Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/06f84869-0410-3ff5-8f59-50940386cd0c.roa
File: 06f84869-0410-3ff5-8f59-50940386cd0c.roa (raw, json)
Hash identifier: sxF8J9TpF3Jmsd7T9dBdCa7K/xaprwSDFAo9tl7mlco=
Subject key identifier: CE:C9:D8:FF:AC:D1:FA:F8:23:01:D9:37:19:93:57:26:2F:14:4C:28
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F4328584869606BA73C744BBCA7A3E680
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/06f84869-0410-3ff5-8f59-50940386cd0c.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 18434
IP address blocks: 147.249.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6b:a7:3c:74:4b:bc:a7:a3:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=4e0e537b-4ab5-42e2-ac2c-d7db6eabeb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:ee:78:cd:5f:62:e1:b7:30:ef:8c:85:ef:
28:58:2a:27:ec:d8:db:b0:3e:fc:e1:4c:d0:d6:a9:
2c:60:9c:f1:86:6c:5b:1d:92:2a:4b:e1:db:0c:f9:
d2:79:23:be:2f:bc:dc:79:7c:83:c2:a6:ee:ee:16:
58:3c:19:e4:90:77:68:cc:b9:ed:be:8c:86:76:c8:
a0:70:0f:27:9e:9e:a1:d7:dd:ee:8f:5f:dd:68:cd:
b5:96:c7:ad:28:3d:23:1d:a3:de:af:46:67:85:b3:
07:f7:a3:ff:fa:24:07:06:77:a6:ca:09:d5:18:29:
f4:f3:92:b2:a8:24:80:79:36:fa:9f:7b:a5:ef:36:
45:75:90:b8:c3:16:f6:14:e3:49:58:af:ff:11:46:
bf:ae:4d:76:50:f5:64:b6:df:a6:91:eb:cc:ea:bf:
15:38:41:b7:4e:79:f5:ff:78:a4:a5:6f:55:ef:1e:
94:1e:9d:02:a2:c5:8e:57:97:47:fa:a8:f2:d3:01:
e0:b4:7c:87:4f:17:53:1e:56:5c:bc:a9:d9:9e:19:
ab:1e:27:6f:06:78:f4:37:16:b1:14:c6:21:81:f3:
0c:d8:9b:6c:15:aa:61:6e:af:97:06:7e:72:d5:76:
47:f0:03:41:dc:4f:fe:63:79:77:e8:ae:04:be:74:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C9:D8:FF:AC:D1:FA:F8:23:01:D9:37:19:93:57:26:2F:14:4C:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/06f84869-0410-3ff5-8f59-50940386cd0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:64:f6:d9:52:f5:e3:87:f7:ab:9a:c4:a5:f1:64:09:f1:30:
be:64:aa:0f:e2:26:1b:ab:0d:e8:09:27:c8:f2:c1:40:59:ab:
df:d5:83:58:08:b4:1e:99:8e:10:a9:75:ea:c8:ff:c8:da:e4:
db:b4:a8:ad:61:55:71:2f:ed:c6:13:72:3d:f6:18:d3:19:c2:
4d:ed:b4:3f:59:3b:fc:4c:6c:cc:27:39:65:b5:9a:41:b8:1a:
4a:18:6d:78:38:9e:30:0b:76:3e:bc:74:27:4e:66:a2:4d:c0:
6b:ff:30:0b:9d:b2:9d:8a:67:e3:85:58:25:33:a2:72:27:3a:
5c:21:a8:49:53:7e:a1:3d:ee:be:aa:81:aa:50:a7:ee:ed:91:
d6:99:56:aa:d7:5d:5a:a2:4c:3e:f9:b1:1b:6f:c3:ed:1d:04:
86:fd:89:f8:14:95:4b:4b:f9:7d:f1:47:c6:4f:66:bb:ad:7d:
ec:f0:5d:e6:7e:d2:48:ff:4b:4c:9f:50:20:8c:e8:2c:b2:8f:
96:f9:87:54:1f:38:13:a3:2b:8c:3b:73:fd:85:20:70:c5:65:
40:02:4a:01:27:b9:9a:a2:17:d8:97:b6:94:26:22:01:72:83:
98:9a:06:30:4d:e6:51:c9:44:e0:24:25:72:89:80:51:2a:af:
85:09:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:06:14 2025 by rpki-client