Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa
File: d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa (raw, json)
Hash identifier: 4dNrFX4esN0UtdpFAgkVjs+/IU2pKJk8nqKphfvR9lU=
Subject key identifier: F1:14:CC:FE:B0:61:67:06:16:DD:90:FA:0B:5D:79:AE:FF:F5:ED:43
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F432858485470255186917A457F25E600
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 30132
IP address blocks: 149.20.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:25:51:86:91:7a:45:7f:25:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=d3ca9e3e-5ac9-4574-a639-ce3a8c0ad07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:70:5f:da:08:9c:66:17:cc:e3:8a:13:6b:fc:
26:01:57:d2:ba:b7:ed:16:0b:43:80:5f:c4:30:5a:
29:56:67:7f:60:ad:c6:11:fa:35:f0:c4:e3:d4:bd:
79:a1:67:e6:99:f7:34:46:52:87:26:4e:85:60:8d:
41:24:e1:50:4f:7e:90:bb:e7:ca:19:2e:10:e7:68:
56:04:d1:40:4c:c4:c4:99:e6:cc:30:dc:f7:8f:67:
a3:47:9a:a1:b0:14:ed:b6:0d:4a:0a:2f:a3:b5:4c:
eb:bd:7e:83:15:96:47:23:2c:a0:68:e5:2c:39:7b:
44:ce:f7:2d:3a:17:31:ee:17:ef:5d:e8:45:62:bc:
25:ae:4b:09:41:d9:ce:3a:68:c6:0c:65:f5:e9:7a:
48:45:b0:b9:d6:21:fb:d4:13:af:a0:0c:1e:87:9c:
18:a2:64:55:d6:d4:bb:29:a1:f6:69:9d:3f:1c:b5:
e8:07:0e:a1:c6:88:6d:a6:94:f2:c2:a9:07:c4:f3:
56:3b:91:82:03:03:40:b7:6b:6f:f8:5c:68:57:74:
b2:9d:da:b0:4e:fb:37:36:88:87:62:45:24:81:67:
6e:06:c3:e0:9b:fe:a1:70:b2:b5:a0:7e:99:22:78:
76:14:0b:45:66:5d:f1:db:da:7d:9d:55:4a:21:3f:
6e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:14:CC:FE:B0:61:67:06:16:DD:90:FA:0B:5D:79:AE:FF:F5:ED:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:1b:5e:3f:e5:fc:5f:e4:19:c0:54:f3:9e:3d:d3:34:75:74:
ab:8f:5a:40:0c:60:b6:64:85:39:aa:b2:e4:79:15:99:88:bc:
2f:25:68:1b:30:d8:f7:9f:91:f9:66:b9:ec:0f:f5:b6:11:a3:
95:e8:46:a0:8e:1c:91:1a:44:6b:01:9a:62:45:98:92:6d:8f:
e0:13:7c:e9:91:d3:e3:ac:57:b6:d0:32:0c:84:f8:87:cb:85:
6c:06:27:48:c4:04:49:be:b5:4d:13:68:c4:62:73:3d:5b:18:
f7:7b:22:fd:bb:b3:1a:48:9d:13:3b:ce:50:63:da:30:65:aa:
b5:1d:77:a9:2a:86:4b:66:1a:c2:df:91:67:a3:c5:a0:6f:7f:
f5:dc:75:41:f2:35:62:49:20:0e:1b:ef:63:77:c3:a4:06:07:
1e:38:80:41:a5:d2:19:b9:53:37:c0:08:5b:17:a4:18:94:68:
e9:cb:2d:43:a4:00:b6:41:2f:d9:01:2b:a1:54:99:c3:c0:67:
ad:aa:a7:9b:17:6c:7f:6e:d7:bf:0d:cb:51:b2:46:94:82:57:
b1:62:8d:07:b3:82:d3:cf:a6:6c:3c:69:e8:9b:96:8c:1c:5a:
17:8b:02:46:70:67:58:1e:df:c5:2c:0e:d9:05:b5:8b:dd:cf:
19:49:9f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:09:23 2025 by rpki-client