:3f:31:39:
f0:30:8e:43:c8:3e:7c:82:59:97:82:62:30:9a:4e:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:35:AF:79:6A:48:BE:6D:52:24:3B:40:40:3C:96:94:26:35:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:f0:b5:bf:ed:76:8c:b3:38:13:e6:80:d7:a0:45:9b:e3:46:
12:11:77:20:f4:2f:4f:ab:2b:46:5f:2e:74:57:b7:e8:9e:52:
e1:64:11:9c:4e:60:a5:b8:d9:82:24:4d:3e:a3:b9:c1:b7:e5:
e4:0a:c9:63:91:dd:4d:a8:42:18:62:b8:46:e7:1e:26:53:cd:
90:22:e5:38:00:ac:ee:b3:1f:13:cd:44:ba:fb:70:ed:07:82:
ce:64:02:2b:2a:6f:e7:df:9d:2a:6a:8e:13:bb:73:2d:fe:2b:
fb:0e:1c:08:aa:d4:96:66:b6:08:7f:ed:e8:fa:a0:10:cc:1d:
c5:1c:24:cd:66:fa:ab:c7:3f:72:52:fb:0c:76:1c:2b:9f:ac:
8c:f9:6f:6d:0b:1a:ec:c9:bd:76:af:ad:f7:d7:58:f1:9a:94:
f0:78:77:d9:1c:67:e3:e5:c3:60:cf:4e:7d:c0:f0:07:45:5c:
66:82:e8:c9:fe:c6:5d:4f:a8:2d:1e:65:b7:4c:98:b8:b3:18:
a5:3a:94:dd:e2:45:0f:5a:d0:29:22:52:fc:0d:1e:4c:38:32:
ea:63:3d:ee:22:31:24:68:50:7e:9b:72:c0:17:ce:7b:9c:00:
33:47:2d:5b:e5:51:06:f8:cd:84:da:ff:9b:e4:9e:2b:1a:f6:
64:c9:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:49 2025 by rpki-client