Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/622c419b-f799-33ee-88f2-9f267e3c1c85.roa
File: 622c419b-f799-33ee-88f2-9f267e3c1c85.roa (raw, json)
Hash identifier: txQsQRadcHS+0CuVqfnsjAtRNKSBBjzbk6LQKFFJZxo=
Subject key identifier: 74:07:6F:F6:F1:1E:E1:4A:B1:AA:B4:0D:75:54:CD:F6:0A:C2:D6:2A
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F432858486C2B043133BB1F728FDF1FC0
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/622c419b-f799-33ee-88f2-9f267e3c1c85.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 216414
IP address blocks: 147.124.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:04:31:33:bb:1f:72:8f:df:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=afcaeb60-19e9-4da3-a8a8-2cbac152d299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:9f:42:ec:43:ed:25:8b:b2:2b:9c:f0:3b:
3a:8d:25:27:27:2c:89:14:fd:b9:44:0d:ce:53:73:
46:18:71:35:59:0b:7d:09:8b:9c:e1:8f:74:a2:df:
1f:1c:65:43:62:0e:c0:e7:3c:8a:9f:bc:e4:46:10:
e7:e6:f4:4a:c2:6a:f1:00:43:ed:88:01:4a:d3:8b:
46:44:29:c1:eb:86:91:7b:83:17:4f:b1:5b:b8:f8:
89:8a:2d:21:10:e3:2a:5b:10:39:10:22:da:75:44:
35:84:38:fd:24:a0:96:68:45:e4:cb:b4:22:f2:b8:
fd:8b:6f:c7:4e:24:d2:88:bb:e5:22:40:51:9d:a5:
aa:6c:40:9b:b6:12:39:78:72:d4:f6:d8:34:3e:18:
63:12:17:8d:fa:fe:2f:c5:25:b9:74:32:a6:ea:09:
43:e8:e9:21:67:3e:8c:97:2e:7d:fb:3c:b1:02:88:
6f:6c:da:f8:4a:33:6d:70:0b:45:e0:e1:0c:91:e6:
b8:62:9f:ef:b0:73:ad:46:34:99:3a:45:77:b6:82:
81:ed:dd:f7:09:2b:2c:db:d9:8d:86:69:e3:20:54:
ff:7d:f8:7d:10:4d:59:59:99:eb:4c:41:7c:49:26:
84:ac:df:5f:b3:60:ae:e5:5d:68:e6:45:8e:30:17:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:6F:F6:F1:1E:E1:4A:B1:AA:B4:0D:75:54:CD:F6:0A:C2:D6:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/622c419b-f799-33ee-88f2-9f267e3c1c85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:1e:85:c5:8a:b1:0b:3f:58:8a:79:41:83:f6:0f:c0:d0:d4:
22:91:ae:57:da:6c:2e:1d:43:75:2f:0f:61:26:64:12:67:f2:
4c:4e:fc:10:e1:81:44:72:6d:c4:2a:b0:ba:5f:a4:8f:2a:98:
6d:8d:c8:cd:0d:cc:d7:cb:5c:12:a0:9d:63:78:bd:74:fa:f2:
db:1a:93:4c:e1:2a:54:db:f1:23:b5:9b:a7:8d:28:ff:ea:53:
ec:0e:a4:95:44:56:c2:70:6a:63:cc:44:21:9d:70:47:47:08:
cc:ab:23:ab:85:d3:e6:15:f4:bb:69:4b:0c:fa:c6:cb:09:9d:
8b:b5:f8:b5:ca:39:53:44:7c:84:37:93:a3:e7:01:b8:f2:3f:
9a:68:b0:ea:d7:bf:76:d5:3e:f4:ab:15:aa:15:81:f1:73:df:
50:65:ea:3f:4d:83:24:80:02:a1:b4:82:95:2d:90:dd:4c:25:
18:13:06:ab:9b:e0:56:9d:34:59:d4:aa:8a:2e:81:58:5c:d8:
33:ed:b0:e9:d3:d8:ea:16:78:5f:d6:e7:bd:fe:b8:3b:bd:81:
85:ce:20:44:8a:94:82:f5:95:38:5f:b6:4e:59:1c:bb:81:17:
e6:fb:77:f3:11:ff:f1:fe:8f:31:88:db:a7:59:4a:e0:e7:5f:
3d:5f:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:52 2025 by rpki-client