Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/06165fb0-9da3-3f49-9f8e-7682bf0d65e2.roa
File: 06165fb0-9da3-3f49-9f8e-7682bf0d65e2.roa (raw, json)
Hash identifier: NUq+8VM/h5LAwvH3oF0oq+x4b3RlDd42NznUCji/Zk8=
Subject key identifier: FE:D6:F8:B2:90:F6:6A:7B:92:83:99:36:60:91:43:87:31:BE:5D:82
Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial: 010D0C9F432858494CC9434F12C58C8AC2EF7A00
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/06165fb0-9da3-3f49-9f8e-7682bf0d65e2.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 63145
IP address blocks: 149.112.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:43:4f:12:c5:8c:8a:c2:ef:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=ef5f3c1a-b7d8-4ebe-8dfb-337694e5b376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:28:76:86:2b:11:ff:92:20:f8:c2:a9:84:
cf:76:5f:5a:09:f8:4d:97:25:9b:5d:fa:4c:c0:47:
b4:a3:cb:3a:e3:e1:bf:16:16:33:21:71:2e:af:1d:
d2:4f:44:cf:34:39:6b:46:48:e9:fc:74:a2:91:f6:
bc:b5:4f:72:24:72:32:cf:0b:53:a7:90:c4:94:a6:
17:51:2e:c9:3b:00:77:8f:98:e1:74:28:cc:31:78:
0f:25:d3:77:8c:57:95:eb:64:fe:d7:d0:0a:77:42:
46:7f:46:22:4d:75:9e:22:3a:7c:01:ed:4f:3b:82:
14:c1:09:48:40:0e:7d:73:f6:eb:09:e3:a2:4d:aa:
96:db:db:41:62:82:26:01:cb:e8:87:ad:23:94:57:
26:24:7a:f9:db:39:ce:f9:53:e5:cb:bd:29:fb:cf:
28:f5:30:15:34:d7:a8:6e:21:6c:dc:24:dd:93:44:
4b:98:65:99:bb:be:1f:bb:b6:3d:38:0d:f7:17:e8:
be:7e:b4:2e:30:13:c4:78:e2:37:05:a8:49:86:09:
23:e4:8b:89:ff:d4:9e:4d:e8:bd:ba:aa:75:0b:9b:
46:34:51:55:49:0b:96:41:5d:1d:8b:0f:8b:04:a9:
aa:22:a9:95:35:04:e6:8e:38:73:8a:01:86:e7:36:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D6:F8:B2:90:F6:6A:7B:92:83:99:36:60:91:43:87:31:BE:5D:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/06165fb0-9da3-3f49-9f8e-7682bf0d65e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
X509v3 Authority Key Identifier:
keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:fc:43:10:bc:ee:a2:31:73:39:40:21:c7:45:1a:bb:3b:83:
46:97:87:4f:5e:52:37:fe:58:47:46:07:6b:80:96:8c:1c:a6:
48:94:62:5f:7d:9f:95:21:e7:e1:d1:40:25:2c:f3:06:1e:5f:
ca:79:5e:89:19:bb:16:69:3a:3f:45:a0:6d:cd:20:59:8e:40:
62:fa:c9:b7:6a:e2:0c:44:08:10:a1:8a:ab:53:43:f8:a7:26:
5d:77:83:d1:c6:06:97:f6:dc:1f:d3:c6:77:1c:47:4f:a5:fe:
01:87:14:0f:85:fd:ec:9b:39:b7:e7:d5:10:0b:26:32:d7:07:
cb:67:9c:2c:d6:35:05:52:3c:64:91:56:c0:f3:87:e6:9a:e0:
b0:ea:8c:f5:c9:ff:91:58:31:f7:9e:12:ec:d6:4c:fa:ad:59:
e9:9e:75:28:14:fa:5c:27:75:ea:47:3b:f9:79:33:5f:5e:a2:
a9:a6:53:ce:0f:f4:9c:23:ab:89:13:93:e0:27:e0:14:57:13:
00:24:1f:b8:25:ec:c2:3d:6e:e6:47:49:44:ce:21:92:12:6d:
33:e5:12:00:1e:80:08:9c:b6:b3:ed:88:75:d5:96:a2:e8:43:
b6:86:50:2e:4f:59:97:55:27:ac:44:b0:a8:a8:c2:65:90:0b:
66:a7:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:06:20 2025 by rpki-client