Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa
File: 1a24eb8c-763e-3fe5-9854-4c755677df1e.roa (raw, json)
Hash identifier: yEjRluONOEtwVY8k60EJ4+PIP5XKBaaZYjKxq/geRGw=
Subject key identifier: 8A:FE:A6:AD:D8:FD:12:33:81:50:50:95:1B:37:F6:B3:9B:DF:96:3D
Certificate issuer: /CN=943895ce-649a-4937-9d38-a57b20ee748f
Certificate serial: 010D0C9F4328584869606CD413086CE12425E6DE
Authority key identifier: E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 16824
IP address blocks: 149.20.232.0/24 maxlen: 24
149.20.233.0/24 maxlen: 24
149.20.234.0/24 maxlen: 24
149.20.235.0/24 maxlen: 24
149.20.236.0/24 maxlen: 24
149.20.237.0/24 maxlen: 24
149.20.238.0/24 maxlen: 24
149.20.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6c:d4:13:08:6c:e1:24:25:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943895ce-649a-4937-9d38-a57b20ee748f
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=8b9a6e8a-e766-400b-8287-aab57c711bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:b2:e1:0c:b5:a7:b6:27:76:7a:f1:b2:c3:
33:29:61:bb:b8:45:61:03:73:58:94:2a:b6:17:d7:
e8:bd:da:fe:b7:64:63:1d:7b:3a:df:d6:16:29:02:
5a:97:20:99:b8:ea:43:2d:44:c0:8b:a1:0a:f4:f2:
30:08:e4:6d:cd:54:0c:a5:b5:5a:29:a8:c3:cd:20:
c2:90:49:e5:91:8f:ba:a1:64:00:60:cd:8f:58:6e:
e2:a7:e4:04:a6:1c:1b:9b:c4:03:6a:fb:af:0a:d7:
9d:39:b3:b2:0a:84:0e:26:aa:4a:c8:b4:50:1d:1a:
15:e8:d5:de:fd:32:fc:bd:a8:ca:4f:25:54:a5:7f:
30:a8:1b:77:d5:ed:f3:8f:bb:59:45:fc:72:6d:d5:
ad:99:a8:29:03:d9:d3:4d:61:b1:0f:ee:db:5b:15:
73:ac:b3:c4:e7:cb:60:48:f1:3a:62:43:e2:08:27:
38:9f:ef:f4:66:8d:40:18:8d:9e:98:ae:37:10:7a:
af:25:ba:bd:33:dd:5e:ef:93:85:00:c9:23:7d:31:
69:13:74:6a:d6:d4:c4:de:be:cb:77:23:7b:87:09:
b4:ed:7f:d8:04:51:a2:b8:6e:94:db:4a:5a:ca:07:
ac:3c:9a:69:df:7a:5e:37:0b:1d:be:c3:c0:70:13:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:A6:AD:D8:FD:12:33:81:50:50:95:1B:37:F6:B3:9B:DF:96:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl
X509v3 Authority Key Identifier:
keyid:E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:9d:8d:a6:b5:4f:cc:cc:20:98:e4:52:18:28:e1:e4:61:d9:
7a:99:4a:0f:a6:fb:90:31:7c:94:d6:6a:77:81:7c:c5:bd:c0:
b2:87:9e:a4:d1:00:53:fd:76:bb:06:ee:21:ef:ed:87:34:69:
6d:ba:39:66:81:bf:b3:26:4e:08:9e:3a:90:68:ad:c8:e8:94:
38:c2:b5:48:34:e2:55:ee:95:3b:3f:48:53:2f:5c:0b:1b:76:
95:1f:1a:8a:26:b1:dd:ac:a9:00:84:e7:19:d9:ec:6e:eb:c2:
93:e7:47:4e:64:c9:b7:bf:cf:be:c7:a9:0a:51:aa:7c:46:bb:
55:df:e7:45:9a:3c:fb:c2:04:1e:85:ea:1f:ec:5d:9c:48:b5:
77:29:94:ef:fd:86:e3:f8:01:40:85:56:e7:11:4d:69:c1:c0:
8c:ac:26:5b:83:c1:f4:14:26:8d:04:7a:b8:53:5b:b4:3e:2f:
3e:43:11:d6:c1:c1:a3:ad:da:8e:d6:b0:ea:de:51:14:57:1d:
b1:38:58:08:82:e5:01:c5:17:42:83:5f:fa:66:37:ff:4b:d2:
69:12:66:c5:9a:f9:03:0d:b5:07:03:62:ed:69:b7:de:c9:44:
03:02:54:85:f9:c6:20:d4:43:76:ad:63:f2:03:fe:42:e2:14:
51:80:d7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:13 2025 by rpki-client