Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1c42fc53-a333-3df9-b546-2796440365ac.roa
File: 1c42fc53-a333-3df9-b546-2796440365ac.roa (raw, json)
Hash identifier: g25HLUYlN7p9rTPMH+u12TLkhY4Gkwq1XAMJAyawsN8=
Subject key identifier: 66:CC:80:FC:4A:75:7B:0E:FD:9C:DB:8B:08:4E:58:69:05:B1:C7:F5
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285849350EA0D05CF30448F4C50B00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1c42fc53-a333-3df9-b546-2796440365ac.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 9009
IP address blocks: 149.143.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a0:d0:5c:f3:04:48:f4:c5:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=fc069095-add0-429b-a809-7a068b042945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:5b:76:fc:44:b0:ac:ba:41:af:fb:db:c1:
2f:37:e7:9d:bc:7c:cf:89:4c:5d:71:2e:27:c8:41:
52:0f:89:22:a0:62:28:ef:5d:a0:f4:22:bd:58:b4:
74:fe:7b:51:6e:18:8c:e4:2b:0f:96:2e:b7:af:f4:
48:c3:fe:fe:ed:96:87:ab:1f:90:2e:8c:a8:af:9a:
f8:09:1e:aa:62:41:1b:20:72:64:36:6e:c9:dc:97:
1a:32:47:d9:d9:85:7e:c2:04:43:50:f1:d2:40:88:
f4:7d:2d:54:5f:ae:a4:bc:6d:b7:15:29:22:9a:26:
66:79:fd:60:80:ff:4b:10:5c:95:55:61:33:ca:e1:
88:97:79:29:2f:bb:81:bb:60:07:38:33:0f:13:8c:
52:06:e2:35:e6:2b:0a:b6:ee:32:29:16:20:1c:13:
01:5f:60:42:51:c5:55:96:f0:58:89:d4:ac:18:d1:
7d:f2:2e:b2:ce:05:e3:cc:4b:60:0e:6f:94:7c:a3:
05:f8:75:d9:fe:94:c7:e0:9b:97:b3:70:c3:b9:33:
29:aa:f7:d5:9f:02:94:98:be:e4:b7:5d:bf:d4:01:
ae:9f:25:0b:6e:59:0d:fd:60:c3:b7:93:3e:75:5b:
4e:97:55:2a:7e:44:75:31:84:c8:45:4c:d2:7b:e9:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:80:FC:4A:75:7B:0E:FD:9C:DB:8B:08:4E:58:69:05:B1:C7:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1c42fc53-a333-3df9-b546-2796440365ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:2f:ff:e7:c8:b0:2c:2a:c3:98:b1:25:ac:12:af:92:e0:94:
09:a9:54:e4:8a:de:58:c1:2c:45:7e:6d:ba:cd:ce:2a:58:fe:
e0:f2:f7:b8:8d:83:fa:40:a2:f2:15:be:4b:9b:c4:df:1f:e2:
f5:20:53:7d:a8:aa:7d:c9:6b:10:d1:ac:8a:d5:a1:e9:f2:1c:
92:08:e7:4f:66:38:3b:82:e9:45:5d:ad:6e:2c:2a:05:71:4f:
00:58:64:b2:01:7a:31:b9:79:f1:02:73:10:54:51:5f:af:62:
6c:87:35:78:5e:a4:0d:27:1f:5f:be:6c:f9:17:7d:e9:fd:a2:
81:95:90:25:4d:41:a9:d4:be:1f:7c:e2:ec:b5:d6:cb:94:a7:
72:55:12:f4:70:aa:4e:89:65:f8:da:df:1b:9e:99:f3:e7:9d:
d5:9a:5b:f7:4a:f8:4b:35:64:3b:96:24:90:69:b9:57:c5:be:
dd:d7:fc:da:d5:f1:17:58:93:a0:1f:3a:53:6f:40:2b:fe:0c:
a5:43:f7:00:72:40:72:14:49:76:9e:14:27:bd:8b:03:68:b2:
1f:e0:ff:53:a5:ca:ba:8d:7a:2a:0b:e9:ce:a0:19:aa:1a:2f:
2d:fa:cd:dc:d0:29:76:c0:7f:97:06:e5:e1:ef:45:01:2d:77:
b9:d7:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:48 2025 by rpki-client