Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/ece768ed-864f-3496-be69-3aa50c7faa5d.roa
File: ece768ed-864f-3496-be69-3aa50c7faa5d.roa (raw, json)
Hash identifier: 9AS6FXO4IOaUvjRikfE4/486LGag7zoRrqyKiXH6V5c=
Subject key identifier: 21:BE:D8:00:AB:F3:B8:1A:18:5B:AD:50:F1:C4:DD:B3:C5:AD:13:65
Certificate issuer: /CN=eb20c2e0-7f57-4974-bb92-1fdbfcfc514e
Certificate serial: 010D0C9F432858478CB68CA6CB478A43FFF9AD40
Authority key identifier: 84:BA:C2:FD:68:01:49:CE:5D:F8:72:76:36:19:2A:B9:28:13:26:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/ece768ed-864f-3496-be69-3aa50c7faa5d.roa
Signing time: Tue 15 Oct 2024 13:00:47 +0000
ROA not before: Tue 15 Oct 2024 13:00:47 +0000
ROA not after: Mon 13 Jan 2025 14:00:47 +0000
asID: 17
IP address blocks: 149.164.0.0/16 maxlen: 24
168.102.144.0/20 maxlen: 24
168.102.160.0/19 maxlen: 24
168.102.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8c:b6:8c:a6:cb:47:8a:43:ff:f9:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb20c2e0-7f57-4974-bb92-1fdbfcfc514e
Validity
Not Before: Oct 15 13:00:47 2024 GMT
Not After : Jan 13 14:00:47 2025 GMT
Subject: CN=ed2a8a3f-0c1e-498d-8006-0c1a4458d486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:c4:ab:04:97:44:07:86:fa:1e:2e:66:e4:
94:55:5b:50:44:6d:f2:d8:f9:f0:00:9a:39:08:f1:
44:8c:4a:e4:5d:2d:28:95:8d:66:aa:ce:c5:c4:a3:
27:6e:3d:a5:27:09:c2:1a:84:76:f4:cc:ff:cc:14:
0f:71:a9:92:4b:be:94:55:d2:33:16:f8:92:1a:ad:
72:b6:83:ce:70:27:c2:75:78:a5:bd:b1:92:e1:17:
94:61:2a:f3:82:c1:6c:4d:e3:14:34:5b:6a:77:f6:
0a:5f:da:d1:96:45:34:38:e3:68:1c:c5:85:63:f0:
20:72:ad:cb:fc:bb:09:53:fb:81:2f:e4:7d:a5:44:
9c:7b:fc:83:9b:30:dd:78:f7:d4:3c:fb:2b:b2:a4:
3b:e7:31:7f:ee:d0:12:25:9b:d7:36:e5:d0:5e:9c:
b7:17:71:ec:d8:2a:d8:69:e0:3e:10:e9:c2:d2:8a:
90:62:31:0b:47:3c:4a:40:3f:90:e8:ac:25:b1:3c:
90:b4:19:8a:aa:32:83:71:dd:f7:f3:d0:2d:b7:45:
39:cc:9a:0d:32:4d:6e:44:95:13:aa:3b:69:d9:bd:
14:70:9c:fc:76:50:ea:d4:ca:a0:8e:e7:e5:ef:a7:
6b:c0:64:ac:4a:a7:d7:79:d3:40:10:2c:dc:c5:5b:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:D8:00:AB:F3:B8:1A:18:5B:AD:50:F1:C4:DD:B3:C5:AD:13:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/ece768ed-864f-3496-be69-3aa50c7faa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.crl
X509v3 Authority Key Identifier:
keyid:84:BA:C2:FD:68:01:49:CE:5D:F8:72:76:36:19:2A:B9:28:13:26:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.cer
sbgp-ipAddrBlock: critical
IPv4:
149.164.0.0/16
168.102.144.0-168.102.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:d3:a7:c2:d9:ea:0a:d6:57:92:56:d2:9a:d4:8c:9a:a5:b1:
05:a7:8f:0d:d2:1e:16:60:cc:a9:87:e4:0d:0a:9f:d5:3f:b1:
0d:c0:bd:c8:c6:ff:7a:78:89:7a:75:44:b0:c4:1d:76:e1:76:
a9:04:5c:20:10:db:6c:a7:72:f3:00:24:2f:6b:6b:86:ce:c9:
fa:9d:38:16:17:c6:6a:09:3d:d5:bc:a9:60:4c:4e:0f:3b:0c:
25:0f:7c:a5:84:8a:98:69:40:b7:8a:bb:e7:62:af:ec:6a:0c:
ce:c0:cb:b9:1a:2a:e2:74:c2:9d:0e:41:a0:bc:1e:ca:91:15:
ed:34:90:bf:e7:a7:4c:37:00:62:24:70:53:88:c5:e3:32:17:
77:8d:af:46:33:ff:86:09:9d:6a:f0:a6:c8:d5:c7:d2:c4:6c:
c4:a5:51:ad:d8:88:2a:59:61:18:64:be:4d:20:34:15:8f:0a:
ac:9d:9b:37:64:5b:a3:93:e5:3b:22:46:95:b9:c5:68:82:cb:
06:06:fc:fb:af:dc:0e:4d:93:4c:a1:38:63:6d:86:9e:f0:dc:
44:53:9b:5f:95:1d:51:ae:08:43:51:b2:67:f9:fd:af:91:9c:
a2:7e:ed:b4:c6:4b:f9:5e:14:12:dd:c4:78:e4:1b:58:36:4a:
c4:2f:96:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:38:53 2025 by rpki-client