Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3264f8c5-4900-37fe-842e-ea295af71609.roa
File: 3264f8c5-4900-37fe-842e-ea295af71609.roa (raw, json)
Hash identifier: 6nAghw6I6Crpuhpz+rnM0U+5UgxlauuIL4ER1XHS66k=
Subject key identifier: 34:C2:13:B0:94:D8:36:15:00:66:04:A1:A9:3C:EB:08:6B:5C:10:CB
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F432858487A2088EB5990FD27937EFF60
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3264f8c5-4900-37fe-842e-ea295af71609.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 30103
IP address blocks: 149.137.56.0/22 maxlen: 24
173.231.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:88:eb:59:90:fd:27:93:7e:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=98d7c4ab-6e94-4a4c-ba5c-33d9a5bb015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:93:38:1a:5a:ff:a8:d9:77:0d:5f:5d:75:
aa:3a:fa:32:76:70:99:c8:63:ef:03:8e:b2:b7:8c:
7e:40:d4:e4:08:d4:00:03:66:ef:b3:1d:1b:1e:a3:
25:cc:a7:fc:91:1a:11:06:8b:24:a8:a7:29:15:ab:
89:08:c3:51:89:67:1b:8c:a3:94:55:66:c6:08:de:
f8:0c:ed:7d:52:b7:f8:60:d0:49:4d:7f:ac:04:67:
cb:f8:9f:44:a0:1a:a7:fd:67:b7:f4:05:19:db:f1:
bd:9e:cf:6b:36:15:ff:98:f3:69:cc:ec:ed:27:37:
55:ce:7d:58:81:34:4c:62:21:ef:45:b4:59:ff:46:
c0:35:89:33:57:65:f7:06:25:8b:f6:e2:1d:68:52:
4b:3f:e1:72:04:af:5a:56:05:31:7e:f5:bb:2c:5d:
b4:12:3f:ab:4b:c1:88:38:ab:12:8c:95:8b:9a:c5:
57:53:0b:ed:57:6f:64:50:57:6c:f4:c9:94:d9:94:
64:a1:01:4d:be:22:f0:b4:c7:43:67:15:eb:a9:f6:
8e:d7:78:aa:e4:b5:29:fe:32:68:de:65:9d:e9:fe:
39:59:5e:34:e2:90:a6:72:4a:87:5d:5f:01:2f:7f:
9c:b4:52:49:e2:65:33:17:e1:03:49:5e:e2:09:b2:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C2:13:B0:94:D8:36:15:00:66:04:A1:A9:3C:EB:08:6B:5C:10:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3264f8c5-4900-37fe-842e-ea295af71609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
149.137.56.0/22
173.231.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:52:a8:de:cd:bd:e5:58:80:64:22:19:76:bf:e1:59:b3:ef:
fc:17:79:ab:2e:6c:e0:9b:68:d2:52:0b:b9:d2:23:1b:88:f0:
e0:15:32:a7:34:34:be:5b:97:1a:c4:4a:b1:d8:b8:da:9f:6a:
b2:4f:6b:00:1c:de:25:78:e3:90:01:b9:09:08:55:04:cc:5a:
98:d4:40:87:d0:c1:a0:24:1a:fe:f3:ef:81:d1:eb:af:14:9a:
ce:1e:62:b6:8f:43:6d:5a:2b:9e:ce:b0:de:cc:27:04:8a:41:
d9:01:15:3d:49:c6:02:49:e3:7d:7d:e8:16:2c:1a:72:c3:31:
3f:ea:c9:6e:30:50:ea:b8:9c:aa:10:ce:06:51:01:7e:7d:1e:
69:9d:bc:01:eb:a1:24:ab:39:3a:d7:89:f9:c2:57:29:06:6d:
32:0e:de:81:de:b2:40:50:74:8a:d0:da:e7:b0:da:71:86:37:
ce:ad:d1:e6:22:3c:80:75:85:24:c2:67:1e:19:3b:f6:f2:8d:
e2:f5:4c:14:71:a9:66:4f:be:77:51:0d:72:53:e3:0c:f0:d6:
c8:dd:d4:97:01:81:84:09:75:95:e6:5f:37:66:8e:30:b5:97:
bc:9a:cd:f3:77:63:6a:81:2a:d1:16:6f:f7:90:48:c1:87:9b:
7e:8b:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:44 2025 by rpki-client