Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa
File: 97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa (raw, json)
Hash identifier: nodSnplhaPNRVoctM+9191r2/zoBPnyHQS0h6kfiqDM=
Subject key identifier: F4:95:95:8A:5E:43:E5:4C:E4:C2:16:E6:A1:87:A5:12:9C:0B:0F:72
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F4328584855D59A2E9520B41A21FCF380
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 18434
IP address blocks: 147.249.0.0/24 maxlen: 24
147.249.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9a:2e:95:20:b4:1a:21:fc:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=e78eda12-c0df-4f03-b796-300ce4221dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:ad:27:e4:0b:f9:63:c6:59:92:cf:6d:f1:
0c:b9:9c:28:83:92:d0:f5:4d:ec:a9:eb:8b:29:ab:
15:62:a5:67:81:cf:cd:3a:46:57:72:99:eb:4e:8e:
15:5f:b5:5f:48:96:34:6f:06:af:d2:14:d5:85:fc:
f5:74:a7:27:ba:2e:c9:17:c5:b3:50:51:a7:4c:b9:
a0:0e:23:20:1c:03:4c:15:bd:70:41:24:72:9d:69:
5d:c0:be:4a:d6:a2:2e:25:2c:c2:52:24:16:46:d2:
20:cc:9a:6e:e1:ed:3d:c5:1d:49:15:e4:b7:60:00:
2a:65:88:d0:fb:31:6a:97:80:79:34:33:8e:03:f6:
36:fb:5d:28:a7:b7:0b:54:e2:03:29:33:95:cf:76:
6e:ad:e2:17:4f:3f:77:c1:54:e9:ce:a6:62:96:24:
82:f3:49:c0:54:eb:71:70:da:72:d7:42:bb:ca:3b:
1d:f7:81:86:54:9c:1c:6b:49:c2:78:fc:03:19:84:
c8:8e:d1:2d:d0:70:51:87:b6:b6:0f:bd:54:88:06:
6d:3a:3d:0a:1d:d9:c4:92:da:0d:f7:f4:4d:11:5a:
00:c2:b5:88:db:51:60:f4:2d:e2:b6:88:24:b3:d2:
70:35:59:bb:30:de:78:44:03:f4:0a:73:9e:b3:ae:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:95:8A:5E:43:E5:4C:E4:C2:16:E6:A1:87:A5:12:9C:0B:0F:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:b3:87:67:0a:60:70:2d:62:26:d1:07:43:16:3c:7e:b3:04:
a0:c6:ac:00:7d:56:06:64:a5:20:b0:e4:5f:82:b1:7a:c7:58:
a0:03:36:c5:be:4d:d7:c1:7c:f5:17:33:bc:d4:bb:24:61:7a:
32:db:d9:32:04:17:c9:34:3b:6f:da:ff:c4:fb:1e:02:32:08:
61:42:6c:5c:32:a9:bf:d6:2a:68:59:f1:28:03:7d:85:56:80:
a3:39:e7:37:91:26:d6:73:82:78:1f:7b:69:88:c0:b9:08:8a:
fe:d5:6a:39:3e:c1:65:da:1a:e2:54:bb:3e:f4:3b:c0:ea:98:
f7:71:12:9c:86:ad:dd:8c:47:91:01:52:6d:39:8d:b4:d5:a3:
77:19:18:d8:54:5e:76:70:b9:f7:11:16:b3:3b:54:39:6e:49:
e0:1c:f4:56:e8:2c:71:67:09:36:0a:82:d0:4f:d0:25:15:7b:
2b:20:88:d4:a1:ec:e7:1f:68:1d:0b:52:61:ae:72:0d:30:dd:
5d:42:f3:b3:e3:cb:e4:4b:63:01:60:37:20:f4:9b:33:31:77:
58:e6:94:e9:c8:e6:01:5f:b6:cd:39:fa:6a:3c:e9:94:b3:7d:
74:af:68:61:8b:c5:39:56:14:10:e0:cc:49:a9:78:60:f3:3f:
e6:a1:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:10 2025 by rpki-client