Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/a96694e2-fc23-3945-9156-dbb9dcbef238.roa
File: a96694e2-fc23-3945-9156-dbb9dcbef238.roa (raw, json)
Hash identifier: kLB9n2RTWelN3Nw+9x6sGlymYuKlDOMfTkOLy33On2s=
Subject key identifier: 27:16:43:D4:D6:D4:96:83:8A:27:96:F2:EF:29:12:94:03:68:72:6F
Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial: 010D0C9F432858486D904E167E70C65B8DA6AE00
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/a96694e2-fc23-3945-9156-dbb9dcbef238.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 46616
IP address blocks: 147.72.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4e:16:7e:70:c6:5b:8d:a6:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=374136c9-4c62-462a-9684-99e7aad9b03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:5e:fc:7c:b9:cb:8c:58:5f:8c:05:bd:a6:
6b:f5:77:f4:76:b4:f2:3c:4f:7d:29:88:7f:c2:7c:
ae:a5:51:0f:0b:07:bc:3d:c5:ae:94:d2:25:f7:16:
06:c2:b1:8e:b2:24:17:7c:eb:4a:e6:c5:6c:ff:62:
5b:ea:e4:c2:0f:fb:da:8b:68:3a:64:0d:0c:05:06:
d3:3b:65:81:be:47:83:34:48:cc:a7:e4:07:c9:cf:
02:83:09:58:40:a1:7b:bb:77:1c:94:87:49:6d:f3:
bb:b9:8f:aa:a1:00:ad:1b:11:fe:82:ff:d0:ce:7f:
bf:1b:30:2a:5a:1f:86:a7:18:09:37:d6:c3:2f:16:
d4:9b:69:6f:e6:e1:0d:8b:16:a7:93:08:c4:8c:cd:
76:b8:05:11:aa:8b:fa:92:4b:fa:c5:4c:90:ce:9c:
f1:a7:56:47:9d:0c:6c:58:65:42:b7:ae:2a:b1:98:
e4:6f:2e:55:e9:91:be:05:f3:e0:05:7d:27:89:ee:
24:c4:f5:59:20:52:f0:a2:80:dc:cb:e8:3c:f6:ee:
64:28:16:a1:72:2c:62:24:02:d0:98:95:48:4c:88:
8b:58:76:08:28:64:21:e1:6b:63:eb:ba:9c:98:f5:
8e:97:c2:c0:48:41:a4:76:2d:d7:cd:8b:c2:42:58:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:16:43:D4:D6:D4:96:83:8A:27:96:F2:EF:29:12:94:03:68:72:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/a96694e2-fc23-3945-9156-dbb9dcbef238.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
X509v3 Authority Key Identifier:
keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
sbgp-ipAddrBlock: critical
IPv4:
147.72.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:26:01:40:4a:74:cb:4f:9e:e1:65:23:a6:db:5f:b9:79:c2:
c6:d3:45:e7:fd:17:5f:be:63:1e:3f:ed:36:ed:13:67:c6:98:
49:10:1f:e5:cf:57:46:fc:9b:59:13:79:77:08:ea:9f:4c:18:
d5:87:7c:52:f4:c8:85:5d:b3:f3:25:98:04:70:05:d9:3c:4e:
55:bd:4c:be:e9:01:5a:a8:05:95:90:c4:1b:b0:7e:95:aa:01:
b2:5a:44:68:55:58:ac:40:b2:df:dc:8a:98:da:e8:83:fe:1b:
16:1b:cb:78:a5:f9:7b:de:4d:a2:c8:16:01:25:d7:59:9f:aa:
e6:4e:60:07:1b:4e:e5:af:d5:3f:0f:87:88:a2:9b:28:f8:1c:
5c:d0:8e:76:ff:f8:06:6f:ec:94:55:8e:7f:3e:72:62:63:9a:
16:c4:b5:5b:52:fd:03:66:c9:b2:a7:6e:93:25:0c:02:92:a5:
47:f2:d0:45:da:a5:30:46:72:6a:33:e9:1d:40:85:d0:3d:0a:
bf:34:ca:36:88:f4:60:b6:6d:ba:ec:4a:29:14:2e:56:17:86:
cf:23:44:7b:bd:12:9b:d0:1d:4a:ae:9f:c1:e4:b5:05:62:26:
3f:25:53:f0:f4:e7:dd:39:32:e7:ac:bc:8f:bb:44:b3:bc:89:
8e:ee:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:53 2025 by rpki-client