Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c06a0134-244a-33d2-9036-ed623dbb2f10.roa
File: c06a0134-244a-33d2-9036-ed623dbb2f10.roa (raw, json)
Hash identifier: sC5eZjydueXZVUwijsdmedP+GZGC50AE/J+jK0EJz3o=
Subject key identifier: 1A:F6:47:89:0D:B6:7B:F3:83:CB:EA:D2:35:8C:7E:E5:B2:00:97:37
Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial: 010D0C9F432858494CC940E973243151C51ED100
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c06a0134-244a-33d2-9036-ed623dbb2f10.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 3503
IP address blocks: 147.72.224.0/21 maxlen: 21
147.72.234.0/24 maxlen: 24
147.72.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:40:e9:73:24:31:51:c5:1e:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=2deebe0d-e6aa-49f7-9e7c-1bf389306862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:1f:84:70:10:ae:6c:0b:71:36:b5:19:1f:
4d:26:bb:36:3a:a3:3c:41:d4:72:10:41:91:9d:a8:
46:e6:1c:e6:6d:2a:08:b4:93:61:1f:28:36:b0:96:
d4:18:1b:7b:85:f5:47:2c:5a:13:d8:c4:73:02:b8:
21:9c:d7:74:5b:31:41:0d:78:cb:b5:dd:84:10:24:
8f:ca:14:c6:ae:36:78:bc:88:94:44:34:ee:f4:7e:
99:07:38:46:2e:9e:6d:f1:77:16:7e:00:04:0b:4f:
61:fb:d0:92:41:2b:34:49:0a:88:bd:21:7e:7b:60:
fd:79:46:e1:50:83:77:11:bc:ca:09:ec:2a:10:23:
2c:ca:66:94:96:50:76:1c:eb:7f:0e:b5:83:c0:b2:
06:d8:90:ea:b4:dc:43:b7:5d:87:b2:78:55:af:28:
f7:23:87:86:d6:eb:15:81:bb:96:59:8d:75:c2:87:
59:90:a7:d1:9f:1d:32:c8:78:6e:5b:36:a6:a6:0c:
36:fa:f2:cf:86:66:d3:2f:81:bc:95:46:cd:11:e8:
4e:0c:2a:14:62:61:a9:0f:06:2a:f6:01:e2:0b:d4:
ec:c4:a5:36:85:78:34:00:15:ed:89:b3:34:4a:5e:
8d:3b:91:55:14:f5:1a:cb:d5:7c:56:e1:41:03:0a:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F6:47:89:0D:B6:7B:F3:83:CB:EA:D2:35:8C:7E:E5:B2:00:97:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c06a0134-244a-33d2-9036-ed623dbb2f10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
X509v3 Authority Key Identifier:
keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
sbgp-ipAddrBlock: critical
IPv4:
147.72.224.0/21
147.72.234.0/24
147.72.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:1e:58:09:0d:23:3a:98:ce:f1:78:2c:49:08:18:9e:e8:b5:
ce:8d:14:18:9d:a9:be:7c:fd:6c:18:79:31:4b:a3:2d:b2:cb:
a8:b4:44:e6:d8:b4:fc:a8:23:60:d7:1c:1c:16:04:1d:01:c5:
d6:0b:72:39:be:23:f0:98:a4:dc:12:fe:84:15:59:6e:ea:71:
be:ae:77:26:59:09:23:96:43:7c:bd:bf:33:c0:08:c2:3f:60:
34:cb:b5:4b:ed:a3:ae:f9:30:84:18:50:60:f1:01:d5:be:77:
3f:33:80:65:8a:83:4e:a8:be:b4:13:6e:bc:38:3e:83:fd:eb:
62:8c:4d:bb:c1:38:9c:11:7c:86:8b:f2:77:15:f5:31:4b:fc:
c9:e0:6b:86:81:2e:01:89:49:75:13:d2:e7:cc:85:31:ad:bb:
11:23:b0:88:fe:84:f0:9f:ab:bd:36:9e:9a:ef:b0:62:1a:b0:
71:9e:ea:2d:16:b2:a1:b8:a5:5a:ba:fd:b4:b3:04:57:da:ec:
19:86:db:a8:75:b3:70:74:99:16:4b:4c:99:53:bc:75:4a:19:
a7:fa:9d:21:14:63:86:c8:d9:c4:dc:f1:ca:32:14:a2:57:4c:
48:d2:b4:5d:f2:64:70:30:16:ed:8c:6e:65:ff:72:3c:ee:c6:
40:63:3b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:18 2025 by rpki-client