Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/c24ad520-9b2a-3678-9257-2d14bfc31704.roa
File: c24ad520-9b2a-3678-9257-2d14bfc31704.roa (raw, json)
Hash identifier: g0EE6ho83xuAR+vdLvRxeh+mY5dvfvJlinj4zIQjFuA=
Subject key identifier: 6D:4E:05:A1:66:EF:AF:4B:ED:83:FE:56:B5:C4:66:F5:8D:BB:5D:B6
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848EC9E1CFF901A2D00D2BC2080
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/c24ad520-9b2a-3678-9257-2d14bfc31704.roa
Signing time: Tue 18 Feb 2025 14:16:14 +0000
ROA not before: Tue 18 Feb 2025 14:16:14 +0000
ROA not after: Mon 19 May 2025 13:16:14 +0000
asID: 399970
IP address blocks: 149.112.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:9e:1c:ff:90:1a:2d:00:d2:bc:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 18 14:16:14 2025 GMT
Not After : May 19 13:16:14 2025 GMT
Subject: CN=fe75d2db-9cb5-4fa4-89d5-ef581891fcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:f0:c2:48:8e:e6:93:55:28:17:d4:5a:d0:
55:96:a4:f9:12:06:9a:11:61:41:90:1f:2d:bb:fb:
42:43:d3:09:76:91:f4:9d:a7:4c:df:35:72:ef:7e:
68:3c:22:f9:80:81:f1:ad:39:26:9c:8a:a8:8c:6f:
08:3c:ef:8e:3e:64:2a:04:d9:64:ea:2a:d8:62:e0:
ed:41:ee:5d:8f:4a:96:3e:2c:2d:1d:50:6a:2f:63:
d2:32:08:54:de:53:45:46:22:91:26:6a:21:50:7e:
8e:ce:64:a9:27:39:77:27:fe:67:4a:77:d6:f8:23:
d4:a2:23:c8:22:5a:c6:cb:a1:d4:61:ef:bc:15:e2:
0c:a4:59:5c:ab:67:bc:3a:2b:1b:c6:a0:b9:d4:d7:
91:98:e9:96:e6:91:4e:b3:ca:40:ab:53:21:f5:83:
22:1e:2f:46:4b:f2:7b:69:aa:9b:51:b9:e5:0e:cf:
dd:d2:e0:50:f8:6d:52:f9:be:4e:07:89:2d:8e:a3:
2f:f6:c2:b3:da:55:f4:04:af:19:22:02:19:f0:0a:
bc:84:25:74:c7:50:d0:a1:c3:47:dc:d8:4f:7e:17:
5e:e6:36:dc:3c:1c:13:65:0b:b0:24:a1:c2:47:11:
c6:a4:da:1e:89:2a:26:72:44:4c:d3:c0:75:06:39:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:05:A1:66:EF:AF:4B:ED:83:FE:56:B5:C4:66:F5:8D:BB:5D:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/c24ad520-9b2a-3678-9257-2d14bfc31704.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:fe:c8:a4:c7:b6:f7:16:b3:3e:c3:43:c9:c6:82:d3:48:b3:
d6:17:98:e0:d9:8d:8c:a5:cf:8a:ad:f7:71:01:ca:6b:a9:e2:
b6:35:ee:60:74:59:29:8d:e9:7c:bb:a4:66:15:3c:55:29:eb:
9a:80:9c:7b:26:f2:80:58:f1:fa:8d:fc:fe:e2:4e:b5:cb:a9:
19:9c:a5:d5:3e:2c:0e:56:4b:2a:25:5d:63:fc:bb:29:64:8f:
4c:ed:36:35:a4:5f:6c:3b:21:f0:66:be:b9:7b:0c:12:65:0c:
cd:72:e5:5b:4f:4e:92:c8:5e:9c:2f:87:53:99:1e:03:c6:28:
aa:fd:4a:f1:a9:1f:ee:72:81:bd:02:7c:2d:02:26:58:ac:d7:
98:87:3f:d3:55:fd:15:26:d0:25:0e:2b:71:9c:85:3d:1a:61:
e6:56:fe:ae:bc:7f:13:bc:21:44:55:0d:ce:0e:d8:f3:0c:6a:
10:d3:c5:c8:a2:77:a7:8b:41:4c:1f:73:38:ea:2d:91:09:70:
08:d7:db:6c:14:96:d7:e9:97:ba:ba:aa:49:5b:75:e6:6c:39:
8b:b4:f4:88:1b:f5:3a:0f:34:72:05:d3:27:f3:60:18:d2:ae:
23:88:cd:ce:5b:f1:f4:75:94:eb:8c:e6:29:20:79:ea:b8:d1:
a2:c3:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:08 2025 by rpki-client