Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa
File: 8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa (raw, json)
Hash identifier: InAeyri/bx1rdIkdIZMG7MNxCtZH8LcfLHRk8s97/PA=
Subject key identifier: 65:C9:05:9B:42:03:51:B9:16:DC:03:94:57:5B:7B:5B:24:40:FC:05
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F4328584855D59A3ED3BBA88E43580EC0
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 18434
IP address blocks: 147.249.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9a:3e:d3:bb:a8:8e:43:58:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=3c022955-b802-4327-b11c-9550a19f6f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:e2:25:23:96:d4:b7:39:a1:6b:6b:16:cb:
57:0d:7e:75:e5:07:a6:d1:d6:48:c1:73:9b:7c:17:
71:5f:bb:41:5f:95:3a:d8:ed:9b:56:4f:5e:21:97:
ee:3b:63:a2:06:b1:ff:79:e4:6a:de:48:c0:fa:4c:
2f:b4:87:fb:aa:28:21:22:1a:e4:0f:ab:c4:de:e0:
ec:c7:13:f6:d0:28:fc:5a:5d:4b:80:ee:5c:52:a8:
3d:9b:be:c5:64:38:76:0a:94:a3:c3:7a:e5:86:45:
6f:cf:69:4e:0f:fc:4c:fd:0d:d0:81:2b:2a:86:7f:
90:9b:fd:0b:92:b9:a9:e3:13:c0:ad:e4:1a:e5:4d:
f7:14:0c:91:2e:36:a4:9c:b7:24:53:43:73:04:15:
63:e7:25:f7:a5:fd:43:b1:f8:10:61:44:62:ba:5b:
aa:36:fd:4e:70:de:1b:c6:65:13:4c:96:ca:90:ae:
d1:d2:13:f5:b2:99:fe:c6:24:91:d9:d2:b1:d2:ef:
e7:28:3d:2f:11:f4:0b:52:37:22:e2:7d:5a:b6:16:
cf:0b:54:32:ae:96:14:94:76:98:b7:19:f9:bc:eb:
19:c3:59:62:e6:5a:c7:b8:7d:e1:77:b8:2b:f4:21:
ea:96:14:b8:ad:4d:6a:62:08:b7:f3:4e:b5:92:14:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:05:9B:42:03:51:B9:16:DC:03:94:57:5B:7B:5B:24:40:FC:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:23:27:e9:8e:f6:2a:5f:ed:5a:63:7c:3c:ef:c5:4e:7b:be:
51:7d:ae:17:c9:48:ae:a2:47:b9:b6:1c:af:b3:15:3e:c5:50:
33:00:33:e8:33:0f:54:9f:c3:19:2a:50:26:1a:6b:8a:4d:cc:
d3:22:c8:7b:2a:da:13:ac:f7:b0:93:d4:a9:b8:94:19:c0:7b:
13:32:64:1b:f1:a8:8a:0b:94:ff:8b:50:07:1d:b1:6d:4b:fd:
84:e7:9a:45:85:29:d5:96:4a:ea:a8:17:11:e4:63:40:ea:39:
2a:2b:7b:e1:0b:d9:2d:60:3e:ab:bc:dc:ab:47:3a:de:bf:ef:
d7:08:63:c9:c1:92:a1:8c:bc:d3:ad:28:8d:74:2a:00:3d:17:
67:02:ac:77:34:58:5e:ba:1c:f7:4c:82:99:e5:b4:48:63:88:
bb:33:e1:7b:c0:92:82:09:c2:40:86:97:5a:46:4d:7d:28:f4:
a1:9d:ee:17:70:e4:ca:1c:94:9a:71:b7:b5:10:c3:18:d7:25:
a6:22:33:13:a3:a9:3e:b7:7f:d6:f8:d7:4f:aa:8a:c8:86:c1:
4b:94:de:d1:54:4b:f4:9b:fc:a2:65:49:f4:13:eb:b5:c8:8c:
16:28:01:d1:c5:a3:b9:95:41:49:5f:02:77:9c:7f:79:77:96:
7c:a8:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:11:26 2025 by rpki-client