Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa
File: 4c4c9fac-6d7d-375f-93e9-b348075a4662.roa (raw, json)
Hash identifier: ORe48uSGcwKuslwMp2oWIjexqto40x3KNcH9hXuHY7U=
Subject key identifier: 15:8E:DB:21:21:E3:3E:06:0D:6C:00:82:BD:C9:78:15:6A:F3:B9:15
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584819CFCE7EDF13FC29AD2C6B00
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 1280
IP address blocks: 149.20.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ce:7e:df:13:fc:29:ad:2c:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=2f197639-efd6-4be5-9411-c1ca00afa98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:07:63:38:24:de:cc:3f:ce:79:e3:c5:86:
eb:b7:40:b2:fe:6b:97:e7:ce:42:0a:04:4f:9d:df:
bd:21:56:fd:86:8c:f8:48:3f:e2:fb:1a:00:b1:0f:
96:06:61:c1:a8:cc:29:fc:eb:ab:0f:a9:3a:64:a1:
80:83:09:42:97:e4:19:4a:d1:ad:52:49:4a:25:3c:
a5:91:50:b5:24:82:03:fd:a3:ef:bb:53:3d:cb:6e:
3d:cd:d2:bd:e0:08:d0:61:a2:95:61:cd:a1:0b:47:
0c:ab:9d:ec:86:8b:6c:ae:ef:6b:73:f8:86:34:37:
09:2a:4a:02:b1:31:9b:30:56:d4:02:4a:f1:69:7e:
07:37:4d:62:2d:2d:69:1b:74:db:75:b3:79:cf:c1:
9c:84:1a:3c:d0:de:5d:5d:26:00:8c:97:fd:ee:77:
20:13:6e:55:f7:74:e6:c0:04:94:1f:18:92:1b:87:
60:c7:2d:54:f1:f0:e3:7f:d2:0e:b2:ba:ae:f0:ab:
1f:ef:c2:21:7f:84:11:3d:66:27:99:5f:22:b0:43:
46:c2:ed:25:8e:6d:a1:dc:19:2e:bc:83:da:9e:0a:
42:62:3e:54:ae:cb:87:e7:5a:9f:64:ec:9d:b0:0d:
05:4e:8b:07:25:71:0f:f0:05:c2:b3:a9:9e:5d:ae:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:DB:21:21:E3:3E:06:0D:6C:00:82:BD:C9:78:15:6A:F3:B9:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:68:92:7a:84:e7:5d:9e:22:83:66:d8:e2:88:83:14:89:5c:
06:bb:8c:ce:6a:c0:08:50:b0:14:73:d6:58:24:09:30:71:1b:
a9:07:c2:6a:6a:ed:b9:db:ec:09:04:48:19:1f:7f:f7:db:22:
61:1f:bb:a4:ac:bc:23:c9:ae:71:ef:ed:27:2b:aa:6e:94:c3:
be:b8:11:47:9c:9c:cb:d0:3a:37:36:69:a0:7a:46:77:05:50:
c8:5b:7e:14:8d:2c:ae:42:f4:09:0e:d5:22:80:b9:9b:c9:19:
16:5f:31:70:50:f5:14:b8:93:3b:a3:eb:68:f5:13:96:ac:1c:
b5:6b:cc:7b:bb:27:5b:27:1f:2b:5f:e1:4e:9a:55:8a:83:52:
44:6b:9e:ab:bd:1a:7a:67:2c:0c:9d:ab:88:8f:3c:a2:1c:3f:
15:b5:c6:ab:01:ce:25:72:a4:74:a1:25:7c:75:75:07:38:6b:
98:ed:f0:11:46:92:cf:c7:07:f3:38:9d:e0:01:0a:14:b9:53:
ec:e7:27:b9:30:84:b7:df:17:2f:c5:92:69:5e:4d:7b:b1:74:
be:7c:b7:ea:42:3e:f0:5d:c2:ea:e3:79:bc:cd:ad:a6:34:10:
8e:7b:bf:5c:f7:9a:9f:00:7e:e5:6d:83:4b:1e:37:14:91:5c:
a8:4b:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:21 2025 by rpki-client