Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d7f30c8d-3830-379c-9b4a-35358c8b46c9.roa
File: d7f30c8d-3830-379c-9b4a-35358c8b46c9.roa (raw, json)
Hash identifier: uyKDFCNZ5XlUAQ3gJI/DooezUVvqj+RVwGlRq24374c=
Subject key identifier: 69:94:8E:4A:9B:24:EF:CB:84:E2:40:25:5C:50:9D:37:D3:EE:79:81
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A96AFC2723BF7EF0D9880
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d7f30c8d-3830-379c-9b4a-35358c8b46c9.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 147.129.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:96:af:c2:72:3b:f7:ef:0d:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=bd509b79-6ed0-4a63-93c5-6065ac16a75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:d7:c2:78:3c:85:71:d9:e8:4e:45:f6:ff:
8c:0f:05:92:72:80:24:ca:e8:4a:8e:a9:8e:19:7d:
3f:a1:3a:79:af:f2:cc:6e:c6:49:25:04:98:b1:c0:
b4:f3:f4:5c:3d:60:3e:e5:0a:0d:95:3a:35:fd:0c:
bd:4e:4d:bc:9f:a7:a2:58:b5:ef:08:f0:f0:de:d6:
fa:f3:b8:87:ed:6d:6f:b7:df:10:e3:d0:ea:c0:92:
6f:f8:a1:a0:ed:d4:37:c6:09:25:6d:c1:e3:40:31:
a1:a5:bf:13:16:70:88:4e:bd:07:ee:05:ef:ef:57:
dd:42:6f:ef:31:6e:a0:43:1f:c3:7f:6a:c5:ad:ee:
04:56:84:b6:4f:30:ba:37:fa:f0:12:82:da:f6:a0:
a8:5a:1f:d8:ed:ab:fc:00:a0:cb:b4:43:fd:b9:78:
77:45:50:6d:ce:64:30:03:fd:74:20:74:b6:7d:0e:
92:46:28:9a:a6:24:4a:67:5d:51:76:e0:9d:a8:29:
b1:a3:69:6d:b8:f5:72:89:49:00:64:ff:5f:e8:05:
2c:32:12:1f:22:ac:b4:be:7b:7b:b5:a6:22:d4:d6:
74:b3:f3:dd:30:46:5c:20:ac:0c:d6:1a:22:e1:14:
ab:8a:51:b1:82:0f:c5:62:a2:1d:67:36:f7:6c:5b:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:8E:4A:9B:24:EF:CB:84:E2:40:25:5C:50:9D:37:D3:EE:79:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d7f30c8d-3830-379c-9b4a-35358c8b46c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
147.129.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:8b:c5:1e:b1:e0:f6:a2:20:05:3d:d6:d7:12:df:8f:89:52:
09:c9:cf:fc:42:a2:3a:01:c8:6f:1f:db:e4:1c:79:d1:c9:f9:
d4:99:97:4b:b9:b9:12:5c:0a:f0:50:12:ae:67:84:9e:fb:72:
50:df:d6:b3:0a:82:f4:08:e2:a7:01:3d:25:95:a5:29:06:dd:
6f:c6:44:6b:eb:a4:a1:71:d2:b6:10:ef:de:50:49:0a:3d:94:
a7:3d:b6:7f:35:ee:7d:9e:8a:16:cb:79:82:39:8c:61:0e:78:
53:90:76:3b:5b:89:58:de:e0:a2:02:ad:89:fd:c6:ee:7e:68:
c4:b8:93:33:e4:2f:bc:69:19:94:5c:bb:2c:1c:c4:7f:94:96:
52:60:3a:80:4c:1b:38:29:a0:83:1d:1a:9c:d6:78:5d:e5:aa:
67:61:ba:1b:e7:b4:9c:90:f2:26:8a:43:f9:e3:60:fe:a5:1f:
d2:e7:5b:49:79:85:b9:57:d6:d8:f9:af:33:3f:54:cb:fb:89:
2f:1c:a8:38:12:8c:9c:1c:97:2a:a6:37:69:1b:18:14:df:37:
34:9d:0b:95:e7:1f:09:dd:82:4f:1d:12:32:c0:c2:69:71:16:
2b:b9:7c:9b:f1:3c:f1:7d:51:6a:e7:27:59:29:ba:ec:4a:2f:
5b:2c:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:55 2025 by rpki-client