Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/ba0ea665-2d42-3d21-8a91-2dba6e92e7be.roa
File: ba0ea665-2d42-3d21-8a91-2dba6e92e7be.roa (raw, json)
Hash identifier: eqnWI6NJRac8N2YrMJYCDUad0horaWjFjJ7XP6hZMU4=
Subject key identifier: 3B:C8:C5:91:B2:32:9B:B8:6D:B1:8C:3C:09:D9:B8:00:76:39:89:F6
Certificate issuer: /CN=7671ed9c-f209-4882-bd38-5f129f761a08
Certificate serial: 010D0C9F43285841728477B247DD6766F1233980
Authority key identifier: 78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/ba0ea665-2d42-3d21-8a91-2dba6e92e7be.roa
Signing time: Tue 04 Apr 2023 19:04:07 +0000
ROA not before: Tue 04 Apr 2023 19:04:07 +0000
ROA not after: Mon 07 Jul 2025 04:00:00 +0000
asID: 399970
IP address blocks: 149.112.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:72:84:77:b2:47:dd:67:66:f1:23:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7671ed9c-f209-4882-bd38-5f129f761a08
Validity
Not Before: Apr 4 19:04:07 2023 GMT
Not After : Jul 7 04:00:00 2025 GMT
Subject: CN=62d57e3f-47cc-4103-9c7f-e89042dc9e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:02:77:5d:46:cd:ee:c1:91:c0:78:90:7a:
36:1b:fb:e2:18:f9:23:ea:c8:53:4a:ef:e1:76:53:
da:c8:e3:22:0b:67:67:85:19:45:fe:eb:de:ed:7a:
81:f3:aa:dc:19:b9:6b:a0:27:01:17:9d:ad:00:3a:
68:af:0f:da:e8:63:3e:dc:b1:20:ff:92:4f:71:47:
cf:2d:e3:53:da:ff:a8:4c:04:85:e4:5d:ea:43:14:
4d:7b:b5:7c:c9:f8:04:b3:41:f7:9e:85:cc:cc:22:
7c:4b:4f:b7:15:95:95:16:79:84:43:78:c9:97:a5:
83:6a:4d:db:f7:f3:92:b3:2e:a7:ed:bb:5c:a8:ab:
da:a8:ee:b6:79:31:0f:3a:82:0f:90:0b:16:ad:d1:
16:e1:4d:8c:79:b2:0b:2e:48:3c:5b:00:c6:d0:cb:
e8:80:52:20:da:07:1d:45:ad:d4:76:54:e9:db:57:
c4:fb:23:ec:60:e2:26:1e:0f:40:d6:47:80:82:8c:
76:83:fa:4f:10:78:fe:a9:ce:55:15:1b:cf:24:07:
78:ba:ca:e4:28:7b:5e:31:59:9a:fa:1f:88:70:7c:
f6:a0:f4:2f:67:fa:01:ab:78:34:cb:7d:d8:78:2c:
0d:88:71:a8:89:af:18:9d:5e:5a:08:a9:f8:5a:0b:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C8:C5:91:B2:32:9B:B8:6D:B1:8C:3C:09:D9:B8:00:76:39:89:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/ba0ea665-2d42-3d21-8a91-2dba6e92e7be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/7671ed9c-f209-4882-bd38-5f129f761a08.crl
X509v3 Authority Key Identifier:
keyid:78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:e6:37:4b:29:93:71:d2:b8:f7:34:b0:91:fd:d6:70:25:59:
a5:5d:97:14:b9:c2:4e:55:0c:42:31:75:82:86:fe:c8:7e:4e:
a4:74:fb:cc:f3:25:ae:06:2a:95:6d:a1:41:83:73:3b:a9:73:
0e:8f:e1:2c:cd:74:92:07:36:d3:c8:7d:8e:40:5b:cd:bc:c5:
80:f0:7e:a6:04:22:f5:96:c6:14:8d:4f:aa:a7:6f:0d:8a:65:
c1:b0:52:1a:33:09:cb:72:21:38:0b:f6:ed:0e:a7:f8:fa:72:
b1:6e:b2:ed:cc:9b:bb:f4:d5:9c:8a:29:cb:39:a1:32:63:c5:
64:ca:10:3a:98:54:44:b7:13:91:04:c7:c9:97:67:13:1a:fd:
06:a7:70:f7:96:33:84:6a:00:6d:af:05:99:9f:8e:40:30:50:
54:97:19:1a:9d:db:0e:89:4e:b5:f6:7f:dd:f0:07:85:a6:b7:
79:fb:ae:13:c1:80:5e:e8:74:01:56:b8:e6:02:c4:df:4c:65:
6c:61:1c:65:54:46:22:25:17:2b:0e:ae:25:9c:28:59:55:b1:
48:44:87:d1:22:50:c8:f3:d0:18:ce:2b:2a:cf:af:e4:23:65:
43:97:b6:d2:ac:26:68:35:a3:42:27:7f:de:84:33:ab:43:d0:
b2:52:56:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:35 2025 by rpki-client