Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa
File: c2216585-71fc-34f0-bfb6-1c152fd66dba.roa (raw, json)
Hash identifier: eIIWjP9HlHmONNJ23X7wPcDONzmsPMaOoCirnBOUf2M=
Subject key identifier: 1D:AC:BD:19:67:C8:84:4F:72:BF:8C:E7:1E:DE:3F:DE:AB:C9:AA:97
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F43285849393E75A1E5D7909E8BF51480
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 18659
IP address blocks: 147.249.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:75:a1:e5:d7:90:9e:8b:f5:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=771e2b60-8a51-47d1-aadf-d2d58364c64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:42:88:91:67:31:52:ac:9a:57:83:e1:24:
e9:69:2c:6b:17:dd:d1:58:ea:33:3d:58:a2:b1:76:
0f:17:63:2a:36:31:09:c4:26:af:56:ef:6f:66:61:
85:34:f3:0e:fd:74:87:2f:2b:9f:5f:21:ff:28:e2:
b3:49:87:e5:c7:1a:ff:b6:ff:43:e1:c6:70:fa:bd:
4e:bc:99:40:56:c9:19:1e:3c:1e:f0:26:5c:a0:75:
72:e0:92:dc:f2:39:50:b6:bb:ba:d4:c3:e2:d3:bb:
f6:95:70:88:2d:09:f9:f9:c2:e9:e1:94:53:51:72:
c1:c6:67:03:90:51:63:36:c6:88:47:12:b9:6c:e0:
0c:cd:97:35:a0:8e:3e:bc:b2:52:d9:fc:b1:b0:ec:
74:11:7f:84:a6:7c:5f:41:4c:38:d4:2c:d7:3f:f9:
10:d5:c3:be:89:f1:27:7d:40:27:be:77:3c:cd:05:
40:7c:84:fd:cf:db:16:12:87:6d:82:b1:30:65:e4:
fc:4a:55:8e:a2:6b:4b:2e:95:b2:48:24:c0:92:bd:
e8:18:53:69:78:17:8d:88:96:1e:7f:52:e0:d6:1f:
2c:65:9d:31:00:f6:4b:eb:7c:90:ef:c3:82:50:b3:
21:25:6e:c6:dd:f0:17:f6:b9:eb:0c:14:4f:07:03:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AC:BD:19:67:C8:84:4F:72:BF:8C:E7:1E:DE:3F:DE:AB:C9:AA:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:d3:47:25:1b:2f:b1:57:07:a9:14:c7:a1:39:25:9b:8a:18:
a3:9d:cb:9e:43:ed:2e:09:ed:46:ef:79:af:18:ff:1d:c7:d2:
90:f5:12:e4:8f:5f:35:a0:2e:d5:90:6b:c8:7f:6b:14:76:ac:
e2:fb:67:cf:71:01:8e:03:2f:9d:1c:4f:38:74:07:13:2b:3c:
be:cf:e3:70:3d:a0:1c:d7:c2:cf:e5:cc:b0:a8:70:c0:a3:f7:
57:af:72:27:e7:9d:bf:7e:d9:82:6b:85:77:d1:35:7e:52:76:
22:c4:2d:1f:d2:a1:a1:20:e1:03:c9:a9:b9:d4:02:47:5c:d3:
de:7d:4d:d5:a9:b2:10:ff:cd:e6:2a:8d:44:c7:71:5b:f5:40:
7f:21:01:02:dc:9f:f4:a2:72:01:a0:31:c7:1a:6c:d7:2d:dd:
f2:51:51:a3:3d:df:a4:b3:53:85:dc:07:7e:ae:b7:47:a3:99:
be:ac:c9:c6:08:73:7e:70:8a:3b:84:b9:6f:f7:4e:50:19:02:
ee:60:58:32:2a:7f:6e:c5:c6:52:ea:09:ef:cf:76:74:21:14:
00:08:93:38:91:87:ce:de:fc:8f:24:b5:fd:38:7a:5f:d5:a7:
2e:5c:b6:cd:59:f2:1a:22:1f:81:41:cf:ca:ba:a8:17:8f:3c:
f6:e8:e9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:06:48 2025 by rpki-client