Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/4694cbdd-dc74-3cab-98f7-5dd86f973de2.roa
File: 4694cbdd-dc74-3cab-98f7-5dd86f973de2.roa (raw, json)
Hash identifier: XLAA4AvFGSBLRnEYMxQV9+A2aRnmOG8V4zfKWowqblM=
Subject key identifier: E3:93:97:5E:78:FB:68:2B:00:F8:21:3C:5E:26:EA:7E:99:FD:00:9D
Certificate issuer: /CN=de865b2a-8f4f-483a-937a-3947af6e6924
Certificate serial: 010D0C9F432858446BB45AFF875976A94C956D00
Authority key identifier: D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/4694cbdd-dc74-3cab-98f7-5dd86f973de2.roa
Signing time: Tue 02 Jan 2024 14:54:01 +0000
ROA not before: Tue 02 Jan 2024 14:54:01 +0000
ROA not after: Mon 01 Apr 2024 13:54:01 +0000
asID: 399970
IP address blocks: 149.112.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6b:b4:5a:ff:87:59:76:a9:4c:95:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de865b2a-8f4f-483a-937a-3947af6e6924
Validity
Not Before: Jan 2 14:54:01 2024 GMT
Not After : Apr 1 13:54:01 2024 GMT
Subject: CN=1446f994-bb6d-4c76-b044-ae7b52be9b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:44:5d:ab:34:89:f1:e5:f7:56:4a:79:83:
14:98:12:e9:b2:ac:f3:85:c4:1d:d8:e8:c1:4d:c1:
bb:7c:54:35:48:a8:6e:75:04:45:5b:81:30:ad:09:
8a:8d:b1:0e:74:c1:2c:5f:7e:47:5f:d4:9b:d4:b8:
0d:12:c9:88:28:8a:e3:6a:78:c4:4b:41:79:08:5b:
59:b5:9b:99:07:06:6c:ea:b8:ef:5f:d4:42:8e:b2:
cd:ed:ce:4e:46:9d:47:7e:75:c6:e9:f3:13:88:74:
53:3d:b9:57:50:8b:22:c3:f2:bd:0a:c1:89:07:36:
e5:c2:eb:79:17:82:2f:d7:2b:3c:8c:c6:3b:29:dd:
9a:fb:e5:fa:b6:b2:5c:db:d8:69:71:94:43:24:58:
84:d0:67:cc:45:0e:92:fa:06:90:9f:6b:32:90:24:
9f:ba:79:c9:e0:88:62:4f:bc:7e:e6:d5:f4:ce:6a:
72:d6:18:73:bf:85:da:d8:db:97:62:a3:44:1e:c2:
7e:1e:dd:d9:e8:e3:1f:be:e4:74:d1:7c:69:c7:45:
cc:aa:f7:56:2f:0f:6f:f4:8b:6a:ec:0a:4b:aa:7f:
56:72:1e:b7:8f:8c:2d:7f:42:27:22:b0:9c:54:3d:
d1:0c:b0:e8:35:c4:3c:53:c7:5d:e4:39:13:14:52:
16:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:97:5E:78:FB:68:2B:00:F8:21:3C:5E:26:EA:7E:99:FD:00:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/4694cbdd-dc74-3cab-98f7-5dd86f973de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/de865b2a-8f4f-483a-937a-3947af6e6924.crl
X509v3 Authority Key Identifier:
keyid:D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:7b:62:bd:a5:47:e8:ca:c9:35:d9:59:6f:b6:7c:54:ae:2d:
28:70:d8:26:a6:d4:a5:a5:19:60:a3:1c:d2:c2:c5:5d:eb:99:
93:a2:0c:14:cc:f3:3b:2f:fe:97:ea:f0:c0:b6:4c:1b:dd:eb:
65:a9:79:fd:d7:78:95:7e:67:2f:de:24:df:53:4c:fd:73:12:
cb:dd:db:cd:9d:0a:46:14:e9:81:da:d0:1d:15:24:00:42:29:
f1:db:42:30:7a:ea:ad:c4:51:0b:3f:28:04:0d:b2:dd:8c:3d:
f9:1d:b8:de:f1:17:d3:aa:93:5d:45:73:07:d5:8f:e7:c3:ac:
2c:70:ff:97:c4:0a:cc:82:fc:e3:13:9d:7c:45:ab:ca:3c:7a:
13:97:c7:81:ce:dd:fa:47:c7:09:ce:5f:9c:32:5d:be:a6:e7:
a0:7d:00:4a:a4:5c:1f:c0:e3:de:e4:53:d5:d2:8d:f0:42:18:
7e:06:aa:41:75:f4:02:06:ec:01:ce:a4:c1:f7:68:57:bf:c9:
20:d5:7f:cd:d9:37:11:63:8b:ec:57:4e:b4:48:94:d8:95:3d:
98:2a:a9:ca:de:cf:bf:72:36:09:03:bb:e3:40:3f:3e:53:d5:
dc:ff:1a:27:bb:0b:f9:fc:89:01:50:a4:63:24:60:45:2f:68:
18:e3:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org