Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa
File: 2b4d14c3-782d-30d6-a683-951c6c83f730.roa (raw, json)
Hash identifier: HJF4uE4vWPq2YpRnTz1AbhEKFW1D++ZIcT4cX8lO0/Y=
Subject key identifier: EE:0D:9E:0E:B2:80:4B:B0:22:BC:FE:11:3F:40:68:8A:5A:81:6E:4F
Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial: 010D0C9F43285848222FD1A2F20978590B9AF460
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 36445
IP address blocks: 149.248.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d1:a2:f2:09:78:59:0b:9a:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=ebf0fab0-f37d-4cea-8764-daab313fa46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:84:4f:5e:97:41:2c:81:d5:9c:43:d9:32:
9f:eb:9f:74:e0:eb:f1:66:ba:96:19:8e:84:9b:f4:
d2:1e:2a:ff:70:e6:8e:9c:87:3d:e2:2b:dd:42:86:
51:f0:ca:f4:ef:97:45:dc:0e:6b:95:9f:3f:d3:3f:
47:dc:6f:f0:c5:55:99:29:98:93:e2:1a:14:89:e8:
b0:7d:8b:f2:df:ec:06:a3:82:12:5f:1a:bb:42:04:
ec:b0:f3:c0:36:54:eb:bf:f0:f6:47:66:14:46:9c:
c9:e8:bd:10:d1:07:0a:ea:3d:2f:73:fb:c1:ac:88:
f1:3e:c0:a1:ff:d4:83:06:80:b8:e5:7b:be:54:03:
50:97:5b:e0:7a:26:cc:f9:50:da:52:25:79:de:f0:
da:10:20:c1:8b:fc:89:e9:d4:5f:b7:f6:84:57:37:
a8:21:8f:d6:d1:ac:b9:e2:f3:32:76:93:e8:b3:57:
87:e1:b4:ae:57:12:43:6e:9f:b4:8b:e4:88:fa:89:
f3:40:35:08:da:c1:ad:05:10:e1:a3:31:76:00:f5:
02:d1:ad:f2:6e:0e:e8:6e:f8:65:90:08:6f:a0:81:
f6:22:d6:b7:84:51:e0:59:dd:28:dd:f3:27:34:d5:
27:e1:43:42:f0:fb:8a:8f:ae:cc:3c:62:a4:e1:5b:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0D:9E:0E:B2:80:4B:B0:22:BC:FE:11:3F:40:68:8A:5A:81:6E:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
X509v3 Authority Key Identifier:
keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
sbgp-ipAddrBlock: critical
IPv4:
149.248.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:fa:7e:45:6f:ac:5d:de:82:f6:7c:9c:01:1e:f5:40:35:cb:
6e:5d:28:0d:34:f3:f0:5c:fa:4e:c9:90:ea:3d:b2:d1:27:27:
e6:d6:09:b5:f0:4e:70:10:d0:65:97:92:75:d9:6d:de:9e:66:
6f:c5:1c:bc:97:58:58:4d:cc:e8:ff:12:08:84:4c:2c:c2:0d:
76:68:c0:cd:5d:e7:4b:56:af:40:16:65:32:eb:51:e3:7b:58:
bc:3c:03:a5:e8:70:22:2d:6b:68:89:6a:4a:49:5b:fb:70:ef:
96:8d:5d:75:8a:55:10:bc:23:3a:f2:55:73:2c:0d:04:fc:c2:
5b:e9:b5:1c:d4:26:0f:21:c9:83:6a:48:21:9a:92:7d:d7:65:
4e:22:33:d9:2c:6a:67:65:b6:08:36:01:5c:f8:28:66:f5:1a:
01:c7:cd:fe:29:64:4e:ad:3a:0f:de:88:bf:30:09:60:21:b3:
3e:71:58:f0:21:8d:55:c2:ea:7e:10:70:63:19:08:12:12:9f:
d8:a5:a1:ff:69:1a:2b:5d:8d:1c:57:fa:48:e9:fa:43:08:f7:
d9:68:3c:69:d9:7b:55:82:e0:c1:4e:f3:08:7e:c0:3c:fc:4f:
f8:eb:ec:36:17:d1:a8:1b:14:c6:a5:97:25:a2:cb:ac:63:33:
6d:33:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:28:12 2025 by rpki-client