Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/13fc048b-d294-388e-a3ab-d121a4c15388.roa
File: 13fc048b-d294-388e-a3ab-d121a4c15388.roa (raw, json)
Hash identifier: /aSpD+CJRVDOhonxlFFkbQK7YrTu7w5swox+Pm+TYDM=
Subject key identifier: 19:1C:76:7B:0B:4B:4F:13:F7:D5:0F:F3:BD:08:9B:3F:D1:A4:01:A4
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848EC9DCE62A09AD6B7507CEF00
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/13fc048b-d294-388e-a3ab-d121a4c15388.roa
Signing time: Tue 18 Feb 2025 14:15:37 +0000
ROA not before: Tue 18 Feb 2025 14:15:37 +0000
ROA not after: Mon 19 May 2025 13:15:37 +0000
asID: 399970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:9d:ce:62:a0:9a:d6:b7:50:7c:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 18 14:15:37 2025 GMT
Not After : May 19 13:15:37 2025 GMT
Subject: CN=2921d7b0-26ba-4f01-8b46-d6fda5c94777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:99:de:1c:6e:c2:5e:95:9a:4a:64:37:76:
10:41:63:d7:83:40:c7:a4:ce:1a:c5:91:9b:38:9e:
32:87:37:86:57:7f:05:5f:82:3e:33:1f:98:14:9f:
b5:c7:b8:a4:2a:5c:2c:ad:4e:b9:e5:6f:56:c9:d2:
77:05:4e:ae:54:1e:e8:40:b4:5b:52:27:4c:ed:8a:
1e:4b:8d:88:a3:54:29:0a:40:a7:4a:a1:a7:9a:4f:
6a:b3:29:c9:29:0d:4d:55:9a:f3:e8:ec:46:fd:d5:
07:fd:27:22:4e:a0:b6:f5:bf:68:d8:76:a5:5a:61:
1e:4a:92:3d:b7:76:82:c3:1e:8e:99:51:3b:23:38:
a2:82:01:86:ef:40:10:f9:f2:02:c8:dd:70:84:e2:
3a:89:3f:8b:9c:34:85:3b:65:dd:e5:77:f6:0d:24:
cf:0f:11:ee:f2:18:b4:0e:20:1f:3f:b9:c5:62:f8:
97:9b:52:10:0f:03:a8:1a:f2:fa:1d:96:4a:4c:2e:
14:8c:e1:ab:ce:26:2f:c1:48:97:3c:de:9c:4e:16:
ad:59:27:23:d3:c5:99:bc:39:fa:0d:bb:c7:9a:84:
c4:1d:41:7d:9e:4d:d3:7f:53:59:c2:7a:44:4d:04:
57:6b:88:24:7a:c5:37:03:b6:b1:ab:b1:f3:56:31:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1C:76:7B:0B:4B:4F:13:F7:D5:0F:F3:BD:08:9B:3F:D1:A4:01:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/13fc048b-d294-388e-a3ab-d121a4c15388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:ef:55:9e:3e:38:7f:3f:0a:83:d8:34:e5:9b:34:07:cd:bd:
da:5e:cc:00:64:b9:1e:0c:ac:f2:4d:a8:32:00:aa:11:e3:3d:
97:f7:b1:a6:19:bc:b6:74:48:d8:0d:bb:a2:8f:2c:21:1d:6c:
7d:04:7a:49:78:57:52:82:59:76:7d:ba:b8:65:ec:d2:fb:45:
3e:24:9c:aa:ff:3c:00:41:51:ea:cf:85:98:bc:62:e4:45:ba:
2d:32:c5:3f:52:e3:4a:8f:73:ae:75:30:06:e5:68:f1:af:e3:
a1:80:1a:71:17:ce:e7:eb:aa:4b:5b:2e:ea:99:25:b0:2e:21:
7c:fb:83:7f:46:01:cd:a7:37:3a:26:a8:62:95:41:4e:2f:8e:
75:cd:8d:fc:b8:41:b4:57:95:81:1d:ff:61:f4:9a:45:77:04:
e5:42:42:38:38:25:f2:e4:25:8a:33:40:cf:b7:10:45:b7:83:
3c:75:3d:56:1a:cc:25:4a:8f:e9:b5:cf:88:ad:7f:e9:e4:a1:
5b:ce:ce:c9:b3:ff:45:3a:2a:9d:56:82:ed:4f:17:76:dd:7b:
f1:42:a8:e7:27:b1:d1:b9:07:28:5a:40:a5:9a:9e:e2:d4:35:
aa:bc:9a:c0:0c:4c:2a:c8:20:51:9d:67:43:f4:dc:4f:eb:06:
bc:31:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:11:00 2025 by rpki-client