Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/c9a4a13e-622f-3e2c-8d78-a3de0a4a488d.roa
File: c9a4a13e-622f-3e2c-8d78-a3de0a4a488d.roa (raw, json)
Hash identifier: ogTOYDxSeCAFa4Or2res6+JMMXEmR73c5e/aPYl0440=
Subject key identifier: 86:82:08:30:11:CE:A0:31:6D:D4:51:E5:0D:02:C3:2A:87:29:26:F7
Certificate issuer: /CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Certificate serial: 010D0C9F432858468C0DB9DC85F00AFC57059A80
Authority key identifier: C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/c9a4a13e-622f-3e2c-8d78-a3de0a4a488d.roa
Signing time: Mon 15 Jul 2024 14:33:50 +0000
ROA not before: Mon 15 Jul 2024 14:33:50 +0000
ROA not after: Sun 13 Oct 2024 14:33:50 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8c:0d:b9:dc:85:f0:0a:fc:57:05:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Validity
Not Before: Jul 15 14:33:50 2024 GMT
Not After : Oct 13 14:33:50 2024 GMT
Subject: CN=d09399ab-27fa-4cb4-9285-7fb6f07f595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:79:8b:2d:1c:41:88:51:d7:1e:4c:e4:2b:
25:b4:09:b6:3a:26:df:32:02:f5:5f:97:cc:fb:51:
9d:95:e5:2e:f7:19:c0:9f:c7:5a:49:93:5b:27:4b:
44:51:dc:bc:0c:ba:a9:51:a9:95:10:40:3a:97:08:
45:93:33:31:18:0b:a4:46:1a:d1:ea:0d:db:85:d2:
42:2a:8c:af:f1:0f:df:b9:3f:51:1b:d6:b1:3d:c7:
ea:2b:a3:45:29:10:66:2b:0a:05:71:a5:5c:bf:53:
6f:42:e2:f9:57:d5:a6:cc:d1:c9:11:8f:80:6d:27:
66:a0:bb:e1:62:2a:26:1d:46:64:ec:93:92:b4:ba:
18:91:b1:34:3b:a5:b1:80:1b:53:d2:13:c8:59:b3:
4d:f7:32:31:88:cc:52:69:89:80:e3:c6:5f:49:1e:
b4:85:44:5d:98:ae:44:17:f5:4e:b4:04:b5:95:83:
06:db:28:9e:61:a8:61:cd:e2:f8:12:90:82:ba:54:
49:be:78:79:02:b6:91:d2:dd:8a:1c:6e:97:cb:11:
28:7e:e1:87:e8:ab:a6:03:19:fd:09:59:3e:4a:72:
a1:f8:08:f4:69:00:a4:d9:7d:dc:0a:58:8a:93:4c:
e7:89:d9:05:91:98:17:9e:42:53:86:b1:0c:c5:57:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:82:08:30:11:CE:A0:31:6D:D4:51:E5:0D:02:C3:2A:87:29:26:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/c9a4a13e-622f-3e2c-8d78-a3de0a4a488d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/56ea3e88-1c8a-47de-bdd4-27317c283592.crl
X509v3 Authority Key Identifier:
keyid:C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:76:a0:d1:2d:60:f5:1c:c7:df:87:c1:c9:22:14:c3:02:fb:
6f:c2:c0:50:d0:f6:6f:da:6a:64:a9:83:29:53:df:76:c6:e5:
38:d1:ab:e7:ed:db:63:8a:ee:82:17:34:2d:84:f8:5a:c3:d2:
5d:d7:ea:23:40:42:86:43:68:ec:a5:f6:ac:15:77:0c:90:f0:
e4:df:42:e4:5b:82:0e:e3:d5:ed:e1:d4:27:49:22:40:54:b8:
f0:27:b0:10:18:ea:78:dd:51:99:67:30:f2:8c:e4:0b:68:e8:
63:52:ce:30:ad:10:9e:37:5d:d3:53:16:1d:08:41:d9:98:18:
6d:15:84:56:6c:9e:a0:2a:5c:8d:ea:44:f7:9a:5a:a8:ca:41:
ff:31:c6:89:66:bc:54:3d:86:12:75:70:13:7b:e0:5d:a7:f8:
8d:a9:28:20:5b:bf:f7:52:3c:48:a4:a2:03:ce:89:d8:0e:20:
a0:d0:e6:80:22:e6:84:22:25:21:c4:8d:5e:2b:02:d7:df:b1:
39:a5:d4:e3:8b:10:d0:a9:35:04:7e:80:49:46:df:ee:24:06:
7e:c2:2d:5f:34:d1:6b:7a:8c:6e:86:2a:77:aa:60:bd:20:89:
35:7a:3b:61:38:b3:57:de:f1:05:12:f6:47:63:da:fc:5b:9b:
42:14:71:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:59:25 2025 by rpki-client