Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa
File: 96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa (raw, json)
Hash identifier: z/tdhoRFqn5PgT6y8a8NyGsiWY95e7J992NV1tJGor4=
Subject key identifier: EC:3E:1D:CB:F3:01:06:02:C8:95:DD:33:75:28:22:42:67:6F:95:BC
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584886B0807814127DA7983EDC00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 396356
IP address blocks: 149.143.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:80:78:14:12:7d:a7:98:3e:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=ccba3e0b-78c5-43ff-8ebb-8840f7461377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:07:b8:24:28:2a:e3:fa:4d:36:51:69:fb:
3f:ba:b1:d1:48:14:ca:d4:2a:4d:19:c2:3d:3d:0c:
a8:c1:04:d7:e0:4e:fb:29:df:4f:e0:04:d8:74:8f:
f4:ea:76:e0:57:c9:b7:16:30:ca:0c:f9:48:30:c7:
32:96:4c:77:1c:ac:f2:ee:18:58:b1:07:80:7f:af:
cb:33:5f:0f:de:b0:7a:d1:f3:be:d7:45:07:02:64:
44:40:75:13:8b:7f:23:02:7b:39:a0:42:4a:01:6f:
97:ca:2f:0e:5a:6b:ce:7a:81:c4:ff:02:d9:f9:48:
fa:06:c6:11:b7:ca:31:6d:2f:a2:c8:ea:db:74:32:
c7:41:56:c2:32:61:46:3a:9e:1f:99:5f:ed:0a:3a:
06:2a:1e:c5:7f:81:ff:ab:84:cc:ac:3f:7f:c4:88:
b3:38:02:be:8d:bb:59:26:d2:1c:9e:f8:5e:a7:01:
54:63:cd:40:b9:14:41:b8:7f:45:54:1d:aa:69:f3:
30:b2:7a:d7:db:c5:f3:64:f2:b5:86:59:9c:9c:81:
a9:bb:d2:d4:4c:ad:53:6e:c2:f7:6c:aa:b9:29:27:
03:3e:df:fe:63:2f:5d:9b:1d:72:0d:dc:6b:e0:26:
ac:c9:5a:3a:fb:f6:c7:17:91:a8:2a:62:84:3a:38:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3E:1D:CB:F3:01:06:02:C8:95:DD:33:75:28:22:42:67:6F:95:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:4d:c1:a6:bc:29:e5:dc:a9:dc:ec:80:f1:73:70:71:f2:dc:
5e:7a:ef:c5:27:5c:64:dd:7b:8d:d0:3c:6c:3f:e2:80:83:64:
5b:e4:54:41:79:b0:e7:92:ea:01:24:76:2d:55:7c:c7:8f:da:
bb:0c:90:80:03:32:a5:be:63:12:37:c9:c2:51:02:22:32:72:
86:5c:78:60:b8:37:be:31:9a:db:9a:bd:67:f0:40:49:c0:03:
e7:19:4d:60:9f:5d:0c:4e:ce:76:ab:ee:bf:00:4a:4b:a6:79:
46:c9:9b:db:0a:58:35:de:0b:4b:f5:38:f4:8e:9d:a1:ec:ad:
3b:71:3d:b7:96:b8:6a:85:4c:fd:fb:e6:4f:0e:78:50:83:e4:
40:cc:d4:36:1c:4f:ef:52:10:99:4a:e9:f4:34:a5:00:a5:80:
9d:82:d6:ed:ce:79:52:98:70:3b:28:31:c6:be:6d:8b:97:a9:
1b:ef:f0:78:e2:95:75:04:c7:d4:49:63:d8:b8:17:1b:89:b8:
d8:87:ad:a6:b6:d2:94:22:a7:6c:e9:1c:23:f9:1f:4d:65:ce:
bf:86:bf:9b:3a:7e:48:f9:b2:e0:a1:6d:15:75:b4:fb:ad:c2:
64:d2:72:ff:31:c7:d4:0f:85:bf:9d:b9:a8:68:23:2e:9f:62:
87:0d:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:30:45 2025 by rpki-client