Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/6abb2881-e10f-32ba-af2c-d3463416a224.roa
File: 6abb2881-e10f-32ba-af2c-d3463416a224.roa (raw, json)
Hash identifier: K1ELDEi4Rxw5GBHClhEkT8Z+xpTUdXRJliyEyAG8MeA=
Subject key identifier: 83:83:A7:4A:36:A8:9B:1B:FA:34:1E:B1:D0:8C:A7:07:09:AE:B6:3C
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848C150CD857A8C5DA504E35280
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/6abb2881-e10f-32ba-af2c-d3463416a224.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 399970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:cd:85:7a:8c:5d:a5:04:e3:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=270114ab-19e3-4520-bc54-48093a730f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:35:99:f4:c1:d3:ca:6d:30:a3:37:f4:20:
e7:ad:aa:66:90:d1:2f:28:14:e5:f9:db:2c:a9:fe:
f2:19:a5:dd:fa:f4:ff:4c:8c:07:df:3b:4e:9a:79:
7a:c8:e4:b2:4a:60:fc:98:b6:e7:ed:38:9f:09:28:
4e:2f:57:ca:1c:f4:70:e7:4c:29:05:cf:62:dc:5b:
e8:da:06:aa:4b:4b:8b:67:f0:0c:21:be:99:8a:9d:
9f:31:55:38:19:5c:52:32:80:8f:7a:06:d9:84:1a:
0d:9e:7d:0a:8b:3d:a7:50:3f:f2:94:74:d4:1a:06:
0a:ee:44:7d:1b:7a:b1:d4:41:e4:f8:42:ff:ea:f4:
01:8a:41:fe:72:12:b9:a1:17:46:da:40:04:78:cf:
ee:11:98:1d:ee:21:4f:39:ae:22:f9:75:77:a8:0e:
32:08:70:17:6f:b5:ed:96:e9:f5:53:44:c5:80:56:
de:ee:b1:f0:c7:60:cf:96:80:e6:fe:2b:e2:7e:e8:
96:b9:b4:d5:1f:c9:12:17:98:4f:74:98:30:8b:67:
e0:fb:46:21:08:40:31:e6:23:e6:8c:92:ef:23:8e:
0e:de:ef:7e:7d:ca:bd:62:d5:70:b3:fc:2c:5a:e8:
93:75:57:f1:1b:ab:eb:29:24:d1:27:ac:97:5d:3c:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:A7:4A:36:A8:9B:1B:FA:34:1E:B1:D0:8C:A7:07:09:AE:B6:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/6abb2881-e10f-32ba-af2c-d3463416a224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:3e:a5:ea:3b:6c:9b:7c:74:c9:2b:3b:58:9b:0a:74:35:90:
06:a3:29:d9:ec:5d:06:a9:e9:be:6b:fb:40:f8:29:a8:4a:8e:
c2:73:76:32:80:72:b0:62:04:31:24:4a:45:38:b3:e2:f4:6a:
db:b3:22:fb:bd:6a:36:25:3e:37:04:ed:a7:e8:a1:b8:c1:72:
72:02:91:d6:30:8f:63:08:f6:57:14:93:8c:3a:94:ff:3b:ec:
01:f3:b1:2d:c7:de:21:b2:9e:be:3c:4a:fc:db:0b:26:46:29:
16:ce:a9:e8:21:fc:d8:87:77:02:6e:18:73:77:b7:ae:56:43:
c9:1b:63:78:be:c4:a4:5c:d6:ec:67:19:d9:53:41:a7:f5:46:
e4:1f:23:77:cc:b7:b3:55:82:3f:a2:b1:70:9e:7b:9e:74:9a:
82:d3:e0:a2:28:a3:f7:c1:8c:8a:fb:bd:51:7a:7d:5d:45:a5:
d4:08:94:73:60:95:3e:6f:1c:86:93:37:b6:35:81:c5:a3:77:
a5:93:56:6c:b3:4b:2c:f9:6f:a2:f0:b1:ca:9d:29:b5:6c:77:
fd:da:d0:a1:7a:48:a6:9b:df:5a:29:9b:03:bf:83:20:ed:4f:
b3:50:f5:be:16:fc:fe:19:8f:76:f3:e4:16:b2:db:a3:54:c5:
7b:86:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:45 2025 by rpki-client