Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa
File: dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa (raw, json)
Hash identifier: OR0JRa0mGQ0nDIU3f8DRYoByKOvyWjTJ81AX+81FjJs=
Subject key identifier: 52:4F:FF:CF:C5:85:85:4C:8D:BE:09:B4:5E:D9:9A:F1:4A:0B:24:F3
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847ED24C2A74D6DE4CDEC7F4F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 64267
IP address blocks: 149.20.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c2:a7:4d:6d:e4:cd:ec:7f:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=8aafe4b1-98e6-4c9b-a075-5b2268a6d3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:ec:e3:24:cf:29:72:e4:7f:19:33:bc:f0:
07:e6:43:f6:97:c2:07:0c:9c:84:7b:1f:77:a5:4a:
e8:95:cf:5f:f2:11:ae:1b:77:48:d7:57:f8:33:b1:
56:fc:0a:2a:1d:ee:ad:db:95:ff:cf:2f:fa:9d:5d:
03:fe:05:0a:07:a6:35:c1:64:ec:bd:c9:0a:76:a8:
3d:51:9c:1d:ee:e3:a3:51:5d:df:3a:02:b9:46:e6:
6f:d9:aa:03:8f:e2:98:48:44:82:e9:0d:93:68:2d:
af:be:cc:e1:1b:75:4b:a8:5a:94:ac:50:83:82:a5:
27:6b:6a:0e:59:4e:29:d0:ee:4f:4c:42:63:e7:00:
1d:11:03:a0:78:7e:b0:33:a4:88:e8:75:79:96:33:
d6:30:f6:16:07:f3:6a:1a:bc:66:54:c5:91:4b:47:
5a:0e:92:6c:2d:44:24:2c:28:12:54:0d:ba:5c:2e:
0d:ba:d3:cb:e9:19:56:e0:4b:31:03:6a:6d:e1:3e:
25:05:14:36:79:b7:3b:e0:c2:b5:1a:8f:3d:73:fc:
fd:6a:02:d8:a9:e8:64:fe:20:2e:43:ae:e7:29:a4:
c3:6a:9c:16:19:83:25:72:23:89:47:3a:f0:fd:96:
7c:d4:cf:05:a4:74:03:f9:03:0a:86:f7:b6:12:cb:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4F:FF:CF:C5:85:85:4C:8D:BE:09:B4:5E:D9:9A:F1:4A:0B:24:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:79:92:af:1c:ef:67:39:ea:16:82:40:e6:57:b7:86:51:14:
73:5c:16:ca:9e:d2:b0:09:0d:d4:df:3a:2e:8e:1a:7e:b7:1a:
ee:1d:61:36:55:51:2c:f0:36:30:a3:86:fa:20:20:78:02:c9:
85:eb:ab:6d:d1:e5:ee:06:a2:94:df:94:52:7c:47:48:15:69:
1b:4e:ba:22:2b:ab:d1:82:36:f3:5b:03:74:7b:8d:07:09:52:
7f:cd:35:46:56:7a:a7:1d:79:df:6b:62:8a:8b:08:ad:ee:ac:
3b:6b:35:c7:61:66:89:3e:9c:c4:7a:cc:04:4c:8a:be:f1:f9:
4d:34:81:0b:97:bc:6f:bb:55:f6:f9:c1:b8:9d:a3:3a:3f:08:
8d:c5:a0:35:56:f4:b6:3f:fd:82:05:dc:96:a7:e8:24:0e:bc:
41:ec:26:92:1b:bb:92:07:4c:b3:24:3e:0a:a2:68:95:58:95:
21:28:5d:7e:e5:c0:98:60:f0:f6:1f:92:55:17:ee:0b:c9:e8:
98:f8:5f:0a:28:01:7c:1e:34:0e:f0:f7:9a:b1:1b:65:12:c8:
5d:39:73:0f:76:57:95:7d:60:4b:30:a6:f8:b1:52:88:87:78:
f4:2e:3d:60:5f:01:3b:af:c5:bf:24:08:29:28:c2:0f:40:7e:
48:c8:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:31 2025 by rpki-client