Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/30d04b89-4e0b-3490-b07b-451701cecdb1.roa
File: 30d04b89-4e0b-3490-b07b-451701cecdb1.roa (raw, json)
Hash identifier: H8d3pKWEkSdN0rt6iQ/m1mlK3F3qEmQ68ff5PQkfKbw=
Subject key identifier: EA:BD:A9:A7:E9:EB:62:27:70:11:7F:8B:08:0D:E8:38:C3:DD:C3:53
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F43285848F92698294956A051CF01AF80
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/30d04b89-4e0b-3490-b07b-451701cecdb1.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 1280
IP address blocks: 149.20.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:98:29:49:56:a0:51:cf:01:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=60abfba1-95d3-4d1e-8fd2-9815b3b59beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:17:85:92:bf:cc:9a:89:18:0b:58:36:a1:
68:b9:cf:d3:4a:70:0a:94:1a:da:af:f8:f9:aa:26:
26:32:b8:79:b8:c7:49:00:57:dc:f7:d2:e4:0a:e2:
b0:e0:f5:03:f8:0a:b5:49:68:c4:1f:10:de:07:9f:
17:18:6f:44:bb:16:90:7b:e1:f2:29:92:3f:59:22:
62:05:51:66:74:70:e7:37:1b:76:21:fd:f8:dc:e4:
fe:98:33:08:8e:02:10:ea:ec:02:c6:7d:70:4d:e2:
f5:79:c0:57:6f:d1:72:b2:40:06:7c:5e:46:d2:95:
de:7c:d5:80:6a:1e:2b:92:af:d1:2a:15:4e:95:3b:
a1:9a:69:e0:77:a2:7d:43:ba:89:93:c1:bc:22:86:
f1:95:13:5d:fe:dc:e8:30:fe:96:d9:ed:58:98:97:
6a:2b:70:de:bf:9c:d5:2b:b2:a6:00:91:fa:1c:99:
29:95:9d:84:f3:d8:d9:2b:60:cb:de:fa:79:eb:54:
3d:ef:ba:85:86:ff:37:7b:bc:a1:cf:94:5e:7a:0d:
22:66:9a:00:f3:9d:41:0c:19:28:bf:6b:4e:04:3d:
d1:9f:39:63:15:cc:54:39:13:86:91:ab:69:2d:d5:
0c:4b:4d:b0:e5:ec:8c:e9:bb:91:a4:ff:45:6b:19:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BD:A9:A7:E9:EB:62:27:70:11:7F:8B:08:0D:E8:38:C3:DD:C3:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/30d04b89-4e0b-3490-b07b-451701cecdb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:0f:be:70:91:26:f7:5f:6a:4f:85:88:6d:9c:f3:5a:f1:da:
4a:99:d5:2b:f3:00:5b:79:45:ea:4f:e0:81:b1:49:b5:0e:b2:
d2:2e:f0:ef:91:c0:d3:cd:0b:95:ee:d5:56:96:da:60:25:b3:
d1:84:13:47:9b:fd:dd:c9:74:0c:d8:33:c9:b0:3e:60:ef:bb:
26:af:62:38:5a:0d:3c:01:ae:60:cb:7f:65:cc:88:5f:40:b7:
69:b6:2c:15:94:88:b6:28:d1:fd:2f:e0:31:38:19:c4:ec:69:
2a:7b:d1:bc:d5:cb:df:51:52:7f:7c:69:fa:d6:a1:50:53:ba:
49:f4:e1:ce:9a:da:98:2d:f1:14:1c:1e:48:34:16:c0:20:3d:
ce:94:62:67:87:a3:fa:f9:a8:98:04:f9:16:dc:55:b3:b6:d8:
55:fb:32:3b:53:04:67:f8:a2:d7:a8:e5:05:ac:2d:96:16:b4:
47:bc:32:24:f1:3a:78:67:a6:5a:17:e2:86:dd:48:b6:14:92:
53:3b:dd:64:5e:71:93:c7:5a:cc:07:d2:4f:11:2d:46:68:6b:
ba:c3:e5:29:00:47:ad:28:13:38:d7:ad:f8:52:9f:7e:3b:4f:
d8:6c:8a:f9:9a:1d:c4:bc:9b:0f:2d:10:b2:99:85:d4:b3:87:
85:5c:1e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:01 2025 by rpki-client