Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa
File: 38342da4-e45f-3645-a61f-9ff395a6995d.roa (raw, json)
Hash identifier: Ok17sDbu2xu6WNocJ3/7hEJRA9f8NUDFOkBzyxex4qE=
Subject key identifier: 3E:97:C3:70:FA:44:99:9C:D4:D6:B2:EA:BF:4B:5B:E9:D5:35:A7:FF
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848CC7B9362B12C0107A4714180
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 7018
IP address blocks: 149.143.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:93:62:b1:2c:01:07:a4:71:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=51ae6791-7537-4442-9c54-e2f983db60ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:de:25:1a:96:06:c4:0a:3f:92:0a:96:2b:
c6:04:db:63:cb:6f:ec:7c:dc:b7:8b:8e:9f:24:79:
08:4f:47:72:df:8c:a7:7c:af:27:a3:81:af:91:ca:
7e:02:98:50:2e:b8:2b:fb:50:61:01:db:89:29:f6:
09:d0:f5:0b:75:bb:93:67:55:6e:21:99:c3:f7:ea:
8c:12:c5:07:70:6a:41:97:2d:d5:50:a9:92:fd:f0:
0f:41:36:91:84:cc:79:47:f0:61:65:c7:98:de:6c:
2f:be:7d:82:4e:67:55:c5:f7:75:30:83:41:e1:30:
08:9b:7d:1f:d3:cb:87:b5:dd:5a:bf:f4:e1:9a:22:
c7:db:37:fe:51:35:8e:3c:37:8a:ee:c2:ef:25:e3:
c3:b9:61:5f:f1:71:8c:aa:ad:de:dc:62:64:c5:e8:
aa:ef:79:e6:b1:25:43:03:ed:67:65:6f:d3:43:95:
70:98:d7:4a:75:76:31:9d:8c:c0:76:7b:b6:3c:5c:
a8:95:94:f1:6a:f9:05:41:f3:96:f1:62:00:54:0b:
ba:43:41:7f:74:de:92:8c:9b:29:84:f0:dc:d6:e8:
44:e9:e8:19:df:a3:e4:b9:8c:8d:6a:a7:37:dc:c6:
a9:5d:5c:80:19:5d:d2:46:02:a4:29:07:4e:24:47:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:C3:70:FA:44:99:9C:D4:D6:B2:EA:BF:4B:5B:E9:D5:35:A7:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:af:2d:05:31:81:7d:6c:e2:8c:de:39:fb:f3:4c:57:95:94:
10:3c:11:9e:cd:52:97:b1:36:e4:fd:9f:c8:e7:d3:51:c3:f2:
45:58:dc:bf:b0:56:b6:a9:6c:31:85:eb:99:a7:41:86:3f:00:
62:5a:18:78:bc:86:9b:e4:e7:41:b7:69:f5:67:b9:33:82:85:
79:f7:38:93:39:6b:02:03:59:23:d3:98:70:16:10:f0:ce:08:
a4:39:fd:c9:49:9f:f5:b6:9a:21:83:d1:54:40:3d:8c:3c:ac:
8a:da:f1:a5:d4:86:df:3c:11:68:5d:6e:a5:75:84:85:6b:63:
43:bb:2c:d7:eb:5f:2e:50:a5:c0:0d:ff:da:28:eb:e5:2b:ec:
50:ec:69:33:04:f1:3e:05:b0:24:1d:2f:b9:e2:c0:20:3e:f5:
ac:4f:47:e7:9f:f7:2e:3f:aa:80:56:d8:4d:af:7e:8f:9d:c6:
a6:43:cf:5c:bc:51:fa:b9:32:6a:38:12:a3:de:a1:3b:6b:77:
ee:04:7f:78:4b:6f:73:98:21:f7:13:9c:35:78:1c:b9:e0:af:
05:f3:30:fb:a3:be:d3:a2:89:6d:d5:07:81:76:d8:03:d9:dd:
50:57:02:80:ce:bb:9b:cb:9f:95:f0:10:25:df:79:46:f3:76:
0f:66:61:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:39:57 2025 by rpki-client