Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/d854964c-a417-3e6c-a65d-940d2ac9016c.roa
File: d854964c-a417-3e6c-a65d-940d2ac9016c.roa (raw, json)
Hash identifier: D7TBFnOJo+t8RS+U1P7lvR6ay0dys+suR8eIIVeyP5s=
Subject key identifier: 98:23:80:94:F1:CC:A0:62:3D:3F:00:52:D0:85:F2:3F:0C:31:77:BF
Certificate issuer: /CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Certificate serial: 010D0C9F43285841FFB517A62AD85E955C75A6B8
Authority key identifier: 4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/d854964c-a417-3e6c-a65d-940d2ac9016c.roa
Signing time: Thu 25 May 2023 12:54:20 +0000
ROA not before: Thu 25 May 2023 12:54:20 +0000
ROA not after: Wed 23 Aug 2023 12:54:20 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ff:b5:17:a6:2a:d8:5e:95:5c:75:a6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Validity
Not Before: May 25 12:54:20 2023 GMT
Not After : Aug 23 12:54:20 2023 GMT
Subject: CN=d921ab5f-908c-464a-89ac-e99a5585b99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:c3:e2:43:34:d3:f1:36:67:f5:9a:59:80:
be:a8:23:ca:98:78:70:4b:e2:ff:f3:86:bc:e6:c2:
0b:ae:fe:04:d4:07:e4:4c:b4:7a:21:e9:c8:bf:85:
42:88:6f:ed:c4:26:71:fb:ed:64:e5:05:21:87:05:
b0:7e:1a:a4:83:ba:cc:7b:5f:52:36:b2:31:b1:5e:
f5:40:4b:91:0e:30:77:59:d5:31:46:71:f3:54:c0:
9a:fd:16:69:8b:a4:72:81:2f:3b:3b:2c:6e:46:b2:
00:f1:4c:f7:83:97:b9:60:cc:6d:e7:56:85:f3:76:
93:a7:2f:50:1f:3b:58:71:eb:8e:d5:2e:75:63:8b:
bc:a8:03:b6:f1:e1:cb:29:ea:45:28:2e:4c:78:78:
39:e6:1f:08:24:e9:0c:df:38:49:14:d5:cf:59:dc:
b3:58:49:6e:91:b3:b4:01:cc:43:54:77:ae:20:5f:
41:62:20:95:6c:6f:54:f7:50:e2:00:d5:02:a9:3b:
5c:50:61:50:cc:dc:b5:d6:be:2b:da:b9:da:be:ca:
74:0b:6c:29:cc:3e:33:55:1b:e8:3b:5e:e1:87:67:
bb:26:68:77:36:9a:e2:fd:8f:5a:32:42:79:5a:62:
a5:44:48:4b:13:86:b6:5c:eb:ff:3c:df:b4:a0:60:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:80:94:F1:CC:A0:62:3D:3F:00:52:D0:85:F2:3F:0C:31:77:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/d854964c-a417-3e6c-a65d-940d2ac9016c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7e2fdf07-a7cd-43db-86a0-386dddefb544.crl
X509v3 Authority Key Identifier:
keyid:4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:d3:b2:51:4c:4d:06:c4:50:48:ce:1c:2f:c2:6c:c4:0c:51:
92:4e:1f:cc:26:f3:6d:2c:58:b8:e9:0d:ae:84:f7:38:7d:9a:
54:51:c8:0a:dd:e1:8b:7f:06:71:f5:0b:0d:c9:a4:d8:71:d4:
b9:8f:7a:38:34:06:1a:03:b0:14:ca:d9:a3:48:35:62:bd:ea:
93:55:b6:ff:34:fb:50:42:e3:31:8b:e6:d5:df:65:67:91:ed:
e4:3d:32:dd:6d:ae:35:0f:c3:87:65:91:c9:d3:76:63:1f:98:
b1:32:70:6b:d7:9f:8b:bb:f9:bd:1d:a2:7c:c6:da:5d:3b:76:
19:e9:37:b8:81:28:67:27:35:9d:96:58:c4:d2:5d:5d:e4:28:
53:f7:f1:05:6b:96:00:5e:69:d1:89:6b:ec:10:c8:74:48:13:
62:8e:3c:56:f8:a2:c5:48:08:4d:d3:32:cd:92:74:54:c3:69:
ec:0c:db:aa:26:2d:be:27:f5:7f:c0:23:ab:85:05:81:5f:1d:
fe:e2:89:a5:f2:de:ef:23:34:fa:d9:bb:28:54:41:7d:d9:f7:
5f:b1:5a:d3:5d:56:02:de:f4:14:15:cf:c5:e4:d0:33:79:da:
14:e5:bf:fb:df:82:b3:31:aa:38:ae:97:07:a3:6a:b3:3b:b3:
de:cd:b3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:40 2024 by rpki-client on console-ams.rpki-client.org