Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/8e389837-f3a3-3fac-ac91-9fdf7453b393.roa
File: 8e389837-f3a3-3fac-ac91-9fdf7453b393.roa (raw, json)
Hash identifier: aDX1wRjh//6LuaBXSIonVec10zRLZNXisMVkaXm7ZrY=
Subject key identifier: CC:53:10:C3:DB:87:F9:92:17:C1:ED:57:B8:9B:F3:39:29:29:10:10
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F432858488B3527FA0D982CBA18D7E600
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/8e389837-f3a3-3fac-ac91-9fdf7453b393.roa
Signing time: Tue 14 Jan 2025 16:51:21 +0000
ROA not before: Tue 14 Jan 2025 16:51:21 +0000
ROA not after: Mon 14 Apr 2025 15:51:21 +0000
asID: 1234
IP address blocks: 149.112.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:35:27:fa:0d:98:2c:ba:18:d7:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Jan 14 16:51:21 2025 GMT
Not After : Apr 14 15:51:21 2025 GMT
Subject: CN=fd0d9404-155b-49ba-bf11-a815d6d78fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:0f:0c:51:c8:4f:ed:fb:50:77:17:b0:82:
a7:9c:e5:dc:db:80:7a:53:ca:9c:cc:eb:11:47:62:
32:15:88:31:85:b4:21:eb:75:83:d6:c7:f3:44:50:
66:55:8a:ad:63:a8:fa:38:aa:6c:76:d6:60:b4:bd:
2f:ed:84:52:c0:09:cb:02:a9:c2:b0:cd:77:67:72:
73:53:ac:1e:ca:d4:01:48:b1:bf:e2:9a:a4:66:03:
cf:10:ed:4e:9b:86:94:91:04:b3:3a:0a:4e:d1:e3:
8d:b7:dd:2c:e8:99:f7:be:cc:b7:aa:ce:b9:6b:97:
84:36:07:85:77:c4:24:43:f6:17:74:4a:ce:22:d2:
f0:65:ea:4e:5f:9a:4d:6a:a7:8e:5e:c6:53:07:f2:
df:8d:16:46:f2:6d:5e:87:7e:7f:dc:2e:4e:63:65:
f8:dc:09:8c:82:6a:39:e7:6a:a0:02:3d:be:5e:9c:
bf:fd:85:e0:84:25:2b:9a:62:fb:d0:af:e9:75:ec:
01:97:da:46:cf:20:b8:57:df:71:37:f2:59:79:94:
70:b0:02:e3:fa:e2:43:54:d0:f1:07:b0:07:c6:55:
09:e5:e3:61:24:9f:c4:62:9f:de:b1:d5:fd:b5:f2:
36:88:19:22:d6:b6:b2:8d:9f:c6:3c:85:f0:60:be:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:53:10:C3:DB:87:F9:92:17:C1:ED:57:B8:9B:F3:39:29:29:10:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/8e389837-f3a3-3fac-ac91-9fdf7453b393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:59:91:a7:9d:96:55:17:f7:53:63:3c:0e:ff:22:00:eb:ee:
55:9a:5d:27:e3:d2:f8:1d:25:f5:62:46:59:26:7d:4b:dd:03:
01:fd:dd:70:a0:a2:8a:82:b7:b0:f5:44:f7:06:2f:ce:ef:5d:
06:7e:35:69:53:4d:c3:42:f2:9b:81:5d:9f:17:e4:d0:f0:85:
80:43:49:1d:cb:da:3e:4d:99:38:ac:1d:64:59:bc:87:33:de:
ec:a4:f1:c4:7e:6f:fb:78:30:4d:64:7c:6c:69:bb:27:1b:bd:
5e:ec:32:c0:f3:9f:15:47:77:35:df:1b:f2:66:54:cb:96:56:
20:e2:2b:0b:9b:49:9c:7b:9f:54:49:1d:71:79:d8:2e:ad:e8:
e6:f3:f0:d9:f5:e1:e9:8f:ce:11:23:a8:4a:b0:01:e4:d8:b6:
53:03:13:5e:87:e5:94:00:8f:31:69:fa:bc:8b:79:9f:cb:a4:
79:67:c4:ba:a7:d8:f9:6f:d9:8a:ec:f8:b0:cd:08:69:22:8d:
35:1b:7c:22:71:fd:fd:39:4b:d7:63:ad:f3:27:c9:36:e3:c9:
6b:66:84:f0:22:7d:fb:99:cb:87:ae:3a:5c:f2:ad:42:43:8b:
2c:37:6e:ae:e3:28:18:61:55:81:d0:31:ee:be:0e:c4:73:fe:
0c:e7:ea:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:49 2025 by rpki-client