Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1600f933-0e66-34d5-b63b-d90e3f3244aa.roa
File: 1600f933-0e66-34d5-b63b-d90e3f3244aa.roa (raw, json)
Hash identifier: h4SduRr1bQCVyxnzNClI5DQlnrHXWPFlUHEbyBUhqOk=
Subject key identifier: D9:A7:8B:90:F7:E6:34:68:2D:66:12:F5:80:8E:5B:6C:CF:0C:59:DE
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584819CFCAD6AD3A648AC824C000
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1600f933-0e66-34d5-b63b-d90e3f3244aa.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 1280
IP address blocks: 149.20.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ca:d6:ad:3a:64:8a:c8:24:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=ce3b3765-e9d8-4c35-b94e-ae7d85d7b437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c6:ca:04:04:d3:aa:13:4a:e7:34:ee:af:ea:
f9:b4:97:b8:84:8a:b6:83:77:de:ad:80:50:f2:89:
f8:5f:f4:43:c5:ce:bf:9d:fe:d1:dd:11:a9:4b:aa:
ee:52:ed:1c:94:23:06:57:23:51:ee:e9:a4:34:94:
30:3f:18:9f:61:99:8a:7d:bc:bc:23:2a:d0:e8:6d:
5e:19:cc:55:f2:4e:03:28:24:49:bb:bc:f5:87:f5:
38:36:15:66:ba:d1:5f:d5:32:45:53:02:a0:26:3f:
a7:84:ec:3f:d9:90:34:d1:fe:80:f8:76:b6:97:19:
ce:f7:3a:fd:d6:d7:21:69:c7:6e:15:f2:fe:fb:04:
18:b8:50:51:fe:29:9b:95:49:1a:76:29:fb:69:f1:
f7:7b:a3:13:f5:14:80:47:df:a5:5b:e0:6d:cc:0c:
f5:9c:e8:8d:a3:d4:f1:80:c8:64:7f:15:32:b4:fd:
82:c3:0e:26:d1:d5:8c:1c:f0:0f:f1:45:d9:77:0e:
22:6d:ef:f7:54:21:24:82:4b:9d:68:77:b8:ad:13:
5d:3c:ea:06:5e:49:46:ad:d4:2c:af:4c:40:c9:f9:
b9:a8:3a:3d:71:e0:b4:fb:6d:59:3c:0d:61:07:a2:
a1:fe:bc:23:b7:18:02:b9:6a:83:e5:8d:cb:d7:db:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:8B:90:F7:E6:34:68:2D:66:12:F5:80:8E:5B:6C:CF:0C:59:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1600f933-0e66-34d5-b63b-d90e3f3244aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:fb:a7:44:81:95:36:ec:e9:0d:8f:b5:92:ee:f7:f7:d7:ea:
1c:1b:55:5c:e3:c2:04:df:a1:99:c5:e6:fc:fe:3c:1e:37:50:
f8:8d:12:e9:01:ff:63:3e:b5:de:ec:d1:0d:73:e2:f4:6a:94:
db:66:16:9d:2c:49:3f:bb:4c:75:0b:41:eb:40:19:22:85:1a:
78:5b:4b:81:6b:5e:16:4e:3f:d6:58:3d:7d:5c:ff:6f:6c:fc:
61:be:a2:ad:8d:53:94:4f:62:12:fc:94:d0:34:fa:d3:88:18:
89:82:6a:df:52:8f:87:ff:79:d5:ad:f4:74:51:f1:11:16:af:
ee:68:1f:fd:b0:11:3c:e0:ce:7c:eb:c5:ac:14:7b:64:63:49:
a2:92:81:be:be:5c:80:f8:64:07:b0:73:64:f1:a7:c6:44:cf:
b9:0a:62:5b:7b:f8:0f:41:7c:75:c4:8c:80:0d:16:46:b1:65:
3c:c5:af:d8:12:80:a2:6b:d7:97:c3:33:4f:e7:c4:57:c7:61:
d6:48:e8:aa:46:9c:ec:eb:62:cb:dc:87:6c:04:d0:7b:78:e4:
5f:bb:fd:c9:4c:99:c7:8e:b8:1b:d3:a0:f2:8b:c0:f4:87:a4:
b2:71:1f:c4:fb:9f:64:58:be:d2:d1:19:8f:3d:88:51:94:90:
e9:8e:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:13:15 2025 by rpki-client