Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa
File: 28e253dd-d9af-340f-9c53-36fda0651ce5.roa (raw, json)
Hash identifier: DnEqMGaTeIGPR56WRdzcF8kGIci0rs0YjEF0tZUxDow=
Subject key identifier: C6:D4:54:19:9E:1A:FD:99:73:1D:61:82:73:CC:FA:92:D4:FB:A7:C1
Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial: 010D0C9F43285848037A4616E8C64A6C71848090
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 149.72.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:46:16:e8:c6:4a:6c:71:84:80:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=defc3950-2040-4f7a-bf5f-2682535dbf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:af:14:5b:70:46:be:98:1d:be:3e:f1:24:
58:04:de:97:ee:01:a3:c5:53:6e:12:a1:75:ff:7e:
44:86:16:c5:a7:70:42:63:f9:db:32:7b:8b:3c:ca:
53:43:09:47:b7:0d:01:8e:6a:b1:20:27:71:80:8b:
c5:84:cf:10:0c:23:53:92:83:b3:af:da:d9:62:6b:
52:b0:63:d2:97:44:56:67:52:74:40:b9:4b:35:30:
32:49:00:22:cf:e4:ff:4f:a2:f1:f1:1a:2e:24:82:
4b:ad:31:d6:a4:04:7d:f9:f2:71:8e:37:9b:50:09:
20:33:19:01:9c:77:ec:96:57:f9:46:16:d5:88:d8:
0a:4c:5b:87:b1:fe:e9:c7:ce:2f:66:fc:1e:c9:4c:
db:3a:9f:e2:a3:7a:07:53:53:67:78:49:3f:b8:68:
24:2b:ba:d0:29:1b:c7:a8:52:2f:28:04:eb:a2:4d:
25:8e:5f:77:5c:58:70:81:64:85:6f:71:66:36:38:
30:82:d4:c7:4e:be:74:33:03:19:65:f2:bd:fd:7c:
8e:33:b0:f7:32:f1:03:f9:97:e3:7e:b0:b7:26:3a:
c4:18:15:20:04:3c:e8:9f:c2:9b:68:c9:05:0a:0e:
9c:cb:5f:b2:07:4d:13:1d:aa:6f:70:8a:72:3c:5c:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D4:54:19:9E:1A:FD:99:73:1D:61:82:73:CC:FA:92:D4:FB:A7:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
X509v3 Authority Key Identifier:
keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.72.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:d3:6b:c7:d2:b7:f1:64:a2:1f:d5:43:7f:eb:66:5d:a0:89:
cc:c9:28:8e:40:58:5c:ba:93:f2:97:c7:57:74:ba:40:30:97:
34:8b:10:fe:9c:47:47:9a:7c:52:9a:76:58:62:1a:8e:b8:00:
e9:0c:04:9b:82:3b:0a:aa:4d:75:69:51:c1:50:88:70:44:b2:
6e:84:89:32:91:17:e6:90:a6:b9:b3:02:52:c6:36:2b:d4:7e:
04:19:0e:f2:59:28:33:b4:c6:d7:25:5d:1d:bf:f0:da:94:dc:
2a:1a:b9:d4:a2:f9:28:c0:67:22:f6:73:7f:4c:19:d7:19:38:
7b:33:07:8d:c9:20:b0:d3:03:4a:9c:bb:49:d4:d6:cf:50:e6:
91:5e:5c:1d:6a:70:9f:56:a4:53:c7:f8:27:ac:fb:c4:f7:81:
72:f0:05:03:75:e1:10:25:90:98:e1:d7:9f:9a:50:12:87:31:
bd:87:d5:f9:9a:83:55:5f:a7:43:6c:c6:39:b7:c2:2e:3c:c0:
53:ac:d3:16:56:dc:89:72:ac:91:07:6c:c7:b6:4d:85:1a:89:
40:c2:74:6f:e4:4c:27:6e:10:8e:ee:d5:5d:98:f1:50:7f:4a:
86:b7:9f:f3:ad:37:dc:07:72:80:39:58:91:e5:fe:6b:9f:23:
d4:1b:e2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:16 2025 by rpki-client