Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/37fb4cf3-fbeb-3604-8e9c-181d2170cad1.roa
File: 37fb4cf3-fbeb-3604-8e9c-181d2170cad1.roa (raw, json)
Hash identifier: IzH9pk3HfH/6vas4AZ2o5Q+0Ov1p5/Ny4Cf4iR4gi3o=
Subject key identifier: 57:0C:DD:1B:4F:FE:E7:F3:6A:63:66:47:97:5A:79:D0:E5:76:8E:20
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848CC7B97C4DA64CEF36DE79080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/37fb4cf3-fbeb-3604-8e9c-181d2170cad1.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 64267
IP address blocks: 149.20.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:97:c4:da:64:ce:f3:6d:e7:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=c5b05660-8057-4688-9a69-a7bdf363a485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:19:de:9b:fb:89:1d:b3:30:9d:f4:e0:f6:
54:45:aa:67:62:cc:a7:3f:7e:a7:5e:43:b0:c2:dc:
fd:8e:6f:d7:36:94:48:5c:bf:e8:7e:44:b0:10:8a:
05:f0:c3:63:89:48:3c:56:05:8e:81:dd:99:4d:31:
86:83:fe:b8:b9:7a:2c:20:fd:db:20:7b:fc:16:a8:
d4:96:ed:7f:7f:d7:01:0a:3f:3d:de:82:85:b6:40:
bf:02:5b:a2:ed:40:b2:d7:18:23:66:3e:dc:12:dc:
12:57:5d:9c:27:4f:95:a7:33:7c:67:e4:4f:6e:75:
a9:3c:ac:10:75:9b:ce:9a:d9:bc:98:c6:16:ba:85:
e1:cd:2a:df:73:a9:a0:37:4b:61:94:6f:31:ff:b2:
0a:12:fa:5b:d1:bb:52:a8:46:20:1a:64:79:cf:9c:
1a:b8:23:a0:39:8f:0f:95:27:36:ef:6b:93:e8:47:
c6:24:81:76:3f:cb:7b:10:3a:36:ae:2c:02:92:0f:
92:96:65:b8:e1:82:88:6c:d0:da:d8:d0:07:ba:57:
27:86:55:49:0e:58:8e:39:35:8b:c6:e9:e1:f0:32:
48:ce:52:ac:dc:e2:49:c7:9f:75:d6:95:5b:62:fb:
94:45:63:91:f2:ab:22:87:f6:3c:71:c4:b1:36:a2:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0C:DD:1B:4F:FE:E7:F3:6A:63:66:47:97:5A:79:D0:E5:76:8E:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/37fb4cf3-fbeb-3604-8e9c-181d2170cad1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:1a:ad:9f:44:33:2f:0d:75:04:e1:51:21:d7:8d:4f:7c:82:
3a:07:d3:5e:13:e8:3d:4d:64:ab:e2:d4:b1:c3:01:08:c1:3f:
2f:3f:8a:94:4b:80:f6:96:50:1b:e3:f3:94:79:8d:8b:12:55:
43:53:08:9a:ac:73:4c:e2:d3:22:bb:6c:75:c7:e5:61:98:0a:
33:be:bf:14:ae:35:ec:a8:7f:1f:8c:f7:82:c3:4f:5d:0c:38:
b5:f8:c6:6c:79:99:55:79:69:da:93:7c:d9:6f:a6:ee:81:6f:
43:6f:db:39:a8:bf:9a:68:42:8c:24:96:1e:24:f6:33:1c:05:
20:39:f3:cd:da:62:9c:0c:79:e2:70:c8:20:8d:ba:77:f0:72:
67:e2:7f:db:e3:7d:1e:ff:c3:57:a6:ca:9f:16:a2:54:ba:61:
48:80:2a:e4:13:23:39:f0:83:8f:14:05:df:f3:17:f2:59:c8:
7c:26:88:9f:09:35:31:27:f7:e6:0d:30:0e:7f:0a:88:1f:f1:
99:9b:93:51:5c:61:f3:41:f2:ea:48:be:39:9e:09:01:a8:f8:
c7:05:a1:c7:ef:60:33:73:63:2a:8a:ee:74:52:9c:6b:bc:ec:
f1:8f:20:29:da:2c:46:47:a7:b1:46:f4:9c:79:33:58:0f:dd:
b4:2a:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:42 2025 by rpki-client