Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa
File: 91d55642-0c47-39e6-9f01-b3db6078eb51.roa (raw, json)
Hash identifier: BrWCm2FS9w6SL1FMBwfzbjvbDbGKZT/SPxKKI0O/L2Q=
Subject key identifier: AE:C9:00:67:8D:CE:F8:1D:64:FF:3C:10:1A:B6:71:7F:DC:D7:5A:4A
Certificate issuer: /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
Certificate serial: 010D0C9F43285848345561D0DD284C073E87CBC0
Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 30165
IP address blocks: 147.253.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:61:d0:dd:28:4c:07:3e:87:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=4e2be072-f8e8-4128-be49-879abdf271e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e3:a4:5d:ef:d2:df:5f:a0:d5:27:5e:39:02:
07:4b:4b:01:0d:80:c9:4b:d9:e9:bf:44:f5:a4:4e:
ad:35:b5:e1:73:19:87:b5:9e:47:34:7d:f7:90:6d:
bf:e9:a8:df:75:d5:ed:d8:90:40:5d:f7:15:03:59:
3f:90:92:3a:74:d8:96:d7:73:55:a1:0a:f7:64:45:
63:fb:f4:b6:84:0b:2e:dd:80:99:90:d0:77:30:41:
9a:95:da:57:1a:f8:a0:ad:b7:7a:b0:d4:ea:64:96:
ea:7f:3a:df:b3:55:5b:78:cd:11:87:39:a6:86:14:
3d:6b:e5:4d:f1:10:39:ed:c9:4e:96:0e:c9:ae:3a:
ea:8a:06:61:d5:e5:c5:61:2e:47:4e:aa:f1:a7:a4:
09:f9:a2:22:b3:d7:23:02:5b:69:74:1a:6d:56:a3:
80:f6:56:6e:93:3b:cc:a9:f3:b4:13:e3:77:6b:8f:
97:38:d7:ae:ce:6f:c1:06:70:bc:0f:e8:39:01:33:
33:10:d5:ce:b0:d3:39:50:cd:b4:9a:da:b9:7b:bf:
ed:60:ef:8c:5b:35:2d:d1:9c:5a:6b:22:54:2d:1f:
6e:ed:72:12:18:c9:65:1d:86:81:c1:c0:ed:47:e0:
c8:d7:2e:b9:aa:55:f8:42:67:c3:02:57:c4:c5:43:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:00:67:8D:CE:F8:1D:64:FF:3C:10:1A:B6:71:7F:DC:D7:5A:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl
X509v3 Authority Key Identifier:
keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
sbgp-ipAddrBlock: critical
IPv4:
147.253.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:20:64:e8:0e:14:40:10:d0:a3:4a:3f:41:5b:2a:2f:28:b1:
3f:74:21:c2:75:fc:9c:bc:e0:57:3c:7c:51:28:bc:93:f0:71:
cc:92:c7:b0:c8:78:c5:0f:e5:0d:79:b4:74:1a:2c:61:73:90:
55:02:66:18:91:4a:77:ba:cf:28:67:8a:ed:9d:5b:20:01:50:
f0:97:31:0d:4f:1a:34:c8:35:83:c0:7c:1d:29:b4:75:9e:6b:
16:7e:2f:0c:d1:a8:20:7f:7a:35:b5:fa:84:7f:af:95:e8:f9:
83:8e:1a:17:cb:37:65:f5:8a:04:b8:db:5a:f6:6e:f6:f9:53:
4e:83:d5:97:15:f5:de:55:92:05:85:28:9c:a1:f6:23:7f:31:
42:31:2a:ae:2d:67:d5:2d:aa:e0:4c:4a:d2:68:21:e7:3f:48:
38:de:b7:51:b7:9a:12:5b:be:bb:8a:57:3c:ef:d4:84:77:3d:
1e:4c:b2:08:bd:b8:63:5c:8a:5b:a2:07:d2:3e:c0:ae:03:ec:
e6:d9:15:b1:28:c5:a5:fc:57:0f:9f:50:45:fb:f7:d3:a8:38:
80:20:21:0a:f6:bb:92:49:50:b9:4b:76:38:23:13:76:28:31:
74:ef:a2:9b:43:16:bc:e6:e9:74:56:f5:dd:eb:47:49:04:70:
23:c6:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:53:23 2025 by rpki-client