Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/d6016862-0af0-34b8-b9a0-a6fd23bfe070.roa
File: d6016862-0af0-34b8-b9a0-a6fd23bfe070.roa (raw, json)
Hash identifier: VvVKLcK2zfgdnLYyXTEw2rru++SfNqhdXp9wrspEGCs=
Subject key identifier: 25:51:02:85:A9:A6:C4:37:B2:59:58:FB:72:32:B8:35:B6:4F:53:59
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F4328584858A05280664DF07E0A452B80
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/d6016862-0af0-34b8-b9a0-a6fd23bfe070.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 18594
IP address blocks: 147.249.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:52:80:66:4d:f0:7e:0a:45:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=e6bca703-877c-495a-9aea-73c28657446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:49:c0:f7:df:d7:58:d4:e1:6e:7a:03:29:c0:
08:b7:92:70:6c:83:a1:f1:78:e3:86:c1:94:93:80:
24:de:63:49:62:9c:bd:95:33:02:41:e8:49:1f:51:
81:90:37:1e:16:ef:5d:d0:70:11:dd:5e:37:38:6a:
a0:1c:f8:cd:53:1e:6b:c3:d5:4e:78:e4:1e:58:9c:
09:22:75:a5:60:62:d6:54:6e:9a:56:50:bb:a0:c4:
b0:a2:97:ec:9e:59:6f:aa:53:fe:fe:9e:b3:c7:19:
7e:41:6e:1c:01:df:40:ef:7c:e5:0a:0c:2e:82:04:
4b:4f:02:5e:9b:93:f2:76:46:2c:d0:54:92:75:93:
f4:b2:9e:42:44:03:9d:46:d5:fe:98:9f:83:4e:a3:
c0:d9:0e:aa:f6:93:3b:81:da:8f:26:0e:39:7a:2f:
d2:9a:64:17:bc:a6:c9:c6:8d:2c:c5:c0:05:32:81:
e5:27:95:b0:cf:66:f8:81:b5:38:f3:07:db:ee:64:
13:ae:10:ac:74:fb:6f:ab:ee:5b:59:e2:4f:99:29:
56:fc:77:8f:29:9b:45:5c:58:a0:e4:88:9a:7c:e8:
66:6f:ea:80:f4:dd:97:34:cf:43:35:fd:17:7a:90:
42:25:64:7f:86:8d:c9:b0:97:f3:e0:f6:df:89:a0:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:02:85:A9:A6:C4:37:B2:59:58:FB:72:32:B8:35:B6:4F:53:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/d6016862-0af0-34b8-b9a0-a6fd23bfe070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:74:54:d2:1c:94:34:14:a8:ed:0d:50:ba:4d:dd:05:56:91:
d9:94:69:11:69:1c:bc:a1:8e:09:61:fe:e1:9c:59:7d:9d:5d:
f5:66:a7:70:2c:14:ee:c7:09:b1:a5:76:7d:30:29:d0:68:85:
1c:97:75:52:81:6e:0b:d6:47:fd:ed:ef:0b:dd:09:62:73:85:
76:0f:d7:c9:8a:6a:67:6c:8e:4a:ca:11:d5:dc:94:bd:71:3d:
27:8f:e1:68:42:e3:32:50:26:bb:2b:ac:0f:9b:5b:64:d2:ef:
ac:a5:c4:46:0d:a6:34:f8:c1:d0:cf:60:11:7a:e2:a4:71:4a:
b7:58:ad:52:bf:ae:96:8d:7c:08:a0:3b:f5:11:86:61:f3:bd:
b7:33:de:37:0f:83:13:21:89:bf:97:cb:b1:c4:3a:f7:71:31:
d7:50:79:f8:3d:a2:16:ca:c8:ef:d3:7e:33:7f:38:d0:2e:a1:
14:be:99:34:c5:22:50:60:4f:d5:c4:5a:08:10:1d:27:8d:4a:
5e:ac:42:88:17:04:e8:2c:4e:2b:3d:9f:d5:47:9b:06:0a:0a:
6d:20:cf:38:79:51:b5:e9:b7:c8:e0:ba:6d:8d:47:1c:f7:30:
a6:22:aa:fe:0b:72:f2:92:be:4c:cb:23:d6:fd:b3:01:c2:8f:
7a:d7:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:25 2025 by rpki-client