Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/982e17d9-cbfe-3e77-8dcf-8fbe8505b53e.roa
File: 982e17d9-cbfe-3e77-8dcf-8fbe8505b53e.roa (raw, json)
Hash identifier: knYtII7XukwfRR+mJh2XX3NsIMnIh9ckm1LeBLXkz4I=
Subject key identifier: D1:33:BC:D4:C7:EF:98:53:32:E0:8F:6A:1B:D1:0A:6E:69:5C:91:24
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858488DAB47AC5EA8774A252D63F0
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/982e17d9-cbfe-3e77-8dcf-8fbe8505b53e.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 33442
IP address blocks: 149.23.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:47:ac:5e:a8:77:4a:25:2d:63:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=dec16487-1dde-43ff-b2a7-b69234b4605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:83:d6:eb:b6:d4:ae:d4:3e:1d:d6:f4:1e:
99:41:d9:dd:bc:fb:2d:dd:ce:9a:b7:85:b8:bd:88:
47:df:a9:b9:f2:54:21:83:1c:44:9e:ec:9f:ac:fe:
4b:4e:68:41:13:85:62:56:55:f0:87:ea:7d:66:33:
51:7d:07:56:83:b7:6e:8a:8c:72:79:b6:77:0c:0f:
b0:9c:0f:1f:14:bf:af:25:f2:21:29:a1:ae:3f:60:
4c:21:51:25:e7:6c:8c:7f:ce:86:95:da:37:9c:8c:
ab:9d:f3:96:2b:5c:15:cf:43:eb:68:65:fe:11:91:
a5:c5:0e:b1:7c:a7:f9:c1:28:02:ba:8e:f0:b7:d1:
04:f2:2d:aa:f3:0b:fd:77:c8:68:a8:a7:7d:df:21:
df:10:2d:fd:14:2e:d3:56:2f:65:18:14:b7:ff:60:
41:51:c1:ed:f7:c4:97:01:fb:31:53:b3:d9:b1:46:
5f:81:44:6f:e3:64:a7:b2:af:7c:87:1d:9e:6c:f1:
e6:7f:6c:ea:01:48:ad:c8:dd:48:b0:c6:cf:63:d9:
32:5a:2c:7e:8e:5a:6a:7f:9f:4f:5e:25:0b:f1:db:
0e:47:9f:45:36:63:8f:2f:87:71:ea:aa:56:ed:4c:
ab:02:dc:e6:6d:d1:fb:1f:a4:11:41:50:11:9e:dd:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:33:BC:D4:C7:EF:98:53:32:E0:8F:6A:1B:D1:0A:6E:69:5C:91:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/982e17d9-cbfe-3e77-8dcf-8fbe8505b53e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:d5:06:18:38:f0:ca:bf:57:3c:a0:d6:1a:c4:97:d0:48:74:
85:7c:9b:80:3c:b6:93:9c:2a:a2:ff:2c:e4:67:a3:1a:b3:fc:
bd:d7:41:38:12:0a:63:f0:a0:82:d1:36:c0:49:74:e3:7d:cf:
a9:d9:8c:4b:39:c1:ad:4e:f2:51:d5:72:3a:0d:bb:4c:99:ee:
12:ba:18:e8:16:3f:61:4e:bf:fd:32:43:5d:d7:b0:a2:c4:44:
80:6c:ab:2a:f4:b5:a3:f3:88:9a:5c:ce:5d:22:f1:8b:de:f7:
00:20:4a:6c:d4:c1:6c:1b:f2:d7:14:12:8c:66:f3:3d:34:d8:
fb:1c:eb:4f:f5:73:25:b2:ef:88:cc:59:b3:1d:fb:bc:4a:df:
4f:10:65:e5:da:92:9a:c5:e4:1a:76:18:47:3e:2f:44:23:a9:
ef:98:aa:04:65:76:64:e7:bf:e9:01:bc:58:1e:e1:45:db:3e:
e3:f8:19:db:c0:bd:84:b9:be:ad:09:ea:8e:37:88:0a:9f:6e:
f9:30:03:73:ac:ea:ca:b3:3b:71:e1:fa:ba:57:61:1b:98:ed:
fe:42:11:8a:29:f6:5c:32:c1:e7:38:19:c0:14:78:11:8f:13:
53:74:f0:c9:0e:9e:6a:56:c2:ba:9e:c0:71:1c:c2:a9:7c:c3:
d5:77:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:18 2025 by rpki-client