Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/5ea752f6-c10e-3375-a81d-22e26a0be58e.roa
File: 5ea752f6-c10e-3375-a81d-22e26a0be58e.roa (raw, json)
Hash identifier: Ce0wp4+Ixs6d2QTK20xgng3XW+NczuJpu7iIEeBySC0=
Subject key identifier: 09:C9:94:BF:94:A7:EB:CF:97:FC:A2:0F:66:FB:F2:B8:A2:E6:6F:FE
Certificate issuer: /CN=de865b2a-8f4f-483a-937a-3947af6e6924
Certificate serial: 010D0C9F432858446BB2CF899C0D991035267700
Authority key identifier: D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/5ea752f6-c10e-3375-a81d-22e26a0be58e.roa
Signing time: Tue 02 Jan 2024 14:50:55 +0000
ROA not before: Tue 02 Jan 2024 14:50:55 +0000
ROA not after: Mon 01 Apr 2024 13:50:55 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6b:b2:cf:89:9c:0d:99:10:35:26:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de865b2a-8f4f-483a-937a-3947af6e6924
Validity
Not Before: Jan 2 14:50:55 2024 GMT
Not After : Apr 1 13:50:55 2024 GMT
Subject: CN=dc33912b-53fe-4c72-ba42-c90b95869a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:d6:85:c1:a7:92:f8:1d:81:12:8f:70:78:
82:27:dc:76:68:a7:aa:c9:f6:3e:e2:84:72:c7:67:
10:ba:4a:ae:ab:af:1b:7b:26:6c:70:0e:47:27:ee:
f1:f1:2c:39:18:b6:97:58:b2:9e:c1:12:81:2f:7a:
86:49:29:c7:4a:03:84:09:2e:a1:b4:a1:ef:b7:f6:
55:20:14:7d:dc:d0:4a:53:d3:0e:bd:de:c2:81:ef:
14:24:1a:f9:61:68:cc:48:f9:ed:3b:1c:2a:4c:64:
a7:d2:a3:ed:e8:b4:45:0a:04:bd:94:9f:d0:0b:02:
0e:16:af:e8:18:aa:36:97:44:73:1c:a9:04:dc:5b:
7f:66:a0:f9:20:cf:81:3d:69:08:af:3a:ed:67:a8:
18:36:9e:90:bd:97:1c:35:85:90:ba:57:bc:ba:4d:
7c:29:cf:e5:cd:49:90:d2:9a:51:55:ee:3d:1a:09:
ef:dd:4c:09:02:d5:0b:89:25:c8:d4:0d:6a:64:4d:
8a:46:b6:d8:67:ad:87:d4:5d:65:dd:62:19:42:4a:
e1:42:59:e6:b1:54:31:59:64:42:2a:46:ae:29:25:
05:af:81:ce:1a:17:ec:bf:d0:e6:dd:b9:2f:0c:c3:
bb:f1:92:f4:37:3e:42:f6:48:e9:83:60:1e:12:fa:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:94:BF:94:A7:EB:CF:97:FC:A2:0F:66:FB:F2:B8:A2:E6:6F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/5ea752f6-c10e-3375-a81d-22e26a0be58e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/de865b2a-8f4f-483a-937a-3947af6e6924.crl
X509v3 Authority Key Identifier:
keyid:D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:0f:6e:c1:fb:34:ee:35:c2:cb:bc:f9:56:03:67:d3:9e:e4:
de:cd:f5:b3:23:e0:24:2d:7f:1f:74:b7:c6:69:6e:c2:68:bc:
50:22:0c:63:aa:10:6a:b1:17:ed:ec:9b:ee:42:14:2e:93:c1:
0a:16:3a:42:dd:4a:1e:c8:13:5d:77:5e:93:3c:86:97:99:ca:
ba:60:a1:48:27:5a:2c:28:a1:39:1d:33:f2:30:b7:2d:fd:b6:
aa:47:9a:6b:bd:7b:9d:f8:3e:50:d6:9a:c3:f8:26:34:fd:b3:
a3:e9:26:7a:af:72:f7:0a:04:7b:ee:5d:12:c2:ef:93:c7:b1:
18:84:76:1e:68:58:47:3a:fe:ba:28:ca:66:97:e8:aa:73:5e:
19:d6:bd:28:66:81:74:c7:e0:d1:ed:d8:7c:36:90:b5:09:34:
d4:a7:da:e7:e7:03:91:51:8e:06:2d:7a:02:c9:2d:3c:d6:6a:
92:36:b3:df:fd:28:7b:ab:f6:25:94:05:70:ab:b1:01:65:f8:
46:c8:3f:2d:32:00:6f:b8:39:84:11:3e:90:b0:98:aa:b7:37:
f1:b4:fa:37:48:fd:bc:e8:f3:96:a8:bb:f5:a2:40:d9:ba:f8:
7e:8a:6a:f9:85:58:32:4d:66:c7:20:0e:a8:0e:89:eb:6d:0d:
2f:7b:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 21:14:24 2024 by rpki-client on console-ams.rpki-client.org