Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa
File: ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa (raw, json)
Hash identifier: m2yn+vPd6EfRpmGQyDFSk24Vsa4G+YDH3HsxcZet49Q=
Subject key identifier: 7B:50:CC:E8:F7:4A:C3:72:53:04:93:65:03:34:BF:F8:89:3D:D5:A7
Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial: 010D0C9F432858482BF54E33CCE63FEC928D3100
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 399629
IP address blocks: 193.149.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:4e:33:cc:e6:3f:ec:92:8d:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=a84f9cfa-6e4b-4179-8ce7-626b7d83b1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:3e:7b:ed:5c:b7:a9:27:c1:4f:ee:a2:5e:
db:e3:52:50:63:87:5b:d3:b1:c3:f1:48:a4:36:87:
c6:e2:df:d8:db:f2:12:33:41:13:5d:3e:01:e3:62:
ff:16:25:a4:94:34:b6:94:76:09:1e:58:81:cf:24:
f8:a8:6a:a9:52:9c:74:7d:ff:52:6a:68:fa:b2:f4:
41:93:60:ae:ae:e7:44:81:74:5f:dd:04:b8:49:c8:
09:88:fc:44:cb:d7:87:c1:f5:1b:e4:28:ec:f3:22:
5e:e2:fe:0f:66:84:0e:3f:a8:f9:0b:8d:36:47:bc:
d2:bc:e7:92:5c:f1:0a:ef:1f:1e:bb:78:cf:78:7b:
23:fc:0a:7c:0b:b5:ac:92:09:39:6b:79:f8:67:25:
b5:ab:39:c4:a2:9b:cd:77:b2:28:d0:98:68:0d:c5:
e9:9a:71:1c:17:53:b2:70:62:b5:10:69:01:0a:1d:
4e:c2:b2:c8:be:c0:c2:6d:44:06:71:3d:54:c5:20:
9c:5a:27:6c:26:63:4b:a3:9a:d9:23:6d:77:26:a7:
40:46:f2:04:be:b2:31:bb:da:51:dc:6e:90:2c:a1:
4d:01:96:fd:e2:18:4a:1c:c5:a2:16:18:89:c4:db:
fe:1d:c9:65:f3:a9:a3:84:35:86:67:77:9a:60:b5:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:50:CC:E8:F7:4A:C3:72:53:04:93:65:03:34:BF:F8:89:3D:D5:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
X509v3 Authority Key Identifier:
keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
sbgp-ipAddrBlock: critical
IPv4:
193.149.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:3c:33:c2:7e:c0:b3:0b:19:40:ce:23:c4:98:67:bd:f0:3a:
1a:4d:76:12:4d:5a:4e:54:47:c7:e6:d2:f2:52:39:f2:5e:c4:
a3:7b:a1:43:08:62:08:41:c0:d1:0c:df:f8:06:bd:b1:77:51:
be:45:51:72:9f:c9:f7:a7:e8:b7:30:0e:0e:85:b2:c5:8a:e4:
b7:0a:98:7e:e9:7a:a2:ba:a9:43:0c:df:2d:f2:85:80:75:5b:
a6:8e:9d:85:b2:65:af:05:0c:9a:2f:b7:d3:18:cc:8d:83:50:
16:98:e5:de:06:59:4b:13:5e:6d:17:a1:ab:60:95:b5:9e:d5:
2c:be:6a:88:0d:86:e4:83:13:4a:c1:02:41:ef:02:a7:99:bd:
35:1e:a5:f5:33:6a:6f:d8:ff:e4:41:e2:5d:9d:35:08:32:e7:
f4:8c:3a:09:a8:23:b9:c0:8a:9a:42:e0:58:2c:39:30:24:39:
16:8c:56:5b:fa:73:51:ab:10:9a:41:f2:38:dd:1d:35:15:6f:
b3:d9:40:ae:d7:79:77:ae:2e:f3:d1:20:02:f4:90:f1:d7:14:
0b:8d:29:78:fc:02:b4:58:c8:2c:3b:1c:ab:6e:00:24:f7:18:
7f:9b:16:9f:00:1a:c7:13:e8:65:35:cf:5d:7a:9a:46:d6:22:
30:2d:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:03:04 2025 by rpki-client