Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa
File: d87637ed-589b-3719-b2cf-7799ebf79109.roa (raw, json)
Hash identifier: W3s/2U9rJYX6fvSq1VtsNnsq6+SFIwCRd68y2Hv7Q1Y=
Subject key identifier: 1D:22:CB:37:D7:61:84:03:E8:63:A6:C7:AB:D8:E6:3E:81:CA:8A:D3
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848037B6BEDF0361106729F8EC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 8075
IP address blocks: 149.1.0.0/16 maxlen: 16
150.212.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6b:ed:f0:36:11:06:72:9f:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=0a18c926-5489-415c-93d9-91fc5b88863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:38:69:37:fc:61:34:be:52:4f:87:74:f9:
c2:47:5d:b5:ab:32:a3:07:ac:4d:5f:22:cf:17:2f:
69:7c:c0:80:b5:89:8e:f4:d0:a5:62:75:ec:0c:2a:
24:60:50:ff:8f:5e:a3:60:e0:62:98:81:c9:cb:6a:
93:d8:ad:69:71:c3:0e:4d:f6:15:39:83:cc:83:a5:
f3:2c:4c:2c:52:b3:b6:25:2a:a9:2a:3c:d1:35:2b:
d8:1d:49:b9:da:8b:4b:ef:4c:cc:da:64:63:25:97:
cd:55:05:c8:13:53:5c:f9:fe:01:08:67:71:8c:6a:
18:46:68:4e:16:4b:27:4b:36:33:de:c8:f9:36:7a:
cf:84:51:9e:91:09:c9:53:56:ee:cb:96:d1:cf:8e:
42:ad:7e:f9:91:82:48:ee:40:14:20:35:4f:f3:dc:
ea:71:83:76:83:21:b5:dd:64:b2:07:6a:9f:5c:7c:
e9:1d:25:99:b1:16:dd:1f:8a:70:83:67:3b:8a:9e:
0f:b5:c2:4a:24:d0:87:67:27:67:52:22:34:a6:4f:
08:60:f0:78:72:b9:1e:2f:28:74:76:25:e6:5b:ba:
f8:54:dc:36:d4:f9:7e:b8:83:6e:6e:47:13:aa:01:
84:73:7d:28:98:d8:f1:2b:b0:5a:58:27:bc:65:db:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:22:CB:37:D7:61:84:03:E8:63:A6:C7:AB:D8:E6:3E:81:CA:8A:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
149.1.0.0/16
150.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:d3:0d:95:74:30:f1:82:68:80:25:98:9a:0d:05:0c:91:b1:
da:86:2c:cf:d4:88:51:51:56:ab:71:9d:69:1f:65:3e:74:4e:
80:ee:db:42:90:5e:42:75:28:22:3d:f3:78:ce:db:42:21:dd:
15:00:7b:e0:09:79:12:21:73:46:2d:56:10:6d:55:4c:fc:63:
a0:f5:dc:da:39:bb:06:ac:01:3e:df:d1:07:4f:b4:7e:f0:8b:
00:38:68:f9:05:fa:23:ad:ee:d1:72:9b:79:a9:a4:88:6e:fb:
28:6f:a2:15:7a:f0:b9:67:38:2b:f2:74:b4:39:9d:19:90:7b:
ad:b3:87:52:24:61:db:12:60:4c:12:5f:57:fa:e7:68:47:77:
45:51:09:d8:d4:01:e4:e1:4b:8b:1a:3b:2d:6b:24:46:69:93:
d0:66:4a:d5:be:24:c9:8a:59:c9:45:37:8b:92:11:ed:c8:34:
80:e6:d0:6c:30:6f:96:33:9c:5d:70:98:1d:ee:98:eb:57:ea:
aa:5c:30:ed:11:39:ad:60:bb:0a:43:0c:72:32:05:c4:66:dd:
1a:1e:17:dc:b4:18:ac:6f:02:bc:33:c3:8b:74:0f:ed:4c:0e:
9c:97:4a:50:37:2a:e2:90:86:c1:f8:f6:b5:3f:62:dc:4a:87:
79:cf:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:24 2025 by rpki-client