Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/d46ff718-b4a6-38ee-9408-04de2dd327e1.roa
File: d46ff718-b4a6-38ee-9408-04de2dd327e1.roa (raw, json)
Hash identifier: 6XJDHRo/EGPiKolQK86Vsq7e4AQrNWlZ6Wi2YPirkc8=
Subject key identifier: D4:C8:63:0D:72:85:3B:84:7F:B2:93:C5:0D:91:E7:AD:BD:E9:91:2E
Certificate issuer: /CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
Certificate serial: 010D0C9F43285848E2D11F680800D321D165F200
Authority key identifier: D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/d46ff718-b4a6-38ee-9408-04de2dd327e1.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 30399
IP address blocks: 149.112.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:1f:68:08:00:d3:21:d1:65:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=06448208-6609-4318-99e9-1bec20791fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3d:95:9d:7b:69:51:2b:76:c2:b9:51:aa:19:
35:1e:3f:63:8e:cb:b0:79:c3:65:b1:a7:87:75:b0:
e2:66:2a:cb:ae:6b:da:e8:b5:56:b1:23:3e:0a:5f:
94:98:16:98:6d:dc:71:fe:d0:94:3a:01:a0:11:bf:
b6:b7:1b:03:44:b7:f6:6e:ba:4b:f9:58:ca:41:7d:
d8:f1:a8:b7:67:a7:e0:af:41:2b:68:96:15:6c:0f:
0b:c3:8a:d7:af:89:20:22:2e:78:63:56:5e:4b:d1:
c9:d7:cd:ca:db:0a:4b:85:4d:6d:11:89:37:75:f7:
81:ae:ae:e9:77:90:0a:3b:c6:6c:85:23:76:6e:c6:
f7:9d:51:a7:79:cc:4a:f2:41:e1:0c:c6:a7:b8:bd:
a5:96:41:48:94:43:b2:52:94:38:df:f7:db:55:17:
20:fd:1d:fb:e0:d6:92:ff:90:f1:44:e3:38:5c:e4:
7c:3d:c8:3d:65:b9:93:3e:10:d5:0d:cd:15:dd:8f:
7b:2b:25:59:1b:2f:b3:c5:77:f2:ba:c2:48:0d:6e:
85:bd:15:d4:65:0b:63:26:bb:1d:8e:d5:44:cf:17:
c3:63:02:a8:2f:b6:48:da:ca:13:b8:cb:ab:9d:aa:
ef:a5:c0:41:06:f0:48:48:2a:2d:89:02:39:e6:e2:
7d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C8:63:0D:72:85:3B:84:7F:B2:93:C5:0D:91:E7:AD:BD:E9:91:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/d46ff718-b4a6-38ee-9408-04de2dd327e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl
X509v3 Authority Key Identifier:
keyid:D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:00:ea:67:e2:5b:b8:fe:c2:89:5c:42:d9:a1:01:d9:3f:c6:
d2:76:55:12:6c:a2:26:4f:22:27:e0:d6:4c:ab:d3:6e:bf:01:
91:fe:5c:3b:4c:c6:ba:4b:a3:58:2e:72:03:2a:f7:d4:48:88:
fc:16:00:72:7c:84:02:bf:d2:ee:0c:04:80:cf:75:7f:30:00:
55:91:f8:c7:37:08:4f:88:c6:8d:fb:d7:1d:3d:57:8d:2a:f6:
17:1e:b1:46:98:0a:aa:fa:c3:fe:e2:0c:35:6a:0c:d7:df:fc:
da:7b:f9:21:86:cc:23:fb:f8:dc:0d:94:a3:71:ad:f9:1e:a7:
05:26:37:5e:14:d0:5c:79:f2:47:38:af:ba:13:95:27:c4:10:
46:ae:d3:69:8d:7f:a7:c6:7a:48:94:b2:b0:96:77:3d:f7:85:
04:ac:d7:49:cf:76:18:4f:7e:8f:d1:11:b9:68:54:40:d8:38:
0b:9c:8b:b8:57:5d:fc:d7:db:3f:80:f3:50:51:fe:c3:25:b2:
7b:43:29:77:be:3b:08:4d:fc:87:27:64:f4:7e:0d:44:3e:50:
e8:24:dc:4c:2b:ae:65:83:76:00:ae:68:d7:82:f2:91:67:db:
a0:8c:b4:e3:1f:cd:86:06:04:15:f7:1f:bf:7b:61:b1:8d:66:
f6:ad:d6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:37 2025 by rpki-client