Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa
File: a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa (raw, json)
Hash identifier: /tX3MgOiKUqTvqUotUYAt8lw/nhFRRGewvEyfNhsRWk=
Subject key identifier: D1:3F:44:A2:1C:1E:E6:AE:CF:BB:3D:28:92:E5:7A:7B:6E:75:59:FD
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584819CFC18682B91759D41E4880
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 30132
IP address blocks: 149.20.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c1:86:82:b9:17:59:d4:1e:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=afa21b32-3201-4cef-b65d-1e050aef69ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:16:2e:7c:aa:b8:81:53:7d:b7:c4:74:91:
47:a8:bb:41:55:67:30:26:71:0a:dc:9f:16:70:00:
c7:69:b7:84:27:57:c0:0a:e9:8f:aa:dc:fc:95:f8:
fc:10:7a:75:c5:ae:ee:5d:bd:d8:fa:c9:42:33:47:
54:e1:7d:83:23:3b:31:58:ad:1b:f1:83:9a:8e:c7:
c3:53:0c:87:71:e1:57:e6:f1:25:c4:fc:6c:51:c3:
4d:c3:65:56:99:a7:b8:5e:96:9c:ea:b0:ea:01:70:
6c:7a:84:9d:7c:a4:b8:09:2c:08:48:e7:d0:e5:4a:
5c:ac:d2:af:d2:a1:97:9b:1d:16:db:22:b2:1b:0c:
60:73:9b:f9:30:e2:f3:68:a7:90:a4:89:cb:46:8a:
63:f0:c2:e8:32:e7:c1:e3:be:22:66:84:6b:de:34:
65:a6:db:5c:bb:46:b1:09:00:73:31:c2:44:37:cc:
96:41:33:9a:d3:91:0d:73:4d:90:09:27:cd:ba:f8:
48:51:7a:e9:bf:fa:17:c2:d2:16:88:50:64:6b:6e:
42:f7:aa:9c:a6:56:53:b4:ac:b7:42:69:37:1a:37:
10:b7:9e:da:d5:89:b2:88:ff:1d:8e:3a:9e:6c:be:
8c:35:e4:d1:e4:d6:00:b0:90:ad:13:df:b8:26:2f:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3F:44:A2:1C:1E:E6:AE:CF:BB:3D:28:92:E5:7A:7B:6E:75:59:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:77:1f:00:91:32:8f:84:77:6f:d6:0b:0f:7e:d1:8a:11:a4:
3b:20:71:da:2d:4e:76:00:26:32:cc:30:18:bd:79:67:bc:7d:
1a:8a:51:1b:9c:57:c7:b9:63:e0:ab:26:c3:c9:97:81:24:81:
ad:f5:52:ab:6f:9e:68:6d:9f:a9:f5:cd:b5:f7:01:2b:5d:ab:
e5:15:e4:ed:1a:03:d6:a9:d9:ee:81:af:fa:02:3a:80:50:79:
57:0b:a1:8f:f0:c5:62:8e:1a:09:44:08:1c:2f:90:42:3c:af:
e0:5f:7d:99:4f:f3:ab:d5:0b:77:e1:63:e1:fa:e4:15:85:0b:
ad:35:bb:2a:30:39:d8:69:27:0a:0c:b3:79:db:21:cf:23:47:
7a:28:a1:51:1a:d0:d7:3d:8b:f7:12:77:d1:a5:f0:a8:e4:28:
2d:9f:4d:05:73:26:41:2b:d8:ab:b1:8d:4a:89:9c:90:37:13:
aa:79:c1:cf:67:d5:fd:9f:ce:9f:49:92:17:f3:de:3d:c2:5e:
21:f9:d1:cc:9c:be:f0:dc:3b:99:cf:77:02:b5:21:59:97:75:
35:df:f7:c5:57:3a:f5:e8:37:99:06:22:0c:78:ba:8c:6b:2b:
b5:2d:0d:54:9d:75:dc:7c:f6:d0:e0:c4:20:24:cc:09:20:45:
4c:9f:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:57:39 2025 by rpki-client