Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa
File: 90308f7e-154a-30dc-9271-d2453cae8834.roa (raw, json)
Hash identifier: jdPo0To4XmhBV8R+rCdDiNm/BqLCyxPlMNuHw4XFVVE=
Subject key identifier: 04:E1:2F:28:D4:FF:1D:2E:BC:9E:08:15:26:30:3D:A9:82:B5:E9:F1
Certificate issuer: /CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c
Certificate serial: 010D0C9F4328584913AC3870F0DAF621744FC8A0
Authority key identifier: 55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 31748
IP address blocks: 149.112.8.0/24 maxlen: 24
2001:504:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:38:70:f0:da:f6:21:74:4f:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=2bbb3d47-9e32-4fc7-b3d5-4009d093e6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:e9:a8:56:ed:b7:8d:81:cf:aa:14:ac:2e:
b0:f3:3d:69:10:34:8a:13:6c:e3:86:aa:f1:e7:44:
dd:06:69:c0:bc:b4:1e:85:77:93:96:17:86:bd:92:
fe:ae:49:2c:61:9c:16:94:79:c4:1c:7f:5c:e9:a1:
df:e6:3d:44:dd:9e:77:2c:16:9f:24:bc:6a:63:2d:
d4:15:50:25:63:e7:1b:28:79:b2:99:fc:cb:6f:e1:
90:18:29:6f:94:a8:5d:9a:ed:ad:cd:40:27:cb:9a:
79:9c:38:9f:c5:55:f4:e9:ea:ad:67:0c:5d:12:a0:
90:23:d4:6a:c8:d5:b9:93:38:2d:f1:93:f1:1f:e3:
89:d4:7d:96:a2:77:39:92:16:73:21:d0:74:ca:e9:
55:08:94:16:ce:97:20:ac:46:40:10:44:91:aa:28:
98:d0:e2:4e:ac:70:8c:dd:90:9a:34:62:2f:ad:e1:
cb:d7:2f:fc:a4:6d:1d:fd:30:84:be:6f:4d:9c:36:
91:4c:e6:c5:cf:69:06:8b:3c:9d:2f:ad:71:30:ac:
38:f3:da:9b:f2:76:b6:2e:8b:9b:cb:9a:f7:98:9d:
fa:2d:dc:2d:b7:bb:39:c3:77:65:77:7d:23:dd:42:
4a:fb:63:c0:84:8a:0b:cb:3f:99:fb:a2:5f:29:a2:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:2F:28:D4:FF:1D:2E:BC:9E:08:15:26:30:3D:A9:82:B5:E9:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.crl
X509v3 Authority Key Identifier:
keyid:55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.8.0/24
IPv6:
2001:504:101::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b5:2e:c6:1d:16:b0:f5:52:88:cf:9a:24:7e:a1:56:76:10:
40:09:43:d5:9d:b8:bb:0f:fa:b3:db:70:19:68:85:3c:ec:75:
e2:41:f2:ca:b0:68:48:d8:d5:f7:e8:b9:d6:7a:83:99:bc:9d:
c9:f6:6c:b6:3b:f7:69:b6:b1:95:98:b7:1b:25:53:cf:54:b1:
b3:70:68:72:71:db:67:57:08:29:c2:06:eb:a2:b8:0e:21:42:
48:71:b5:98:bf:58:25:9a:80:f3:ac:a2:10:28:6e:9a:bd:29:
55:f7:67:38:6d:f4:68:2e:ce:57:2b:08:6c:32:49:f8:20:cd:
f3:a1:ec:68:46:f9:23:1b:90:88:3f:7d:44:49:ac:61:7a:74:
c8:36:32:ed:3e:05:15:74:83:23:24:9d:5a:c4:69:17:12:b1:
71:77:04:e4:6b:db:30:21:fd:89:99:43:65:28:4c:0f:1a:69:
a3:9e:e5:98:bf:0e:7d:60:02:dd:26:7c:6a:b8:f1:1b:73:c9:
20:64:23:a8:fc:a8:2f:f3:13:5b:65:7e:51:ce:46:56:22:6a:
a8:e3:6f:5f:82:55:fa:3e:3a:b5:0e:ed:d8:de:4e:ac:91:ce:
e1:df:f0:92:d2:5e:e4:a9:da:5f:05:0a:6a:34:00:93:aa:9d:
94:09:6c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:05 2025 by rpki-client