Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/c7ff4fa4-4950-3763-8380-a1443a55a912.roa
File: c7ff4fa4-4950-3763-8380-a1443a55a912.roa (raw, json)
Hash identifier: OoPgu4a/3akmLd5TfBPQJh2lI0NZV/1O4aNGyrChe/M=
Subject key identifier: 1B:5D:6E:11:F9:FF:55:08:E2:B2:35:A1:B9:E2:40:F0:2A:83:FE:39
Certificate issuer: /CN=de865b2a-8f4f-483a-937a-3947af6e6924
Certificate serial: 010D0C9F4328584460A0BCEC20CA6CD2BD51BB48
Authority key identifier: D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/c7ff4fa4-4950-3763-8380-a1443a55a912.roa
Signing time: Fri 29 Dec 2023 15:40:36 +0000
ROA not before: Fri 29 Dec 2023 15:40:36 +0000
ROA not after: Thu 28 Mar 2024 14:40:36 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:60:a0:bc:ec:20:ca:6c:d2:bd:51:bb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de865b2a-8f4f-483a-937a-3947af6e6924
Validity
Not Before: Dec 29 15:40:36 2023 GMT
Not After : Mar 28 14:40:36 2024 GMT
Subject: CN=c1e31535-1263-47d4-969c-eefacd4660ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:3d:6d:83:ce:62:be:0b:49:e4:ad:db:e8:
2b:0d:40:09:0b:0d:e7:67:2b:49:44:75:8b:ed:f3:
af:c5:ad:53:d3:e8:14:21:f8:f2:d8:05:2e:d8:f8:
8e:79:3f:f7:23:f9:c1:50:a8:e1:71:55:90:65:93:
9d:ea:ef:67:88:13:b8:5e:13:6f:57:0d:28:4e:cd:
11:66:c6:25:b5:ac:f3:74:a5:ef:72:8f:51:ee:fa:
a0:e9:73:72:12:f6:64:3c:55:3f:ae:f1:73:87:d1:
b5:71:ab:49:10:c2:61:fa:bd:2a:cd:3d:3a:17:d0:
85:68:1f:93:e3:ca:08:49:8e:04:12:5b:87:02:0c:
bf:94:69:76:00:58:e7:c9:cc:43:08:b3:a5:41:94:
2f:95:88:95:22:3a:f1:80:e3:50:94:4e:6b:f4:4e:
5f:1b:94:1f:d8:85:a3:ae:b3:41:d8:3d:e5:30:c5:
81:82:ea:4c:60:c2:6c:0c:b9:34:0f:b2:66:f7:43:
31:2d:57:05:0c:7d:fa:a0:9e:fb:dc:57:97:42:3c:
79:87:d1:40:a4:3b:22:94:f2:2b:55:93:27:ae:2c:
33:d6:22:4c:ae:c0:5b:7d:e7:68:ab:4e:91:44:97:
84:fd:dc:3e:11:10:1c:6e:c7:fc:a6:f6:bd:5d:2d:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:6E:11:F9:FF:55:08:E2:B2:35:A1:B9:E2:40:F0:2A:83:FE:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/c7ff4fa4-4950-3763-8380-a1443a55a912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/de865b2a-8f4f-483a-937a-3947af6e6924.crl
X509v3 Authority Key Identifier:
keyid:D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:07:68:88:01:0e:44:21:ef:b9:52:32:43:83:89:ee:3f:20:
42:a0:f5:c3:90:fd:4f:96:c9:23:ee:d2:51:e0:db:b5:8f:3c:
99:14:a6:d5:54:7e:1f:dc:3c:bd:ee:13:7d:b6:fd:c2:7f:d8:
a1:4c:b7:cd:f4:f5:6a:8b:ec:db:87:da:9a:49:99:76:c5:5e:
59:1c:ab:d7:1d:df:4f:f7:7d:96:a4:da:53:67:cd:4e:d8:5f:
41:95:45:6b:8e:e3:8b:bc:aa:c2:e6:3b:c2:55:4f:fd:aa:7c:
09:95:f3:23:58:9c:43:09:0a:01:2a:85:82:67:7a:17:6d:95:
f2:b6:bd:11:4b:2b:40:22:73:04:ed:e1:f1:ed:e5:00:e3:75:
f9:3c:43:bf:8b:87:13:40:90:56:fd:1a:ed:c9:d4:46:c1:ed:
1e:57:3b:7e:8f:57:29:2d:6a:df:d6:72:57:ad:e7:3a:88:49:
6e:0a:ad:a1:75:5f:67:05:df:1a:9b:34:6a:db:a5:bd:9f:ae:
9b:06:02:70:1b:3d:45:d2:f1:5a:69:fe:b1:5a:08:33:bc:b4:
bb:eb:a7:61:09:df:a4:29:9e:ab:f4:7d:01:80:36:0f:36:63:
a0:2d:cb:e8:a0:c6:8f:f1:6a:23:31:b8:6c:b5:2a:74:0b:bf:
c7:0b:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org