Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98d51ecd-f562-3149-b859-0a8f1264da94.roa
File: 98d51ecd-f562-3149-b859-0a8f1264da94.roa (raw, json)
Hash identifier: pG9Us61nYbaaH8ff70tXT+nlpQQ3+0dRD6X6xzuHtzw=
Subject key identifier: 79:97:CD:EC:DB:E9:C8:C3:0B:D3:F0:B3:77:57:D9:9B:FE:89:DF:64
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B551905D1A6D83110C6C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98d51ecd-f562-3149-b859-0a8f1264da94.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 47.231.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:55:19:05:d1:a6:d8:31:10:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=c368b653-2e8f-460b-b0d2-353545a3dc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a5:98:c7:9e:65:d7:94:fa:d9:29:58:2d:b2:
7e:83:f6:92:38:84:cc:d9:56:0c:9e:b6:6d:23:2e:
e2:38:2a:27:de:a2:df:03:e5:da:d8:30:49:b7:f4:
64:ca:98:90:42:5f:7c:11:32:53:c6:6d:3d:c6:1e:
e7:a6:1d:9d:6e:dc:ca:d0:69:0e:df:f2:8d:69:24:
94:41:18:01:cd:79:4e:a4:15:c8:0e:0b:c8:2c:b5:
41:0f:47:13:7e:83:9c:92:e6:e7:35:07:30:9d:0f:
35:5b:ea:b1:e3:38:c6:08:25:49:54:d8:b3:4f:6c:
70:18:9d:52:4b:f5:65:8b:1b:27:7d:19:09:e0:fd:
dc:42:c4:9f:66:7f:25:83:ca:44:cd:c2:76:c4:ef:
ec:23:45:2f:1e:36:1a:d7:ef:a7:d8:04:b7:03:53:
9b:fe:00:77:12:3f:ed:a7:88:ef:fb:aa:22:f5:a6:
0f:2e:4f:1c:7c:84:1d:b3:53:f3:10:f2:4b:b8:10:
b3:7f:a8:a3:c2:ce:c2:0d:dd:cf:8d:9c:fb:f1:20:
f6:69:bd:e7:7f:0d:ca:1d:e2:4d:0c:b0:e8:28:d8:
87:29:a5:16:66:fb:b8:da:91:4a:80:e4:b5:cb:e4:
47:53:f2:d6:90:ad:da:b4:3c:ed:60:66:55:ea:52:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:97:CD:EC:DB:E9:C8:C3:0B:D3:F0:B3:77:57:D9:9B:FE:89:DF:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98d51ecd-f562-3149-b859-0a8f1264da94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.231.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:54:a1:76:76:00:a9:bf:96:f4:80:13:eb:d7:b6:d8:8c:80:
69:5c:a7:0d:f3:b8:d4:ab:48:08:c1:71:fc:46:1c:75:07:74:
a6:20:44:fe:d2:4b:5a:49:cc:dc:32:c0:d2:e6:1d:17:fe:17:
c3:a9:93:d5:8f:9f:6c:ea:ea:1f:13:15:c3:38:df:76:01:19:
2b:f1:d0:85:97:06:2a:59:25:b5:86:8e:1f:57:94:dd:24:3b:
1b:29:e0:db:f4:65:90:25:3f:42:f2:1e:e2:48:17:7e:3a:f5:
de:8a:32:ec:88:3c:56:51:84:2c:31:f2:3b:8d:25:d5:85:bb:
ef:e9:91:14:a9:da:59:1e:6c:5e:61:a4:92:54:25:94:33:6a:
10:c0:9a:8d:e4:ed:39:dd:11:90:94:05:9f:7f:61:df:ea:82:
cb:f2:4f:c0:85:f7:0a:cf:d8:b4:3a:ae:07:d7:95:84:b6:2f:
f0:3f:60:3f:1f:d7:e5:fa:76:cb:ae:63:64:87:9b:65:0d:4f:
07:39:98:df:3b:31:b1:fb:fb:25:6a:10:77:1f:7f:b1:81:3c:
f4:be:81:bb:f9:e4:55:45:9b:7c:c2:66:79:46:8f:20:05:3f:
12:b8:b9:2c:fb:68:e5:ba:3a:60:97:5a:0b:c3:0f:ca:cc:5c:
fe:aa:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:47 2025 by rpki-client