Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa
File: 3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa (raw, json)
Hash identifier: cEGInO/x/zxOEnyIHhTGDfYutoo5RmAHkQCkrZLcSKE=
Subject key identifier: CE:72:EC:68:8C:A7:D3:29:02:F3:EA:58:3E:85:DC:0D:B8:4D:DC:B5
Certificate issuer: /CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
Certificate serial: 010D0C9F43285848DBD66EC10C8E1A521BF1A3B0
Authority key identifier: 5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 20206
IP address blocks: 149.112.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:6e:c1:0c:8e:1a:52:1b:f1:a3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=032a5e7c-a0d6-4e0e-a670-48574d64f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:51:a0:51:36:66:a8:bb:9c:2c:fe:92:5f:
9a:b1:65:04:b2:67:f6:90:f6:44:2f:8c:0b:bc:c7:
b9:f7:7b:19:28:86:0b:6b:c1:9c:d2:5c:c0:a0:b9:
95:af:e8:66:cb:0c:02:78:a4:90:57:f6:fe:62:2e:
7c:27:34:25:45:61:12:b4:ee:58:62:29:a8:64:30:
a5:e7:47:4c:98:e0:ba:22:9a:76:ae:db:bb:84:eb:
6f:0f:66:f1:b6:34:c9:1f:4c:a5:70:9e:2f:50:a7:
0a:a5:5c:1c:46:3e:ad:94:2b:e0:c7:d5:3b:83:a2:
c4:31:7a:78:f3:b4:ff:37:ee:a4:af:da:6a:2f:5f:
0b:9c:09:0b:49:9b:e4:30:cb:d9:c7:93:f0:49:e3:
36:69:6c:1e:78:a5:ea:c6:fc:69:57:9c:ae:8c:9b:
5e:ae:f2:d5:f3:58:46:50:2c:97:e7:0e:13:0b:21:
a5:24:68:e4:03:1b:e7:e1:91:44:c9:eb:76:e3:60:
a5:cb:08:82:dd:be:1b:d9:ed:f7:71:4c:ed:61:a0:
d1:b4:1c:d9:3e:73:c5:ef:2a:c7:29:09:f1:23:4e:
63:a5:66:57:a2:2f:b0:46:33:7b:7f:f5:b8:87:54:
38:f6:0a:c2:db:de:e1:d2:a5:67:b5:65:8a:44:99:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:EC:68:8C:A7:D3:29:02:F3:EA:58:3E:85:DC:0D:B8:4D:DC:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl
X509v3 Authority Key Identifier:
keyid:5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:0f:9d:0e:2e:89:0d:48:74:f1:d5:ef:0d:88:31:7b:3c:98:
c8:9b:09:a3:be:84:8a:bb:b3:01:50:85:6b:7e:19:e0:9b:cf:
f2:4f:08:8e:c6:95:4d:73:da:45:6c:76:af:c1:4c:ba:b5:0c:
52:60:94:45:f2:16:bb:53:ed:2b:34:12:f1:3a:bc:81:0a:f1:
d4:90:3b:d0:cd:c3:31:4d:6f:a1:da:95:64:17:aa:60:67:51:
26:69:90:ad:b7:3a:f7:b8:4a:37:bc:bb:93:2b:99:e7:f4:86:
29:b8:ab:c3:55:16:49:c8:2b:b6:3d:ea:d7:e0:0d:0c:60:27:
0e:68:2b:f9:66:91:8d:91:b3:13:af:bf:fb:c4:41:e3:85:9c:
6b:aa:1e:58:02:99:3b:84:7a:bf:5d:bd:8a:3d:af:e8:b0:94:
10:34:98:dd:f0:7e:78:f8:b5:ca:47:e3:9a:a2:50:71:0c:59:
e1:bb:bb:6b:97:00:a2:97:47:06:7d:d9:53:2a:ee:ff:51:ae:
f3:53:6a:31:ff:5b:46:ed:1a:da:5c:5e:ac:c5:d8:3b:08:4d:
19:f2:51:3b:b8:5e:f7:dd:4a:6c:0e:64:98:52:9b:35:4e:9a:
2b:c3:03:e1:08:ac:19:ae:03:01:6b:64:8e:52:93:ad:92:31:
0e:e8:30:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:55 2025 by rpki-client