Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa
File: caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa (raw, json)
Hash identifier: j18Z04QMC1CITufGvLFXGB17MOM1gSL3CSWn2ydtz1k=
Subject key identifier: 55:17:2D:6D:06:81:FA:18:CA:7C:36:46:7B:D9:1E:DA:AA:C3:A2:DA
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F432858485CD029D8ADB6DEA9B9527FC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 6939
IP address blocks: 149.19.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:29:d8:ad:b6:de:a9:b9:52:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=d09a0c65-03d3-4d47-b834-73aa71d8369d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:ee:56:4b:07:fa:09:d2:cc:bb:7e:49:06:
d0:92:11:fc:a3:fa:e7:ae:d7:02:b5:98:c3:6e:17:
9e:d3:95:28:d6:e4:49:11:61:84:f9:91:7e:25:98:
4e:d0:ef:c7:87:e9:a7:68:7e:90:62:41:e6:c0:36:
dc:d5:f4:5f:dc:06:cb:51:8f:a3:18:a1:2b:47:9a:
76:0f:91:74:7f:0b:4a:87:a1:b4:26:e0:fc:e7:29:
46:3e:3b:53:98:a9:e7:89:0e:79:1b:57:74:fd:f7:
36:3b:e8:1d:79:b8:32:33:02:d0:01:cd:ee:d2:34:
e1:4c:75:aa:9c:d6:7e:22:da:fe:6a:80:fb:84:31:
42:c2:21:81:46:a0:21:53:24:73:ba:d0:3d:08:11:
27:ee:cc:cc:36:fd:6a:3d:a7:58:66:ba:6b:50:1e:
95:13:0f:48:03:24:b2:30:d9:50:66:a6:5f:c5:2e:
2e:15:52:22:5f:9e:23:74:1e:aa:fd:4f:5f:5e:a2:
88:16:05:f8:ef:15:cb:98:ff:ad:ce:22:8f:8d:08:
90:12:73:c6:41:65:1d:cd:10:14:f4:7e:66:d7:b8:
36:43:44:b3:48:62:e0:29:91:4d:26:58:98:89:17:
1d:d0:3d:2e:04:9e:f4:28:1c:3b:72:84:61:7a:6c:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:2D:6D:06:81:FA:18:CA:7C:36:46:7B:D9:1E:DA:AA:C3:A2:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:88:69:48:0c:5a:32:7d:8c:f2:6b:85:f0:ad:3b:4a:04:9d:
e8:ad:2f:fe:db:cf:7d:8b:1d:71:30:55:1f:cd:22:3d:51:56:
cb:c2:34:6b:3d:7d:46:14:40:57:9e:29:f5:94:84:27:37:23:
af:cd:aa:c4:1e:b9:70:fe:33:b6:5d:7d:85:c1:53:b1:50:ce:
71:16:65:a0:f2:a7:7c:aa:1a:ff:97:32:dc:3c:c6:bf:0d:4e:
66:fe:db:20:e0:8a:fc:23:41:d7:c2:97:fd:7e:83:13:10:c6:
62:e4:8d:1c:3f:28:22:93:4e:1f:61:9c:eb:0f:99:44:24:fa:
71:46:36:af:31:60:20:34:b0:6f:83:ac:3a:68:11:72:d9:0e:
cf:ce:c5:c2:02:86:54:c5:1f:d2:e0:b0:86:12:92:f8:a6:c5:
33:29:26:8d:d1:4b:7d:cd:4d:83:7e:93:00:e3:6f:bf:36:c6:
52:94:c5:17:a0:08:0c:95:81:c6:94:83:cc:8f:30:7a:92:0f:
63:81:50:c0:e2:bb:2b:3d:a7:30:18:37:0a:7f:49:3a:b9:e0:
e2:6b:a1:73:5c:8c:64:b7:1b:a5:93:02:98:1e:b5:17:b9:0e:
c2:13:d6:00:53:8d:0a:c4:b7:25:49:97:82:bc:bf:a4:1d:83:
31:98:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:10 2025 by rpki-client