Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa
File: 686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa (raw, json)
Hash identifier: xMu8z1ReraSfmnSlfb8qJg44Prw0yYO8jlLoSO1737U=
Subject key identifier: B9:0B:42:6D:7F:19:78:D5:5A:9F:B6:7C:2E:1B:1B:42:DD:A8:0E:EE
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8E77DE6C6EBC776EFA00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 147.185.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8e:77:de:6c:6e:bc:77:6e:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=91fd7cb3-8711-4861-9849-508a77fe7599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:e5:cb:54:5d:a8:2f:f6:7b:55:1f:dc:1a:
58:80:cf:2b:f6:ae:90:d7:a1:78:1d:2a:83:9c:ff:
57:bd:97:d1:00:93:ab:f8:88:d8:b6:07:b2:41:8e:
0f:ab:7c:e0:e3:dd:34:43:27:2a:20:bc:eb:8e:ae:
5c:db:5d:8b:6d:b8:32:4a:51:15:4c:06:d8:d4:3d:
0c:23:22:b4:7a:32:c0:06:e1:15:f7:04:a3:47:bb:
42:6e:13:2d:6f:c0:b7:ec:fe:d1:19:a1:5b:10:22:
38:4f:1f:ec:ee:87:76:39:7f:54:74:0c:49:af:de:
ba:f6:47:e7:31:67:b6:41:e8:78:2c:ad:90:fe:90:
e1:9a:6a:bf:ad:25:ca:fd:f2:2c:33:5f:38:24:f0:
3e:b6:81:d3:c5:6d:02:79:34:83:80:ab:1e:cf:9a:
63:41:05:30:12:20:63:7b:fd:1c:05:35:a3:2f:d0:
bb:46:88:1a:7e:e2:e0:1f:8e:af:ee:43:44:77:97:
fd:91:0e:d7:32:b1:d1:4a:4e:ff:ef:16:d7:18:65:
b9:da:89:1c:02:fb:cd:45:71:28:37:19:ee:fe:84:
71:3e:9e:ae:79:0d:82:63:b7:74:ea:dd:a2:98:0a:
9f:db:9b:2f:5e:b3:47:3a:5d:f5:7e:f5:73:4d:b1:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:42:6D:7F:19:78:D5:5A:9F:B6:7C:2E:1B:1B:42:DD:A8:0E:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
147.185.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:b3:82:5c:51:95:15:39:c4:be:c8:b8:ac:07:f3:69:86:ec:
5b:bf:e0:b8:d4:48:b3:68:43:88:71:ea:56:ba:f4:7f:1d:5e:
68:8c:cd:2f:c3:1e:24:4d:44:28:73:6c:07:a4:bf:56:82:0f:
ff:86:43:5a:37:4c:b8:01:e8:85:67:4e:0f:57:1f:4c:65:da:
dc:d5:60:c6:e1:14:6b:cf:20:83:21:76:76:b4:89:41:9c:68:
aa:38:91:df:27:75:4d:f0:ce:47:09:4d:2d:02:b1:ac:dc:c8:
a3:86:09:c0:11:9c:da:cf:39:f3:03:6d:88:ec:87:2d:62:cb:
3a:96:4e:4d:41:00:51:0d:bc:e9:9a:84:57:67:46:d3:7b:e6:
74:2f:7e:64:6f:de:c4:f1:7a:a8:35:32:87:bb:97:09:34:88:
0f:bc:4a:23:9e:f7:1d:d2:28:cc:c8:67:9a:2a:ee:34:88:9f:
32:bb:2b:c8:66:07:14:c7:a5:0e:38:af:5a:ac:a2:03:1a:7e:
8c:b1:b0:e6:29:80:4e:4b:3a:35:40:7a:21:e7:b2:6c:bd:08:
13:5a:c5:89:b8:fc:e0:24:71:a2:04:f2:55:11:be:60:15:d9:
e7:dd:38:80:42:ba:1f:31:48:86:79:f6:e7:19:b5:b4:2d:1b:
3c:2c:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:00:41 2025 by rpki-client