Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa
File: 42ca2390-8cdd-3071-9349-acf8de5d2be1.roa (raw, json)
Hash identifier: v4imwAIJEvC7XKJzDF+kcyqSHGwkv0YnKLR9xjsZRi4=
Subject key identifier: 6C:1D:B9:EC:BB:C8:09:9B:86:DB:28:48:71:C6:2F:94:84:A9:86:AE
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858489340AE04549F6B4724F30B60
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 33442
IP address blocks: 149.23.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ae:04:54:9f:6b:47:24:f3:0b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=8b8bd231-35de-4ea2-8be9-ec8b8c949870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:94:0f:2d:4b:e0:9b:00:f9:90:b0:73:5f:
f9:e4:7a:70:2b:a0:2a:a6:1e:fc:db:7a:24:c4:9d:
3e:ed:88:f6:eb:ea:63:d3:0e:7c:f9:9f:6f:96:98:
9a:1b:79:a0:f7:47:37:be:09:6b:17:30:5e:c4:ab:
a7:20:5e:f6:2b:de:23:b8:b9:d0:b9:ce:f2:5a:51:
b4:a6:82:3d:cc:31:93:c9:80:d3:71:61:73:63:0e:
ab:68:fd:ec:39:c3:f5:72:98:fa:1d:ac:49:b5:1c:
13:f7:5c:19:01:e5:af:8a:9f:ff:e4:34:0c:97:be:
15:d5:0c:37:30:1f:a4:99:6b:4f:ba:c5:dc:c4:b2:
4e:b7:63:73:4a:e1:2b:5b:57:1e:2f:e4:38:e4:58:
12:b7:d0:3e:e9:0c:6f:2c:8f:8e:73:b7:7e:38:e2:
02:74:17:da:74:6f:64:35:da:59:39:dd:d8:ac:31:
5f:b7:4b:b1:cc:90:46:22:87:c1:b5:b1:b8:87:25:
5a:ef:56:54:7e:06:52:0b:5c:fc:94:ca:9e:37:90:
8b:4c:01:c0:7d:45:da:ef:a8:3a:ff:78:25:53:90:
e3:2b:24:1b:3a:ce:4e:9e:79:74:17:f1:d2:71:0e:
21:41:a5:74:2d:31:11:e3:f2:05:3a:87:a8:ab:dc:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1D:B9:EC:BB:C8:09:9B:86:DB:28:48:71:C6:2F:94:84:A9:86:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:8e:99:16:8b:65:6d:5f:73:30:b3:5e:ba:f3:7d:0d:c0:5f:
9c:0d:74:29:1d:b7:27:93:c7:59:7c:00:0c:1f:f2:4a:8e:ae:
62:c4:18:6b:5b:8c:04:b7:83:39:33:67:cf:63:c8:ad:2f:90:
8f:58:4c:23:b5:ef:00:86:b0:91:3b:f4:15:a5:af:04:ef:a2:
fa:a5:c2:5b:89:82:9e:cd:e9:1b:91:10:93:42:31:57:5e:c4:
1a:73:2a:fb:87:f0:d5:07:78:6c:9f:8d:6d:04:dc:6e:34:9c:
f6:0c:b5:7a:9d:89:79:fa:65:8e:b9:b9:23:97:d1:31:39:c7:
46:78:98:1c:4f:6b:cd:f3:69:07:cd:d0:0a:62:e4:b7:ad:21:
97:2f:4a:bd:5c:3a:c3:67:e9:33:cd:9d:90:7a:03:f8:cd:f8:
fd:68:ab:49:b7:18:de:80:db:5e:0e:03:94:eb:cd:bd:07:e9:
dd:02:f7:1c:6f:74:a3:6d:ab:26:6f:83:79:b2:16:88:dd:e9:
5b:a1:2e:52:b8:b2:f3:67:0c:4b:be:b6:95:c9:d7:d3:4f:c0:
e6:d7:10:d6:a4:77:84:6e:81:1b:57:be:90:c8:d3:66:10:f2:
ca:84:1e:be:41:c1:8f:06:63:87:ca:af:0d:cd:82:7a:8e:2a:
90:9a:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:56:25 2025 by rpki-client