Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa
File: f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa (raw, json)
Hash identifier: kpQ6EnXkp3tEAFHXNZr9b6pX43VWeOaHD4g1sglTaeM=
Subject key identifier: 24:C4:5D:53:B3:C2:87:0F:D8:68:07:DB:71:42:04:0E:C9:F8:3A:A3
Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Certificate serial: 010D0C9F432858485F9AE250F6D4F57B569485E4
Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 22379
IP address blocks: 149.20.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e2:50:f6:d4:f5:7b:56:94:85:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=81fb02c0-bcea-4b37-84e8-975f24d61a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:1a:82:79:4e:0b:0d:7a:83:87:91:cb:38:
fa:98:28:76:99:78:cf:a3:75:db:1c:8d:94:94:34:
b4:c9:9c:dc:a9:da:51:ec:67:d2:53:67:f4:64:90:
52:1a:9d:af:eb:24:fa:56:6e:eb:4c:58:fe:a0:ef:
3e:df:3b:d0:a5:97:92:66:71:e5:1d:87:9e:34:14:
05:a3:e9:57:31:62:f3:e8:5e:09:70:cd:00:54:c0:
b1:ee:6d:c1:3d:d9:58:73:e5:97:7c:14:34:7a:af:
38:d0:3c:51:de:4f:1b:01:ed:86:c0:e8:a0:67:dd:
fa:33:46:49:db:54:86:27:ea:a3:b0:41:bd:d8:d2:
2c:b2:98:25:7b:49:13:2f:d7:ea:6f:00:fb:fa:9f:
fe:d8:91:9a:dd:f6:da:82:4e:27:79:16:55:2d:5b:
2c:87:3b:47:ce:f3:80:ff:58:36:8c:28:75:21:a0:
5b:23:aa:fc:cc:cc:11:2b:6d:88:ce:66:bd:bf:f1:
b0:04:0a:ab:07:ad:ba:b8:fb:35:46:e0:84:22:6e:
7a:7f:d1:bb:be:cd:dc:88:39:7a:57:47:a5:00:59:
2f:07:aa:e4:cc:b3:a3:03:a2:b9:66:ce:a4:a5:cd:
0e:74:cc:e2:68:a5:26:a8:1f:6c:f8:4f:67:16:ea:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C4:5D:53:B3:C2:87:0F:D8:68:07:DB:71:42:04:0E:C9:F8:3A:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl
X509v3 Authority Key Identifier:
keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:2d:1d:43:34:ec:1f:d8:0a:f9:95:73:93:cd:5b:fa:e4:38:
7a:b1:4a:82:55:ba:b1:0c:a4:43:4f:7b:cb:a6:88:8b:f5:20:
01:ec:9c:a6:db:be:f9:16:b4:0b:6c:81:11:dc:4d:50:80:eb:
b9:48:45:e7:57:2b:d2:db:85:b5:da:1b:8a:b3:d7:36:71:5d:
6a:a9:34:5b:80:63:a8:24:02:19:6c:4b:3b:f7:b9:c5:15:c9:
22:0a:a5:fe:e8:4e:6e:e4:85:0d:df:41:69:a5:da:cc:d4:d8:
8c:a0:bc:40:7e:c6:da:86:d8:14:f3:87:6c:1f:55:32:a6:bd:
64:1e:9d:39:f9:cf:f1:af:3c:6c:f6:63:19:96:79:80:16:ba:
f9:88:96:c5:5c:66:34:3b:6b:51:2e:97:91:61:73:ba:b7:13:
cd:0f:35:68:d3:09:70:6c:ad:45:db:77:c2:af:98:c2:f5:f7:
6c:a2:e6:05:b2:f3:f4:07:14:12:45:3a:5a:72:f8:59:76:43:
17:d8:99:61:af:fd:0d:87:e2:3a:80:ed:3b:2e:16:55:7e:cf:
98:9c:fb:8d:6f:48:9c:c2:37:7b:93:cd:6d:c2:ac:76:a1:5d:
ff:07:eb:7d:9e:fd:5c:69:56:6c:47:46:9d:80:3a:c1:e4:c1:
d7:a2:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:04 2025 by rpki-client