Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/496f49ea-3359-31aa-95bc-daa3ccdae006.roa
File: 496f49ea-3359-31aa-95bc-daa3ccdae006.roa (raw, json)
Hash identifier: vFQm/0Is0aRFJc7qBD0UJmvasBoWZwfXHlFXLcKzpzM=
Subject key identifier: 7F:D8:38:98:44:3F:9E:06:08:50:3A:34:65:C9:77:12:9B:36:A4:CB
Certificate issuer: /CN=544240c0-1aad-4163-8ada-3b71180eac4f
Certificate serial: 010D0C9F432858491246AAFEA818F5F916861180
Authority key identifier: A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/496f49ea-3359-31aa-95bc-daa3ccdae006.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 396982
IP address blocks: 147.146.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:aa:fe:a8:18:f5:f9:16:86:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544240c0-1aad-4163-8ada-3b71180eac4f
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=5a0f3da1-4778-4a11-9f30-093de1ce243a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:b6:e8:3a:cf:1f:db:4f:dc:15:03:5c:2b:
cc:be:92:ab:a0:ac:ea:a6:32:77:b3:d5:f6:e5:dd:
2b:10:b9:d0:ce:64:2d:2d:53:e6:f9:d6:99:78:51:
0c:44:7c:b2:26:03:d8:6a:f0:d3:30:38:f7:54:e2:
8c:7d:3c:59:d0:20:fd:ff:8d:c0:af:b3:55:2c:fa:
3c:c2:c5:bb:12:af:ed:2d:3d:c1:b9:2c:e1:13:c1:
52:ea:2f:a7:1a:85:8c:be:b3:2d:c2:55:04:37:67:
60:55:78:89:b2:d9:95:14:d8:05:c6:23:8a:9d:46:
c0:17:37:22:c0:42:c1:2a:39:01:b4:a7:10:d1:ed:
75:8e:bb:b5:7f:f8:4d:5d:5a:77:7b:65:8e:0e:d3:
27:cf:44:1f:6b:15:45:25:41:67:b5:e6:ba:32:3d:
05:13:ef:8e:94:92:77:b0:c9:e4:0d:92:ff:37:aa:
05:15:45:e2:63:eb:92:ce:38:80:ea:14:88:ab:da:
4c:81:63:9d:e3:11:f0:ef:77:cc:df:7d:29:43:4d:
bf:28:30:a3:5b:39:85:ca:46:8a:65:3b:d2:0f:2a:
9d:3c:7c:ce:20:4a:6d:75:0f:59:fe:4c:e9:b7:1e:
b6:9a:df:84:b0:54:32:20:86:34:eb:51:73:84:a1:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:38:98:44:3F:9E:06:08:50:3A:34:65:C9:77:12:9B:36:A4:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/496f49ea-3359-31aa-95bc-daa3ccdae006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl
X509v3 Authority Key Identifier:
keyid:A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer
sbgp-ipAddrBlock: critical
IPv4:
147.146.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:fa:37:54:76:7a:ba:cf:7f:bf:44:c1:ed:7c:9f:1b:8d:69:
8e:0f:d0:d5:50:10:94:3c:29:04:7d:87:a4:76:59:be:0c:4b:
05:5d:d0:c2:32:79:4e:f2:13:e1:c1:84:0b:0c:ec:48:7a:59:
cc:a9:ca:3a:b4:3c:87:59:9c:91:d1:e2:22:38:fb:25:82:05:
7d:96:ce:57:7b:5a:35:46:28:1f:d7:8e:c9:33:ae:2e:d8:5c:
90:98:f8:f9:4f:42:a9:ef:c9:a6:c2:e3:9e:e3:ef:ea:ab:5a:
bd:ec:78:e7:9d:4c:40:b7:e4:16:17:42:98:f9:0d:15:71:d2:
cf:b2:d9:89:1f:91:4e:40:47:9d:c8:e6:90:51:01:11:5d:23:
a7:7b:9b:6b:09:89:58:8f:3b:00:a3:34:95:9a:3c:35:6f:11:
87:04:3b:c1:c7:a2:06:1f:09:b1:c8:4b:32:c7:c6:e6:fa:45:
df:fc:6c:cb:ca:ec:d0:5f:f1:04:1e:50:61:9c:bc:90:af:5f:
74:dd:22:62:80:9d:3f:9d:8f:b0:4e:5f:e1:56:8e:cb:ec:e7:
82:72:79:77:73:2a:83:b0:3b:fa:53:38:7b:0b:89:ba:ec:24:
4e:f8:b1:a2:3a:a7:7b:35:8e:10:34:a4:db:d2:8f:df:ab:84:
2a:e7:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:40 2025 by rpki-client