Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa
File: ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa (raw, json)
Hash identifier: +7msf1nvgIeRIvwuKSuRcEAdhr1qVk/nMEsZJ0z4wmc=
Subject key identifier: 71:F2:2D:3E:A7:46:F1:6C:53:54:D4:E5:67:70:76:40:81:25:5F:E7
Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial: 010D0C9F43285848CB1656791050931977364800
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 149.72.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:56:79:10:50:93:19:77:36:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=cd4545de-da6a-4224-8237-3da9ad02105d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:fc:15:e5:bf:77:26:90:98:c3:48:81:92:
f7:22:b2:80:91:d9:a1:ac:37:c3:e5:2a:f3:f7:76:
d9:1d:58:c3:34:23:e3:ff:4b:8d:bc:55:72:da:a0:
db:ae:63:36:f9:41:1f:40:46:41:37:75:56:32:d4:
da:4e:f8:59:77:4a:9c:90:a1:fb:6a:0e:6a:34:4f:
49:7e:16:b4:04:20:1c:ce:07:6d:be:bd:d3:4e:80:
ca:42:65:79:16:c1:35:b5:fe:cd:5e:6d:ea:63:a6:
97:40:5d:45:da:ec:82:13:f4:db:a4:68:8f:d5:98:
72:0d:c5:95:75:6d:f9:13:9f:a0:31:2b:6d:37:2a:
d6:09:12:6c:df:b7:75:c3:66:45:f7:b7:82:49:76:
3d:ae:b1:00:a9:17:ba:cf:b1:ed:f7:81:26:25:f5:
ee:73:69:98:45:49:32:2e:a8:a9:97:79:84:d1:8c:
c9:06:e8:32:ee:e3:dd:bb:d0:55:a8:6a:4e:00:f0:
9b:db:36:ff:95:0d:66:51:22:59:4f:eb:bc:03:a2:
38:59:6b:af:6a:4d:bd:7f:17:84:7f:0d:29:6b:2d:
0d:b0:f9:9e:38:c6:a7:b8:0f:ed:51:63:c8:e1:bd:
01:13:03:49:b9:cd:56:a2:f2:a3:28:76:0b:2e:50:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F2:2D:3E:A7:46:F1:6C:53:54:D4:E5:67:70:76:40:81:25:5F:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
X509v3 Authority Key Identifier:
keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.72.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:fb:04:88:a6:e0:dc:11:47:2d:6c:97:5c:72:f5:60:6b:dd:
57:1a:0a:f5:59:a3:92:08:b8:9f:90:2c:a7:b2:8e:d3:3d:01:
a5:ba:d8:c3:d8:a8:18:e5:d5:2d:80:54:63:86:05:0c:71:8a:
c1:a1:89:54:39:15:0b:61:40:19:be:2f:d1:57:dc:9d:19:ac:
aa:bb:ab:b3:a9:ee:7f:d6:31:f5:75:72:da:34:3c:2d:80:b5:
7a:e0:d2:e7:6e:16:ce:58:ec:4d:78:01:ad:48:f7:29:18:ac:
bb:65:67:6f:ef:78:bf:58:62:88:d8:01:85:79:fc:d1:53:20:
8b:eb:53:6a:22:c2:76:a4:05:38:da:34:d3:95:a0:34:05:60:
7d:a8:b4:07:ee:ff:4c:86:6b:5b:22:53:bc:14:b7:57:90:7d:
f7:43:00:15:54:c3:b0:be:76:d3:38:48:ba:fc:5a:95:fc:e1:
e4:69:4f:66:d7:fe:6c:dc:5b:f1:cb:e5:ad:18:a5:20:c5:6e:
ae:bd:d3:7a:54:53:fd:4e:86:ac:53:31:b9:18:7d:a9:9a:b1:
fd:b6:f0:1e:94:86:a0:14:b5:b9:92:44:09:ed:93:68:cf:ca:
95:b9:91:86:08:6f:6c:e4:62:c3:20:d4:e0:ba:1a:cc:6d:94:
ad:1f:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:05 2025 by rpki-client