Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/94469c8c-ac9a-3b20-aa70-a50c7e3ae241.roa
File: 94469c8c-ac9a-3b20-aa70-a50c7e3ae241.roa (raw, json)
Hash identifier: fMLFttKl5XfFkedfLoG4BCgqnI2ZKRKcMPK2hfm3Bxw=
Subject key identifier: DD:26:31:A8:FD:2E:11:E1:20:C2:F3:FD:64:67:3A:F6:3B:C1:69:86
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F43285848CDE10EF5B1B466F07970DF00
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/94469c8c-ac9a-3b20-aa70-a50c7e3ae241.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7862
IP address blocks: 146.23.194.0/24 maxlen: 24
146.23.196.0/24 maxlen: 24
146.23.198.0/24 maxlen: 24
146.23.202.0/23 maxlen: 24
146.23.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:0e:f5:b1:b4:66:f0:79:70:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=b1a0feef-5f3c-43d9-a99c-0ef3a9894f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:cc:e5:99:a9:5f:1e:f2:ff:48:cd:35:11:
74:09:96:ad:44:82:36:4b:62:4a:d2:92:05:41:50:
6c:88:ae:b6:67:fd:04:7f:99:56:74:25:df:31:1e:
04:97:3b:ad:c5:d2:c9:4d:72:e3:26:bd:69:0b:a9:
b7:7f:53:68:f3:c0:27:a8:a4:2b:57:e6:ea:37:6c:
5f:bf:c7:1b:a9:0b:dd:b0:d2:99:97:8b:df:72:a6:
50:7d:a1:1f:3a:d2:b7:ba:f3:5e:7c:91:5d:88:a5:
f6:de:63:24:03:b9:cc:ad:70:a3:64:89:1c:3a:d2:
20:04:e2:27:c6:6b:05:17:ba:8e:d1:b2:e4:5c:b7:
52:0f:6e:f4:9e:8e:a4:34:b2:72:02:d8:42:57:fc:
a4:19:ed:d6:34:00:bb:03:2b:70:10:59:2b:08:fe:
31:5c:1f:d6:0f:07:93:07:54:ea:62:5a:99:8a:34:
3a:45:3e:8f:69:78:47:3b:d6:9c:27:ce:b4:be:25:
bc:81:14:ff:86:73:7f:90:c1:e7:50:6f:0f:74:fe:
dd:35:38:71:02:2c:0d:25:14:52:a2:0a:b9:b0:97:
1e:76:32:ad:05:b5:f5:c2:2d:ea:68:be:a5:04:35:
b2:99:5f:ca:b0:30:95:d5:04:38:d5:54:0f:dc:ab:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:31:A8:FD:2E:11:E1:20:C2:F3:FD:64:67:3A:F6:3B:C1:69:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/94469c8c-ac9a-3b20-aa70-a50c7e3ae241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.194.0/24
146.23.196.0/24
146.23.198.0/24
146.23.202.0/23
146.23.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:13:65:03:3a:63:e7:12:da:a7:3d:bc:c0:ca:8f:ce:4b:b4:
d2:6c:1f:c1:de:a8:c3:b5:34:55:e2:7d:05:2c:a6:f2:e2:dc:
92:86:f3:e8:fc:45:6b:0d:6f:b4:82:34:0e:6f:81:aa:0f:18:
08:f6:07:1f:9c:97:72:23:d9:31:36:49:9b:f9:54:6b:59:02:
5a:e2:a8:5c:ae:fa:0d:92:fa:e9:89:c3:65:99:98:f3:b5:13:
42:38:da:b3:fc:a5:e7:8f:34:49:af:cb:4e:d4:fa:b2:3b:97:
85:0b:bd:b5:f3:ad:66:94:84:84:f4:3e:05:20:f4:a4:3c:d8:
d5:40:7a:8d:64:73:6d:9b:b4:bb:55:f1:a8:a6:4c:93:d4:b5:
2a:93:67:5b:0d:72:d7:38:b0:52:52:60:00:3b:ba:ca:c6:6f:
f1:c9:07:81:ac:36:62:f5:af:fa:50:c6:ee:2e:bb:b4:e4:37:
71:b6:3d:03:92:95:f6:b7:9d:fc:13:a1:4f:a3:2e:b5:bc:da:
60:e6:5f:80:fd:4f:11:92:37:f6:92:4b:e4:39:ee:a9:2d:34:
e8:ae:f0:ad:02:8b:e0:d3:24:bf:c4:86:fd:aa:57:c0:9d:76:
1a:7b:12:72:05:1c:d7:13:56:ca:05:2b:a9:90:9f:8a:06:01:
31:2f:d4:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:20 2025 by rpki-client