Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a63f1cb6-4896-3c05-8951-da5b5fa2f47a.roa
File: a63f1cb6-4896-3c05-8951-da5b5fa2f47a.roa (raw, json)
Hash identifier: 5KaXrgDKLcqIiklqeBpFJH9j2lnfun0UPEpM16iMWBk=
Subject key identifier: 3E:CD:85:01:41:1F:54:C0:A5:5D:71:4D:D3:78:C9:65:40:66:CC:EB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB45185C6DB5D1F3017F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a63f1cb6-4896-3c05-8951-da5b5fa2f47a.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 141.153.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:45:18:5c:6d:b5:d1:f3:01:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=3e2f9316-e685-414d-aa9c-b5077cec0792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:63:20:24:a1:7c:e1:5a:2e:a1:4c:37:fd:
a1:d5:68:e2:c5:9a:36:03:31:b1:e6:95:1d:1b:99:
0d:4b:45:29:ef:68:41:27:95:09:b4:02:27:09:37:
dd:1a:e6:2c:41:a6:09:8e:7d:d4:f0:ab:5e:67:e1:
32:e4:3e:0b:d2:aa:85:89:df:f4:16:81:6c:9a:dd:
51:c4:4b:01:20:ee:17:ea:07:ce:a7:b4:5b:2d:00:
57:0f:ce:77:a2:13:59:d6:af:a9:7c:ab:aa:07:93:
88:af:1c:45:e9:14:03:08:e3:0a:09:e4:15:f0:fe:
d7:51:ac:8f:7d:1c:59:41:4d:c1:24:42:f2:db:ab:
f7:7d:a8:d2:41:ae:d2:9c:7e:22:8e:70:65:06:95:
21:7c:f4:6f:bf:a5:2a:1a:58:ed:53:35:4a:82:47:
df:f7:ca:9d:ef:46:4a:c2:70:f8:7a:63:3c:12:56:
65:51:73:5a:f4:3a:e2:8e:3b:0f:6c:35:9a:43:1b:
1b:30:a6:58:a6:16:20:81:ef:19:72:c2:8b:b0:41:
be:1a:2e:e7:75:eb:af:37:0d:f4:33:6b:f5:ca:d3:
41:3d:a8:9a:d6:2d:9c:b0:7d:ab:81:06:a0:8b:88:
63:3f:bf:db:fd:af:ca:06:0f:53:39:1c:f5:bd:ed:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:85:01:41:1F:54:C0:A5:5D:71:4D:D3:78:C9:65:40:66:CC:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a63f1cb6-4896-3c05-8951-da5b5fa2f47a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
141.153.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:bc:a8:11:ae:6c:2f:aa:1f:22:ce:94:25:25:11:b7:91:81:
7d:cc:95:24:70:7c:eb:17:9f:75:f6:86:db:af:19:32:82:52:
17:e7:df:86:f4:b6:81:e6:00:bf:6c:a0:88:e5:cb:19:19:a0:
c7:5a:e9:f2:1e:6a:fa:e4:c0:da:24:a6:de:b1:8e:88:a4:17:
e4:3e:0b:43:80:a5:bd:4c:7a:54:9d:2e:de:9c:bd:6e:7e:b1:
d8:03:34:51:15:25:eb:e3:24:24:fd:3a:b1:d6:ae:ad:1e:dc:
b6:4d:1b:ed:03:98:c4:86:a8:5a:de:a0:72:0f:e8:9c:1b:e5:
bf:e4:0e:e5:93:df:2b:80:db:e6:87:02:0f:dd:c8:d5:a7:5d:
96:57:a4:42:25:16:38:1f:20:7a:df:b7:e8:0f:54:cd:80:53:
c4:4e:1b:0d:dc:e1:ac:b2:c1:cd:f3:bb:af:88:97:26:d9:47:
29:b2:59:56:46:b1:2d:3b:6c:db:25:14:f4:a6:80:27:c2:7e:
a9:7b:0e:ee:f8:a3:30:f1:ee:d1:57:05:fb:ff:ed:78:09:75:
04:e4:aa:ee:2d:e0:02:45:d2:be:a8:1a:2c:be:e6:6e:96:88:
02:cf:4e:f9:b5:90:11:a4:e9:02:2d:50:bf:2e:d7:f5:20:01:
ae:95:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:43 2025 by rpki-client