Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa
File: 0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa (raw, json)
Hash identifier: OSEajbjxbziOiTTv6hoOFN1qFJS/FnI7AJw+BOMN5d8=
Subject key identifier: 6A:C7:20:01:A7:FD:61:7D:08:34:CD:85:3D:E0:99:33:A0:D3:A1:E1
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858480214F3E865B0488C685EC800
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 33442
IP address blocks: 149.23.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f3:e8:65:b0:48:8c:68:5e:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=e24e3a73-f5b9-44a1-9909-025eab077e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:cf:ca:6b:97:26:12:bf:57:ba:bb:35:2d:
bf:c4:5a:bf:cb:88:90:ad:62:15:c8:cc:f0:ce:01:
52:72:43:91:9a:4f:c9:b1:fd:7d:16:ca:ad:32:0a:
9c:50:eb:bb:c3:71:38:3a:b8:b8:83:3d:6b:f0:9b:
e5:c0:e0:b9:50:fe:e3:c2:0e:66:98:15:f2:e5:6d:
ed:9a:e8:1f:3a:09:25:f6:ca:4d:d0:7c:a3:bc:7d:
d4:74:64:ad:a8:cb:9d:80:a6:21:41:1c:56:61:2c:
04:da:db:60:fc:27:fa:bd:c4:88:a6:64:70:12:e4:
0f:88:bd:db:e1:4a:0c:20:8b:a5:45:d3:f9:3b:0f:
f2:63:24:f3:a9:09:8a:ba:31:cc:6e:00:4c:40:17:
b1:fb:b2:38:27:23:96:a1:f8:6d:7f:e0:33:0e:09:
78:76:8f:32:37:e0:e4:01:27:2d:76:f0:89:93:65:
cf:4f:e6:d6:9b:8b:5d:78:06:a5:d0:0b:0a:15:24:
7d:a0:34:ee:21:88:fc:e7:d8:c4:73:27:69:ec:b6:
6c:0f:d5:a9:49:a3:2a:0d:bd:44:4a:cb:27:ce:5c:
0f:d3:d0:76:f3:6e:d3:1c:8e:4a:f4:6b:8d:7f:0b:
9c:e4:1d:e0:94:e2:5e:cd:e7:74:7b:69:f8:44:c4:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:20:01:A7:FD:61:7D:08:34:CD:85:3D:E0:99:33:A0:D3:A1:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b6:b3:00:84:fd:55:29:bd:78:cf:72:2b:61:1b:99:e5:cb:
04:16:c5:e9:bf:f0:c7:58:80:b9:f4:c3:71:6f:b0:53:37:8a:
56:40:b0:94:53:5f:9c:a2:06:6f:39:27:4f:0a:b1:95:a0:40:
fa:de:46:b1:e3:1b:5d:fe:8d:c5:7d:84:94:70:83:0d:cf:3b:
f2:d0:c4:0c:1a:71:79:a7:c7:09:b2:1d:98:15:d1:7f:3e:8d:
5f:9c:ec:b2:99:04:4f:54:27:e2:06:ad:24:ec:9b:e7:a8:82:
ac:76:19:8e:19:a4:38:1f:46:b0:7c:47:4d:96:37:7b:d9:b5:
52:63:41:a8:eb:2d:46:ea:53:13:2d:82:54:65:8f:03:6a:7e:
d9:5d:3b:ad:0f:a2:7f:17:aa:1c:84:e6:cd:6e:3f:91:53:3b:
e0:f9:fb:a5:9f:48:68:8d:9b:c8:30:b7:f6:9b:39:7a:1e:c7:
6e:68:16:ad:84:7a:11:9b:e8:59:c8:69:35:79:9a:45:9f:18:
28:d4:8f:c8:f6:01:ad:26:7f:3c:78:50:57:f8:b9:92:5e:59:
08:c9:9b:a6:d3:e1:79:c8:41:84:d8:61:a9:5b:be:0d:15:95:
b1:f3:f5:c0:5f:7e:cd:3a:39:05:8a:7a:f1:dc:3e:28:bb:41:
f3:bb:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:49:58 2025 by rpki-client