Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa
File: 832a3037-6f58-31ad-97d9-1d5379dadd18.roa (raw, json)
Hash identifier: zx7iseUhpBSSvysOq5dEXkfMRn7OVrGgnq+6b+Upnkc=
Subject key identifier: EA:10:6A:CB:99:1B:9F:80:A0:1E:05:EC:D9:85:5D:C0:22:D5:E9:EE
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858488DAB3D61C9F73FCB82B59700
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 33442
IP address blocks: 149.23.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:3d:61:c9:f7:3f:cb:82:b5:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=c14e77dd-28ef-428d-aa49-d1a57d489a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:32:b1:5b:2b:86:05:ad:7e:18:86:c6:7f:
08:f5:b4:e5:46:04:90:4f:3a:bc:63:f3:9a:98:46:
ab:db:c7:ab:0a:b5:4c:14:a6:d6:04:e3:1d:f2:fa:
ec:d5:03:5b:8c:34:5b:62:7f:a3:c0:a1:4d:00:49:
41:07:7d:1c:73:e4:2b:92:d6:38:2b:05:f7:e9:05:
bc:72:a8:c7:08:a7:2b:23:99:78:44:7e:83:b5:d9:
bc:61:30:5e:00:2b:39:9f:3c:d9:bd:a7:49:a2:02:
0a:a8:e2:75:c1:a6:07:c1:ab:61:a9:6c:f9:13:da:
4e:d4:1d:30:5b:6b:14:19:95:9e:3a:91:33:a2:64:
25:f6:0a:db:06:8b:b8:46:61:7b:e2:12:01:2e:aa:
e7:ac:1d:92:59:7f:e0:bf:e3:0e:d0:1b:c8:30:6b:
d8:78:f3:75:1c:22:59:53:49:93:4c:1e:b7:91:4c:
d0:e4:f1:8e:0c:3e:01:4c:31:62:f0:f7:01:a9:10:
a7:7c:e0:65:a0:a4:07:bf:ba:de:81:69:4e:12:de:
f8:38:15:56:84:51:c1:28:a6:6c:36:9f:62:a1:99:
81:7d:0e:08:31:56:84:3b:8a:f4:67:98:7b:37:69:
d8:47:16:1e:21:07:d9:7b:a7:a4:32:79:a0:81:3c:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:10:6A:CB:99:1B:9F:80:A0:1E:05:EC:D9:85:5D:C0:22:D5:E9:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:8b:55:c8:db:7f:e0:6a:95:db:d2:18:71:36:f4:48:08:b9:
66:e5:0b:64:8e:60:0b:41:fc:31:bb:e8:f7:e5:f5:77:c3:52:
32:86:bd:7a:db:ca:d2:05:d5:a1:34:01:a6:19:23:b2:ce:9b:
93:a5:55:26:31:7b:14:d7:e0:20:a3:b4:f7:3c:98:1a:c7:5c:
a8:23:55:6e:71:3f:06:dc:b0:de:67:6f:43:fa:57:c1:1e:4a:
93:d3:8e:1e:8d:03:b9:ad:fc:f0:19:c3:02:7a:a4:d4:06:c2:
10:89:72:a8:cb:b2:e1:b2:49:73:a2:81:ae:17:fc:a7:7b:6e:
af:96:8b:41:ed:96:46:39:69:b7:56:eb:ec:d8:c5:e8:b7:7a:
55:d7:91:d8:82:b9:80:35:47:3f:de:db:24:e6:39:16:38:19:
ae:85:80:70:dd:64:fc:df:78:32:f3:bf:4d:6b:7d:2b:53:c1:
14:fb:af:db:3e:15:bf:17:3c:25:df:92:b3:f8:94:22:68:02:
50:34:f5:72:6e:ba:ab:6d:57:b7:64:ac:02:7d:fa:86:db:f9:
d7:55:cb:de:1e:50:be:30:1c:ae:62:13:b2:96:48:69:ee:d7:
14:84:26:31:3b:25:74:72:97:57:9d:dd:29:4f:05:af:87:0e:
a3:1e:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:37:11 2025 by rpki-client