Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa
File: 43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa (raw, json)
Hash identifier: vJQRH2M9afdtoW+YiVt6Jpp3Q3Ex+nYizWRejHPhCro=
Subject key identifier: 38:B1:5E:32:BB:C0:13:B1:EC:31:1A:1A:A1:9A:E9:2D:CC:6A:5B:35
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847ED24C2C860EB33A28B969C00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 64267
IP address blocks: 149.20.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c2:c8:60:eb:33:a2:8b:96:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=42e1c322-9aa6-421b-ba1a-6b4c04e1feb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:46:d0:b7:0b:b4:30:68:43:e6:95:9d:d3:
28:7e:c9:4a:f5:76:8f:0c:20:49:16:75:fd:b2:dd:
54:63:c2:ae:d1:65:a7:39:e8:c0:ef:82:05:99:51:
24:d1:76:86:12:82:7f:fb:9c:10:bb:8e:8b:15:ee:
9b:20:41:c7:ae:0e:08:9b:ea:16:ab:a9:27:00:48:
5b:14:d3:7e:e5:40:30:cd:ba:50:29:d2:ee:82:36:
97:6a:1e:5c:1c:9c:a9:76:57:bb:80:8f:ad:a7:70:
0e:ae:5f:d6:3f:45:21:a9:7e:6a:7d:b2:f7:ed:6e:
e8:e8:4c:e5:04:d5:46:43:f6:54:94:c1:32:b8:c6:
e7:14:82:63:71:2d:3e:6d:06:c9:37:10:58:f0:24:
0c:47:8a:30:27:c4:95:d9:04:91:6a:19:10:5c:26:
1b:af:fd:63:f5:65:e3:63:3a:11:0f:ad:52:c9:77:
c2:6d:17:d1:e4:bc:f9:c4:9b:d9:ab:21:8b:04:f6:
84:b7:17:7c:a1:6a:ca:e3:2e:4f:00:bb:66:b4:db:
fa:16:e9:bf:6c:43:8e:41:ed:84:72:a2:dd:83:a3:
32:d9:34:e3:82:58:35:f3:38:70:43:99:92:29:75:
2f:d8:08:fa:ac:b0:d6:61:3b:a7:e4:b9:8f:3c:37:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B1:5E:32:BB:C0:13:B1:EC:31:1A:1A:A1:9A:E9:2D:CC:6A:5B:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:bc:73:e6:0c:c0:8b:23:d5:5e:5e:6f:f8:01:e4:de:b3:45:
87:c2:23:e5:c0:a5:2f:91:f6:76:8d:b9:16:2e:f3:7e:17:75:
e9:2e:82:bf:1f:d8:67:61:55:52:55:e2:59:c7:d0:a6:43:63:
b9:06:b8:b7:82:64:c2:a7:0c:db:47:88:63:63:01:0c:58:18:
70:8c:95:30:c8:58:f8:43:22:87:be:37:d8:2f:1a:a4:aa:c3:
a6:a5:fe:4a:bb:37:ec:e3:db:5b:21:f9:d2:13:a7:63:11:53:
c6:f9:9e:e0:41:08:c5:cd:87:a0:ce:e3:9e:e0:36:26:93:a8:
e0:fd:c6:92:f5:b0:78:53:f3:a8:2a:20:12:0e:c0:58:c7:2c:
6c:a7:36:2b:70:d9:e1:e9:10:8f:0b:73:35:61:c4:ac:32:6e:
49:2d:b1:da:1b:31:f1:dc:42:e9:c4:e7:25:a7:de:e8:7b:c6:
34:02:9d:84:68:2a:96:ac:0f:d3:ad:1b:40:0a:68:81:d9:7a:
00:9e:e3:f6:7a:10:c5:ae:65:ce:55:c5:af:42:dd:5c:03:8e:
07:af:74:66:8f:ae:98:34:56:ba:cd:d4:bc:e9:d6:7f:4e:60:
8f:7c:6f:5c:40:a7:00:02:a0:59:58:29:01:e4:83:8e:d5:45:
33:dd:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:03 2025 by rpki-client