Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dc65559-b295-30ad-9154-e10da47c7540.roa
File: 7dc65559-b295-30ad-9154-e10da47c7540.roa (raw, json)
Hash identifier: 3fFNU8ADLFIHhElQGg4DYo8nGYru5AMZYj6P1mSicNM=
Subject key identifier: 1C:2D:59:EF:B4:3A:12:13:F3:DC:CE:D4:67:0B:6D:22:04:D0:DE:E6
Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial: 010D0C9F432858482BF54DF1A1D27449678BA500
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dc65559-b295-30ad-9154-e10da47c7540.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 399629
IP address blocks: 193.149.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:4d:f1:a1:d2:74:49:67:8b:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=3fb25ab6-ea74-47f6-8a6b-5de15c9ddaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:95:6b:ae:2a:88:3f:b6:e7:66:25:09:81:
d0:02:03:a0:15:2d:8d:47:62:24:93:c9:74:9e:79:
06:57:bc:07:a5:75:87:d6:47:55:d8:23:29:b7:d4:
dc:47:a6:90:43:2a:58:bd:96:20:f3:a7:05:9f:3e:
51:48:a6:dc:9f:1c:0f:27:02:ec:0f:16:f9:97:f2:
a4:75:16:9d:b0:f5:9a:30:98:db:ba:76:24:35:29:
b0:6a:a1:1b:bd:06:fa:a9:dd:8a:40:ea:f2:c3:57:
00:00:2e:c3:d0:47:cd:c7:5a:d1:81:66:bd:0e:01:
25:0b:94:2c:c6:52:60:a2:10:85:fa:4e:c0:47:56:
8f:67:ae:2d:74:0d:2d:1d:8f:f2:b7:b8:eb:40:9c:
fc:e1:d8:6c:0b:68:5f:58:6a:28:0d:02:91:3a:99:
99:1b:c1:86:8b:43:d6:ea:03:dd:d8:59:9f:c7:a1:
67:0c:5a:a0:cd:fe:2e:c6:11:6e:40:be:22:d3:a9:
d6:be:8e:c1:f1:4c:4c:9c:a6:81:7b:71:32:71:98:
a6:3f:2c:e6:f4:2b:75:a7:3c:dc:1a:55:05:19:9a:
65:9a:0a:65:d4:c3:41:e9:3d:f0:01:65:72:ac:23:
a2:fc:e8:12:9b:dc:bd:ac:2c:f2:44:24:49:d8:1e:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:59:EF:B4:3A:12:13:F3:DC:CE:D4:67:0B:6D:22:04:D0:DE:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dc65559-b295-30ad-9154-e10da47c7540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
X509v3 Authority Key Identifier:
keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
sbgp-ipAddrBlock: critical
IPv4:
193.149.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:63:e2:0f:f6:d4:df:70:cd:d5:2a:76:53:d9:66:43:85:0a:
50:55:21:24:95:ec:df:34:3f:b9:c8:99:7d:ea:89:01:23:7d:
bf:fe:b3:90:5f:6a:0c:2e:ff:59:d4:53:95:f6:b8:9c:88:09:
4c:94:13:0a:89:c9:e8:9d:c1:16:fc:49:57:e5:19:c6:46:49:
bc:e0:d1:40:72:a4:ce:18:77:b9:bd:ee:78:49:dc:bc:6b:3d:
bf:ce:b5:9c:ca:94:92:10:7e:b6:e8:6a:8f:35:a1:9e:58:5e:
49:8c:2f:72:6f:85:cd:27:6e:4b:cc:ad:25:cb:61:8c:cb:0a:
d8:b1:09:7b:ef:6a:be:b9:dd:e8:6d:f0:26:d8:3c:4e:7a:77:
b3:2c:a0:29:3e:69:26:c9:82:d3:f8:cb:d3:3c:ab:a4:a3:a0:
7d:f4:f5:81:75:a2:6d:fc:73:03:a7:68:e1:7e:9b:58:86:cb:
f8:19:9b:01:b1:1c:bf:b7:e2:64:fb:6a:b7:52:3b:94:fd:c4:
c9:06:47:d9:13:79:01:c1:94:70:a8:3b:48:17:75:1e:df:60:
38:71:6d:70:61:ec:01:a0:d4:bb:36:1e:86:cd:79:15:ad:a9:
c0:0f:b5:fe:94:69:78:bb:b9:6f:46:82:96:67:5d:07:bc:83:
e1:4a:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:17 2025 by rpki-client