Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/9e7c06b2-0daa-3e7e-b6f6-36f6d6e6ae60.roa
File: 9e7c06b2-0daa-3e7e-b6f6-36f6d6e6ae60.roa (raw, json)
Hash identifier: /tdqqDpuMgP8pgahkV2+uV4JAgaoZDObGwUf+8LgKdU=
Subject key identifier: 0A:13:5A:C0:66:0A:5A:81:09:C4:84:4D:48:C3:AE:47:6D:31:AE:7C
Certificate issuer: /CN=18fa4b62-a658-4ac5-98e4-08b2ce78b384
Certificate serial: 010D0C9F43285842EAD0CEAE71F8E388690CCB00
Authority key identifier: E5:60:35:D8:F4:B7:3E:95:AE:CD:91:FF:39:F4:5A:6B:45:56:A4:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/9e7c06b2-0daa-3e7e-b6f6-36f6d6e6ae60.roa
Signing time: Thu 17 Aug 2023 18:05:08 +0000
ROA not before: Thu 17 Aug 2023 18:05:08 +0000
ROA not after: Wed 15 Nov 2023 19:05:08 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ea:d0:ce:ae:71:f8:e3:88:69:0c:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18fa4b62-a658-4ac5-98e4-08b2ce78b384
Validity
Not Before: Aug 17 18:05:08 2023 GMT
Not After : Nov 15 19:05:08 2023 GMT
Subject: CN=fd31fad1-1d5a-4111-97be-5af2820422b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:8f:28:dc:bc:70:a7:a1:99:e3:53:df:28:
6e:f4:bb:10:3e:84:b5:4d:3a:c2:ce:b6:b3:8d:ee:
6b:67:4e:af:47:0b:98:ee:ea:3c:04:20:cd:0e:f8:
27:59:f0:7b:0f:17:e3:75:51:c8:fd:bd:5c:93:50:
40:3d:ea:9c:63:76:6d:1a:d8:a5:d6:22:08:90:aa:
7e:38:f2:b4:34:e6:e4:aa:e0:33:96:c0:ca:ef:d2:
f5:b1:31:79:5e:db:d6:12:84:c6:fa:63:09:d5:2a:
61:f9:21:c0:2a:62:5e:1c:87:9b:28:d4:9e:f4:62:
86:2f:91:84:6e:3d:a5:96:04:2e:1f:3c:54:91:73:
2b:e1:4e:c5:2b:0f:a5:d9:f5:c4:93:3e:22:d5:a5:
1b:77:fa:b4:7d:f6:ed:50:59:1f:d3:16:1b:e1:2b:
8a:b8:68:d2:b7:db:37:73:4a:c3:27:ff:e7:04:44:
5a:a5:af:40:2f:9a:b1:75:62:44:9e:3e:99:39:a9:
ac:b8:3f:e3:e2:2c:f4:db:d7:9f:bf:e7:94:6f:5e:
ab:c9:d9:9a:f9:26:3c:e8:4e:39:a8:f3:1c:83:d5:
47:15:c8:91:8e:35:4e:da:35:6b:9c:1a:a4:30:7f:
62:58:9d:06:39:f6:6d:14:b7:4c:e0:73:ed:a9:be:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:13:5A:C0:66:0A:5A:81:09:C4:84:4D:48:C3:AE:47:6D:31:AE:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/9e7c06b2-0daa-3e7e-b6f6-36f6d6e6ae60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/18fa4b62-a658-4ac5-98e4-08b2ce78b384.crl
X509v3 Authority Key Identifier:
keyid:E5:60:35:D8:F4:B7:3E:95:AE:CD:91:FF:39:F4:5A:6B:45:56:A4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:d4:5b:f2:ea:02:91:87:ab:0f:d1:d3:00:4b:c2:d8:11:b1:
9b:bf:8f:5e:a0:e3:28:1e:9d:67:63:b4:c6:0d:75:30:84:4c:
c2:a9:34:8e:77:b5:9e:38:f0:ba:bc:ba:48:a6:ad:15:86:42:
ee:a9:54:67:90:37:c6:ce:8e:aa:a3:37:e4:ab:a9:71:dc:3d:
e7:67:6e:a6:cc:dc:49:7d:c7:d8:be:4c:74:67:62:94:ac:31:
92:d6:be:3c:71:20:67:b6:76:71:d1:73:5b:e5:e2:45:60:08:
69:35:20:fe:31:b7:5d:3c:6e:47:6d:66:ac:8b:da:e1:44:ed:
6e:b6:52:64:96:00:ed:a6:de:41:fd:a6:d5:68:c7:2f:0e:cd:
3e:89:ab:6a:a3:b5:d6:57:9e:9c:93:00:f5:de:6f:0a:db:18:
cf:07:3a:00:89:1c:aa:0b:2a:13:b0:47:09:32:85:0b:37:45:
d2:f1:22:81:ef:63:7d:84:a7:bf:eb:f4:be:ac:59:2e:45:b3:
a5:b8:73:c5:13:e3:0d:87:5d:f2:24:44:20:a4:29:b4:6d:79:
86:d5:0a:66:92:6b:a4:97:fe:89:ea:16:f5:4c:64:44:34:21:
96:98:a5:58:8f:8e:1b:f8:5c:69:73:2c:cd:38:72:58:b6:9e:
13:a2:6a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 17:31:29 2023 by rpki-client on console-fra.rpki-client.org