Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa
File: 8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa (raw, json)
Hash identifier: EqH8XEze7n09J6DUrlG88CNQEEmLMc1YWsfyhengqYY=
Subject key identifier: 13:B9:57:F6:60:DC:4F:9B:D0:84:BA:C2:C8:11:71:21:0D:B5:41:BC
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858488DAB3D8F523F8D9A3085F280
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 33442
IP address blocks: 149.23.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:3d:8f:52:3f:8d:9a:30:85:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=92981a7c-4aa5-4e2a-9184-b2289c49120a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:96:40:ad:2f:fd:4d:30:9d:55:f2:6b:c2:
a2:16:df:ce:a2:02:59:56:8b:ce:2a:fe:6b:5c:d4:
c7:68:7c:92:1a:ec:5d:0f:94:8b:22:fb:d0:66:5a:
d4:94:f9:28:9d:42:b7:6f:c4:8c:24:8c:33:b0:90:
37:d1:6a:86:4f:8e:1b:cd:4b:4c:96:c2:29:5f:0a:
05:ce:ce:67:cc:d1:7c:45:0e:54:08:bb:49:41:5c:
37:62:32:fb:fe:b9:72:19:12:77:32:c9:7c:ce:b9:
a9:40:95:d6:b1:a6:48:72:78:c4:b7:ed:c0:b9:9d:
0a:e7:21:7a:7a:e5:c3:aa:4e:4e:de:c0:e8:e8:8d:
d9:9a:5d:87:a8:6c:4b:92:65:2d:b4:f8:28:ed:06:
33:b1:35:97:3e:06:43:bb:99:00:de:4c:f1:f7:56:
6e:2c:59:cc:e2:d5:21:90:ca:22:eb:4e:40:f0:f3:
d0:4b:fc:8d:dd:fd:82:b4:ed:87:c2:8a:9e:7f:06:
9e:f5:62:a0:57:85:48:a8:ba:d7:49:32:66:b1:52:
16:80:3b:60:9c:08:9c:cc:c1:bc:9a:b9:db:12:00:
67:5b:89:d2:b4:eb:e2:a1:e0:f6:eb:1d:7f:7d:5f:
62:df:af:83:92:dc:e0:17:58:79:37:d3:54:06:e4:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:57:F6:60:DC:4F:9B:D0:84:BA:C2:C8:11:71:21:0D:B5:41:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:95:35:8c:97:33:a7:dd:c9:9f:24:ee:95:f7:bf:4c:24:45:
fa:d3:37:95:71:b3:aa:b5:2c:27:db:37:c0:33:82:c4:e1:25:
c8:f2:f6:c4:ec:b8:8a:d2:5b:c3:d7:f0:cc:37:47:b3:de:41:
2d:bc:bf:bc:29:f2:b8:52:7c:c8:bc:42:5f:6b:41:7b:a5:0a:
15:1f:88:d6:0d:7f:bf:0d:53:69:8d:9b:99:44:ab:39:85:92:
93:d7:c9:ed:4e:f2:6e:45:38:fd:c1:05:f2:f1:9a:a6:44:1a:
42:49:f4:dd:0f:fe:42:24:34:e0:4c:35:37:99:03:d6:d1:11:
62:85:34:a1:83:08:9a:51:fc:da:35:8d:b3:3e:5a:ba:f9:44:
16:a1:a3:bc:ae:8b:cf:29:f8:48:c1:21:3a:94:83:58:50:ee:
11:63:4a:85:27:a2:05:04:83:93:74:c1:1c:97:b1:58:01:0b:
2d:ce:7e:33:02:f0:39:1a:91:63:b8:3e:17:c2:07:87:c3:19:
06:f0:33:a8:bd:88:44:68:f1:2d:69:0e:12:7a:47:80:0a:2a:
37:64:03:77:20:33:ac:2b:53:80:47:7f:42:bc:c0:f2:5a:d1:
e8:dc:df:4e:43:15:c6:bc:85:ab:62:2e:62:fb:d7:b9:53:2d:
97:75:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:30:27 2025 by rpki-client