Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b422b37-b71c-41f1-baf6-93e8d3dd0410/da7b7253-16d7-3b82-849a-1e47c8cdaa27.roa
File: da7b7253-16d7-3b82-849a-1e47c8cdaa27.roa (raw, json)
Hash identifier: Y+7Pj4Marw5mfeMfN1v17R3K/qoLxw3925LBKB45T78=
Subject key identifier: E1:D7:26:4C:42:41:C2:D0:7C:06:79:19:04:FF:AA:85:E0:39:10:B1
Certificate issuer: /CN=1b422b37-b71c-41f1-baf6-93e8d3dd0410
Certificate serial: 010D0C9F43285845917201D9F626382F113C9300
Authority key identifier: 95:16:B2:58:8F:B6:8E:9A:B0:83:35:3D:BE:01:B5:CC:FE:FB:BD:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b422b37-b71c-41f1-baf6-93e8d3dd0410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b422b37-b71c-41f1-baf6-93e8d3dd0410/da7b7253-16d7-3b82-849a-1e47c8cdaa27.roa
Signing time: Tue 16 Apr 2024 20:08:00 +0000
ROA not before: Tue 16 Apr 2024 20:08:00 +0000
ROA not after: Mon 15 Jul 2024 20:08:00 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:91:72:01:d9:f6:26:38:2f:11:3c:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b422b37-b71c-41f1-baf6-93e8d3dd0410
Validity
Not Before: Apr 16 20:08:00 2024 GMT
Not After : Jul 15 20:08:00 2024 GMT
Subject: CN=97018e60-8597-4b7e-bce9-4e9a508e842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:b3:8b:13:9c:cc:76:7b:5b:e7:5b:26:88:
24:93:77:f1:15:9d:51:f2:88:9a:fd:0f:04:78:8c:
0d:76:6f:da:60:36:9a:ff:f7:10:c9:0a:a2:35:b3:
20:78:2f:73:ea:25:08:a4:85:3b:d9:30:c5:b8:60:
61:d0:a0:78:cc:63:9e:8b:5c:58:7d:9b:cc:8e:77:
f6:88:de:35:0a:9d:94:3c:fa:da:e2:e4:40:c8:95:
db:7f:fc:8e:3f:26:a1:75:8b:fa:22:e0:f0:0d:13:
7c:ad:d2:cd:30:85:21:9d:0c:74:f1:d5:ca:34:ea:
19:7f:45:90:be:5c:26:15:90:49:4f:4c:4b:97:4d:
a4:0f:28:bc:c0:ac:39:dc:34:d5:5a:28:45:8f:26:
4a:01:3a:9e:ea:26:d5:54:bf:a3:75:e7:71:73:bb:
bb:03:ed:64:20:34:c3:06:95:bd:49:ae:ad:de:de:
33:34:18:41:75:84:ad:2b:3d:2d:b2:67:fb:bf:2e:
00:da:41:ca:e4:aa:b2:9b:af:b8:ee:8d:1c:9c:32:
1f:6f:e3:11:2e:73:f2:58:b3:ec:de:48:d2:dd:40:
8c:90:7e:f3:3a:ec:52:b6:b8:10:44:c9:51:79:b9:
f8:f9:c9:5c:d4:4d:6a:c2:84:16:dd:74:00:3c:8a:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:26:4C:42:41:C2:D0:7C:06:79:19:04:FF:AA:85:E0:39:10:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b422b37-b71c-41f1-baf6-93e8d3dd0410/da7b7253-16d7-3b82-849a-1e47c8cdaa27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b422b37-b71c-41f1-baf6-93e8d3dd0410/1b422b37-b71c-41f1-baf6-93e8d3dd0410.crl
X509v3 Authority Key Identifier:
keyid:95:16:B2:58:8F:B6:8E:9A:B0:83:35:3D:BE:01:B5:CC:FE:FB:BD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b422b37-b71c-41f1-baf6-93e8d3dd0410.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:1e:f3:f5:d6:6a:55:4a:79:08:df:8e:6c:8d:0a:01:77:db:
e3:1b:c4:04:0b:7d:73:cf:92:54:20:94:c1:32:7c:93:63:8c:
60:85:53:02:00:2b:ab:ba:cf:09:87:ab:7e:58:3f:50:1e:5e:
3c:19:ae:4b:f1:6d:0a:fa:14:49:99:77:55:fc:2a:70:dd:8a:
b2:a5:a2:d0:e5:c9:20:f9:2f:fe:44:c8:78:81:65:6e:d4:b5:
63:f8:a4:4b:f6:6f:f6:2c:d8:f3:de:9b:b1:1e:33:90:3c:29:
1d:e4:f7:7d:44:a8:87:da:42:15:7e:d9:6a:52:0d:b4:3e:17:
7e:d5:32:73:ff:24:b0:28:15:f9:9b:e4:03:bb:53:a4:29:f8:
3c:78:da:51:54:56:b1:f4:a5:b1:14:16:71:48:80:e4:00:9c:
c1:5e:49:85:a6:e5:3e:48:0e:82:69:1b:23:cf:d1:80:99:0f:
ba:6f:3f:e2:e3:59:44:b3:c9:92:e0:de:6d:eb:67:e2:7d:3b:
28:d0:42:4a:6e:20:05:d9:94:e8:3a:0b:5a:0d:e3:89:1d:8a:
ea:cd:65:72:4d:a9:07:44:e4:65:ec:72:8c:c5:56:75:27:b0:
af:e6:29:04:c7:dd:b1:85:67:d6:ba:b1:9b:e0:72:9c:30:dd:
64:32:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:14:21 2024 by rpki-client on console-fra.rpki-client.org