Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa
File: 7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa (raw, json)
Hash identifier: LSgjcoQt2E/uyknvL6ipk4zH1ESpNgSI9478t7x7/dA=
Subject key identifier: D2:B8:06:6D:A6:83:9A:E8:13:C3:2B:93:7F:49:E5:09:CD:F8:41:20
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858488DAB3CB5EA02F81DB2834250
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 33442
IP address blocks: 149.23.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:3c:b5:ea:02:f8:1d:b2:83:42:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=3b2956dd-97c5-4dff-892d-05d8ce207bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:47:f5:05:41:10:34:da:43:9e:30:63:6b:
8b:e5:8e:29:22:8c:aa:0b:9d:bd:41:9d:17:5b:5d:
38:94:dd:a9:83:a5:4b:16:b7:e3:09:e5:f1:af:39:
db:10:6e:ae:62:e5:d3:cc:93:de:be:54:1e:4e:9c:
60:20:42:cf:2b:c3:fc:56:e2:ed:a9:b4:e2:e1:5d:
a5:34:f8:51:7d:bc:43:d3:79:6d:e2:12:5e:6a:5e:
de:75:ed:dd:87:be:66:33:a4:24:59:0f:7d:a4:de:
12:7d:94:57:7c:fd:c4:35:ae:d4:f1:74:8e:80:7b:
b0:11:9d:c5:e7:24:c4:2d:7b:1b:1f:e4:ed:b1:16:
6c:16:eb:37:5c:2a:f1:5a:c3:45:03:00:36:a2:7d:
1e:d4:83:76:57:1d:ba:53:94:23:44:3a:15:bc:70:
76:bd:f6:f3:24:55:84:ef:f2:e7:51:bf:ae:7b:7d:
16:6b:69:f0:39:2a:60:e8:f5:2a:65:04:c9:2d:22:
c1:3a:b9:fb:80:fe:86:1a:13:74:03:a0:63:36:2a:
6e:af:01:18:f5:1a:54:86:f2:14:24:9e:b4:87:f4:
bc:8a:87:16:fd:b2:b3:67:d4:fa:89:96:79:19:d7:
c2:26:b9:dd:13:df:75:42:6a:cc:79:b1:85:51:7b:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:06:6D:A6:83:9A:E8:13:C3:2B:93:7F:49:E5:09:CD:F8:41:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:0a:79:82:9e:c0:07:60:ec:0d:82:dd:42:cc:8f:68:a9:5f:
0a:82:da:eb:04:40:fc:24:0e:6f:ab:20:2f:cf:6a:db:22:89:
25:83:9c:a2:8c:98:15:13:2b:db:c0:40:eb:9b:d5:dc:a5:b3:
e2:9f:3a:ad:63:40:70:75:f6:0b:3e:17:d6:3b:ee:16:98:db:
ff:7a:45:0f:26:95:b7:9e:96:cd:ca:cc:d9:ce:6a:05:0d:e7:
ad:ad:03:81:fe:f7:d8:e9:68:a6:5f:93:43:ab:25:4d:21:fe:
db:11:a1:5c:d1:a6:cc:96:b1:b5:fa:de:fc:76:42:11:2d:a3:
4c:ca:30:cd:b1:d9:09:a6:89:83:95:16:b8:f0:96:f7:3b:1e:
22:4a:56:77:18:3f:d2:cb:31:0e:15:1a:3f:55:63:1d:93:8b:
a6:d1:e5:5a:23:b0:05:b7:9b:0f:2e:43:0e:fe:a9:7f:1d:dd:
e6:78:ef:35:df:96:b2:8f:01:74:13:1c:90:72:c7:eb:53:04:
e3:09:57:88:69:be:7b:63:0a:5f:cd:f8:2b:4d:ca:54:fd:16:
17:28:55:53:ce:cf:45:e8:94:98:07:a7:40:f4:b9:41:b3:c1:
63:e7:bf:50:95:60:67:bc:87:79:7e:7e:0c:7a:1d:f8:8b:5a:
70:94:0c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:00 2025 by rpki-client