Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa
File: be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa (raw, json)
Hash identifier: HSQ0W+94HSknfnx+k4dM89WJofOCLiJZZNvHVsRo6h0=
Subject key identifier: 75:A3:63:B6:9D:F1:36:70:20:64:51:D0:6F:9B:C4:A0:0F:B0:67:05
Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial: 010D0C9F432858484D75903D3E4BD6E89373D400
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 393740
IP address blocks: 147.124.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:90:3d:3e:4b:d6:e8:93:73:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=ce883ae8-aa9d-45ec-a582-6b7970a1bfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:66:70:3d:03:a5:fc:68:34:e7:ce:c1:e1:61:
c6:60:7c:81:05:ab:41:26:77:77:60:eb:a8:81:ee:
b1:28:63:f7:86:2a:41:7b:7b:ec:d9:34:5a:d1:87:
96:81:0b:5d:55:ad:c5:ba:90:2f:4b:6a:03:1c:c5:
30:19:c0:cd:bb:f2:b9:a5:6b:23:3c:11:71:e6:0b:
54:36:a2:5f:db:13:13:f3:dc:eb:33:b9:3b:81:d4:
b8:97:86:0e:5a:18:90:7e:0b:14:7e:d6:c3:2c:ad:
08:2a:02:24:71:38:5a:c3:7c:5c:90:a8:7e:f5:ab:
33:bc:ea:06:68:32:e9:5b:2c:b2:cb:21:8f:c0:8e:
06:d9:1e:19:46:95:99:26:1b:3b:a2:78:d2:a9:34:
85:86:1a:a1:7f:e6:b9:2b:a3:42:5c:99:1a:ed:fc:
53:25:53:52:23:4a:e6:2e:2a:75:9e:2f:e2:7e:db:
e2:ee:9c:05:3e:50:71:64:1c:8e:f3:ac:9a:ae:bb:
32:1c:f5:4b:cb:e6:d6:49:4a:32:78:46:09:6b:55:
e9:49:51:c0:1b:0a:7a:e1:23:4b:99:8e:de:b3:25:
c9:65:47:a2:87:d0:ea:d1:ea:5a:38:7d:0e:17:b2:
97:54:15:72:15:5f:b1:dc:7d:98:c1:99:f5:e3:9c:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A3:63:B6:9D:F1:36:70:20:64:51:D0:6F:9B:C4:A0:0F:B0:67:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
X509v3 Authority Key Identifier:
keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:99:5e:97:0e:a5:d2:d6:0e:dd:bb:80:e6:8d:3f:03:d1:07:
34:c1:ee:bf:c9:c3:cc:a1:c4:5a:72:1b:21:0f:f4:c8:de:27:
9e:af:72:ba:6f:7c:27:c4:1d:95:e9:22:cc:9e:dc:08:74:2d:
19:6b:42:9e:3f:6f:8d:38:cd:d5:6a:bd:3d:c2:7b:c6:39:2b:
9d:35:71:d8:a4:62:b9:2d:0a:d7:bc:2b:99:72:ae:3b:0f:26:
d4:fb:8d:97:b9:54:c1:58:40:5a:df:15:5e:10:3f:b8:e4:7f:
bd:a8:8d:44:6b:ba:35:51:90:4c:ad:79:9c:af:51:58:ca:29:
cd:cc:ae:45:66:3e:84:e4:36:58:28:a2:89:ec:51:0d:05:df:
aa:8b:92:b2:6e:9b:06:cb:f2:8e:8e:03:ad:bc:94:8d:81:00:
50:0c:1b:ea:fc:6a:d7:b4:bb:fd:3f:e7:29:8a:68:7c:0e:81:
0f:71:11:ab:03:15:ae:56:25:be:dd:92:19:bd:ea:e9:64:18:
3b:01:8c:49:35:4a:58:a5:de:80:34:5e:8a:9f:53:ff:32:41:
b0:ee:a9:4a:09:f6:69:be:b1:7c:2f:80:55:3d:c4:c2:4e:e3:
30:65:20:91:f2:23:9a:50:5f:67:2b:e3:3b:98:d2:14:7d:4a:
28:34:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:19:07 2025 by rpki-client