Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/d01a1dcf-8fb8-3360-890c-669b178af92c.roa
File: d01a1dcf-8fb8-3360-890c-669b178af92c.roa (raw, json)
Hash identifier: Ys3m3Z+UuwXVJqsvXIe2/us4DlcMhDRzY7Wh8579qNY=
Subject key identifier: 44:53:1F:7B:B5:66:74:E9:BA:AB:EA:CB:25:3A:71:88:01:5A:D5:79
Certificate issuer: /CN=7671ed9c-f209-4882-bd38-5f129f761a08
Certificate serial: 010D0C9F43285841728168F151BACAF98CFF5300
Authority key identifier: 78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/d01a1dcf-8fb8-3360-890c-669b178af92c.roa
Signing time: Tue 04 Apr 2023 19:04:07 +0000
ROA not before: Tue 04 Apr 2023 19:04:07 +0000
ROA not after: Mon 07 Jul 2025 04:00:00 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:72:81:68:f1:51:ba:ca:f9:8c:ff:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7671ed9c-f209-4882-bd38-5f129f761a08
Validity
Not Before: Apr 4 19:04:07 2023 GMT
Not After : Jul 7 04:00:00 2025 GMT
Subject: CN=6acfa0d2-4927-4202-a4f8-fd6bb31d370b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:99:90:63:72:90:ac:9d:c7:89:c0:ed:81:
e1:e9:fa:12:d5:12:4f:4f:a4:e6:69:2d:1f:54:6b:
54:66:31:8d:13:b1:4a:af:51:e9:e9:45:f0:05:3a:
f7:71:72:72:02:00:47:d4:19:5a:df:9e:6e:08:93:
f1:5e:f7:5f:3b:58:49:40:5a:c8:08:fd:10:b9:2b:
bc:b7:a3:86:6c:97:a0:61:0b:d2:9e:7d:8e:72:0e:
69:f9:3a:d1:25:0e:f5:1f:56:af:37:d8:55:0c:33:
85:c8:68:6a:3f:f1:dc:0e:3a:ec:f8:7c:e8:e8:d2:
71:0f:46:2c:a6:80:a6:ed:57:5a:03:e3:11:4c:16:
7e:23:57:22:5b:77:6b:4a:bc:37:db:80:b0:79:99:
8d:a2:41:10:0f:7d:51:1a:93:c8:82:21:8a:b2:39:
26:ca:64:31:69:b0:dc:38:f4:15:1c:4f:c8:3f:e4:
98:64:8c:5d:95:a1:81:c2:41:92:9a:6a:f4:d8:1a:
53:c9:26:69:e9:83:41:a4:f9:b1:af:2b:64:0f:6a:
25:c9:ac:14:5f:1d:45:38:34:6c:cc:0d:f4:45:e0:
d5:ec:4a:8c:01:fb:a9:59:df:75:c1:9a:71:17:63:
e5:3c:63:ed:5a:a3:99:57:f7:07:6f:ff:74:4b:2b:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:53:1F:7B:B5:66:74:E9:BA:AB:EA:CB:25:3A:71:88:01:5A:D5:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/d01a1dcf-8fb8-3360-890c-669b178af92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/7671ed9c-f209-4882-bd38-5f129f761a08.crl
X509v3 Authority Key Identifier:
keyid:78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:4e:b7:9d:77:ea:be:22:68:64:16:02:0e:8a:7c:ab:97:0f:
63:ac:2d:aa:fd:f4:97:03:3b:bd:f8:c1:41:68:f3:28:b0:b4:
24:41:21:4e:50:ad:67:4b:91:26:bb:bb:c6:27:24:15:de:ff:
53:da:ad:a1:60:ed:fa:e2:58:b5:17:22:4f:4e:e3:cc:34:b4:
58:e8:56:f3:88:6b:c8:0a:7c:ca:69:24:4b:79:11:67:fc:6a:
7e:7d:89:be:41:ae:9a:06:8c:91:86:23:6e:9a:9c:d6:d5:64:
d5:b0:8b:f6:be:4f:55:f7:ff:54:04:f3:08:24:f7:bc:e5:c8:
9d:25:b1:19:c5:32:de:dd:f3:05:90:00:30:ec:e3:b4:5b:cf:
9f:57:e0:bc:b1:5b:cc:e3:3b:a6:0b:f8:17:fd:3b:23:16:b7:
7e:71:dd:79:d6:e2:25:80:46:a7:33:7f:7a:eb:2c:bb:bb:ce:
76:cf:b0:cf:fb:6d:bc:15:34:28:57:6b:a6:a2:f7:8d:45:7f:
76:32:a5:75:e4:3a:3f:2b:e2:20:e4:35:51:b7:99:9d:f2:a6:
ef:c7:a7:04:e4:01:14:ce:02:3d:d4:c7:9d:f3:99:f4:dc:bb:
2b:a7:51:20:ef:dd:0b:f9:86:16:ec:91:68:5a:7f:f6:c7:43:
e7:be:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org