Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa
File: ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa (raw, json)
Hash identifier: UH/8Fp+Mvm3DpvHyBA5S3KeNUF/9OSAN/eYLFmrVA5w=
Subject key identifier: D9:C4:5F:A6:15:F9:48:F1:FE:7D:3E:62:B5:8B:2F:3B:DC:18:97:FF
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F432858487755D0612DA07015AAA05900
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 18434
IP address blocks: 147.249.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d0:61:2d:a0:70:15:aa:a0:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=29fea354-c76a-4e28-a18e-bd0d01deb32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ee:fe:cb:a4:9e:a9:7a:a5:8e:87:69:ca:94:
90:3d:9d:22:d3:02:22:49:92:b7:64:35:56:50:b4:
e2:80:c3:64:7d:d3:ba:be:0f:17:e1:5d:b5:a7:0e:
52:b8:57:fc:42:b8:32:dc:d1:cd:2e:8a:02:c4:a3:
36:c5:4b:4d:20:49:3e:5e:d5:74:e1:6a:cb:78:4a:
c1:71:fe:45:83:fc:83:a0:bf:a5:9f:ec:da:3c:01:
27:8a:11:be:a5:2d:37:71:be:55:83:ec:d6:c0:f9:
0c:38:3d:94:4a:53:d5:46:60:7a:ca:c2:6c:42:f4:
7e:8b:10:a8:65:1a:b1:28:43:ca:d3:97:f7:30:3b:
5e:72:08:22:29:23:47:86:1d:eb:7a:54:db:7a:44:
42:c0:dd:e4:5d:fd:81:5d:4f:c8:c9:f0:08:95:54:
aa:07:80:d6:17:a6:36:24:41:be:1e:98:88:c6:ff:
5a:b5:bc:bc:ff:10:3e:fc:97:73:b4:24:83:75:7c:
89:77:a7:80:f7:3a:0c:9a:f2:9e:b2:c6:75:8f:4d:
1b:21:bb:d9:a8:d1:c4:67:7a:e2:56:06:25:17:a9:
3f:82:8c:2a:27:40:4c:cb:fd:04:27:c4:0f:24:9f:
b0:c4:d1:4e:b7:33:ed:a5:1e:67:d0:f3:c7:ed:08:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C4:5F:A6:15:F9:48:F1:FE:7D:3E:62:B5:8B:2F:3B:DC:18:97:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:07:64:8b:31:25:b1:a0:34:8c:1f:b4:cc:c5:61:eb:6c:86:
be:5c:0e:a0:09:b6:b8:d3:c6:df:59:86:77:88:35:e6:f8:df:
9f:3a:53:94:87:39:82:60:d3:c1:47:f4:d9:59:c9:12:9c:55:
6e:3f:08:d7:83:eb:b1:15:1e:a2:7e:f0:f5:6c:d9:7f:98:1b:
6d:e3:d2:03:77:2b:2a:4f:d8:d2:81:6f:0f:97:d3:ff:bb:a7:
6a:c9:29:ff:8d:06:8d:fa:31:4f:3b:9b:b6:59:d9:57:5d:0a:
fd:74:af:72:aa:96:44:20:d3:f6:28:0a:5c:89:29:a4:02:1b:
6e:aa:0a:01:39:d1:a7:a8:04:c5:1d:27:e6:cd:b2:4f:c6:05:
77:65:98:6b:f1:83:2b:a4:b0:ff:c7:a9:8f:2b:4e:b2:c4:cc:
39:31:8a:32:2d:49:02:fc:5d:a5:52:90:91:0d:55:4f:66:23:
a9:23:01:6d:79:a9:f1:80:5b:ee:c7:e3:16:4b:22:0a:b0:29:
a3:2e:b1:ed:9e:b0:f2:b4:c1:7a:10:40:06:0b:e9:eb:6f:4a:
4b:fc:b8:96:09:e8:db:fb:6a:ff:5c:95:2b:da:40:42:1a:80:
8a:29:1a:3e:9e:45:9f:6e:b5:e1:6d:78:97:71:f9:35:a1:20:
8e:5e:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:06:41 2025 by rpki-client