Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0927b7c2-c515-3b0d-bd63-b3e665f2aa71.roa
File: 0927b7c2-c515-3b0d-bd63-b3e665f2aa71.roa (raw, json)
Hash identifier: bbemSm7sWlgEZUKlOgQ9/MkqFtsmaJZbNYzWyFt3nDM=
Subject key identifier: 09:52:81:5D:6B:C6:F3:EF:07:21:5E:3E:45:0F:B0:D3:9D:41:1B:B1
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8EAF24F5DA25F1D4F5C0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0927b7c2-c515-3b0d-bd63-b3e665f2aa71.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 147.185.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8e:af:24:f5:da:25:f1:d4:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=5402764c-fdc0-4631-ae49-e0a18e43a241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:aa:26:99:0c:b6:5d:c6:fd:1d:57:9d:79:
15:8e:0f:05:b7:7c:26:9a:11:bf:b0:cb:88:90:1e:
3b:3e:7e:a8:19:ab:0c:a7:34:ed:88:9e:a9:0e:0e:
44:fe:8d:07:35:21:35:c6:a8:a4:cc:5d:61:b9:f5:
8b:89:83:f3:ac:5b:f4:15:fc:62:21:9c:41:9e:a3:
79:d8:8f:ce:f6:c8:72:52:71:6f:ee:e0:15:f1:b8:
8f:93:37:51:46:1b:e7:bc:06:f6:7a:33:e9:43:14:
48:7e:16:b5:63:4c:64:3a:78:24:49:fe:f3:55:ba:
60:e1:24:70:c1:5e:6e:c4:9b:a1:66:9e:1f:7b:69:
40:9c:90:52:3b:8d:e0:0b:0a:87:cc:18:4d:70:fa:
66:d7:a6:dc:1a:6d:2a:22:cc:dd:3d:b2:b8:c5:f8:
97:f2:34:7f:9c:bb:25:c5:c7:53:d3:5c:4d:7e:da:
d9:3a:e6:a8:df:41:49:7d:f6:6a:8b:4c:21:dc:f6:
26:cc:b1:3b:d6:55:f2:3c:30:eb:78:45:68:2c:a8:
a1:e6:a4:9a:2e:ff:4f:4f:f0:d1:71:1b:f6:60:99:
87:cc:f5:3e:fb:ff:44:92:93:44:ae:2e:25:33:f4:
31:c8:48:fd:73:15:82:b8:e7:06:cd:c4:f7:0f:fd:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:52:81:5D:6B:C6:F3:EF:07:21:5E:3E:45:0F:B0:D3:9D:41:1B:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0927b7c2-c515-3b0d-bd63-b3e665f2aa71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
147.185.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:a3:9b:44:c4:b1:03:96:5b:dc:7a:34:5f:e0:bb:a9:65:c0:
5b:42:d8:d5:de:24:77:8a:d3:69:1a:14:d5:fe:55:b2:51:ec:
cb:05:c7:c6:02:b2:19:fd:26:14:0d:0f:79:b4:e5:fb:41:29:
79:9c:63:00:6c:0c:ef:01:d6:22:f2:76:1b:24:81:f6:a2:2b:
15:08:ca:f4:a5:34:91:51:ac:54:e5:b0:ed:bd:91:41:8b:9f:
1e:a3:56:3e:6c:e0:bf:6b:7e:ff:5d:57:f0:fd:63:a2:b1:67:
87:f4:e6:53:a2:dc:91:9e:b6:c5:57:92:99:6f:d5:cc:d3:95:
4a:68:c6:77:5e:f7:e8:75:f8:a4:72:fd:1a:32:ed:0a:fa:b6:
0a:cc:ff:73:33:a3:e1:b8:9f:d8:87:4a:74:47:a3:21:46:3a:
c8:7c:48:65:93:ab:ed:2e:9d:b0:25:f7:42:33:18:b7:c8:34:
84:ba:15:24:ed:b2:ab:7b:5b:98:ac:76:25:98:03:52:74:b7:
ee:e6:cf:87:38:58:c0:e9:6a:bc:f0:6c:df:3e:5e:2c:9f:29:
55:74:41:2d:70:1c:99:37:68:00:81:bd:c1:1c:4f:19:10:2a:
de:a3:4c:18:1e:6a:7e:4f:5a:fb:07:8e:7f:46:c1:77:46:e9:
7c:3f:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:39 2025 by rpki-client