Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa
File: 0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa (raw, json)
Hash identifier: rjA52d7gjwiUwdd0TYrNbqWcjKFt/u0xf9VUXarJJJw=
Subject key identifier: 9D:48:80:DA:F2:91:A5:D2:DC:73:E3:FE:CD:9A:93:D7:2C:1E:BC:D6
Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial: 010D0C9F4328584834557DB0908898D07F6D6200
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 0
IP address blocks: 149.112.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:7d:b0:90:88:98:d0:7f:6d:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=66587c6b-935f-4baa-a2f2-e9bd508479cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:12:6f:d6:df:37:07:6a:c2:3b:0f:90:92:
f8:6d:52:f1:f4:0f:8e:9f:84:26:7b:74:91:71:bf:
9b:45:6a:de:54:65:7d:b3:04:7c:ed:f8:81:d5:a4:
cb:bc:a1:45:c6:73:49:34:6c:69:90:73:e7:02:5c:
c6:cb:63:f8:85:33:eb:81:f9:02:9e:0d:51:c3:72:
8f:ee:d5:14:25:74:9b:42:57:8a:d0:27:7a:49:07:
46:de:3a:f3:75:b9:5d:cf:65:b8:d6:f8:6b:63:49:
ba:fe:ac:bc:77:3a:69:2b:cd:3d:9a:06:ed:5e:71:
f9:74:d3:ad:61:a5:82:ab:f3:fd:15:a9:ad:54:81:
53:b2:63:52:76:fd:a5:ac:e6:90:11:c0:21:33:dd:
89:92:28:2b:3f:6a:41:d9:60:bd:69:de:e6:e7:cf:
50:4e:f6:b7:72:7c:54:cf:ef:28:67:3b:71:ea:41:
87:0e:b2:26:a7:1b:30:0e:b4:a2:bc:aa:d3:4b:cf:
84:af:13:39:ac:79:22:db:b5:f3:64:d1:10:7a:7b:
80:de:8c:9d:21:b2:d9:23:95:6e:bf:e2:9f:13:63:
07:f2:27:59:fd:3c:d3:9d:33:43:83:ac:d6:bc:19:
81:9f:f0:ee:6a:dc:80:06:04:06:b0:e9:bf:9e:d7:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:80:DA:F2:91:A5:D2:DC:73:E3:FE:CD:9A:93:D7:2C:1E:BC:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
X509v3 Authority Key Identifier:
keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:66:85:bb:cd:74:eb:56:db:c5:af:8b:ae:dc:32:81:0a:58:
89:53:4b:0d:e5:25:42:f5:8f:f2:64:6c:6c:e3:79:14:4a:a2:
4f:cf:ab:4c:5e:16:1f:b4:c5:0c:af:90:28:87:a8:e7:16:e4:
06:e0:d1:16:6d:e4:cb:85:96:b4:4d:be:a9:1b:45:86:69:ba:
83:85:f4:7f:ee:e1:f5:7e:c4:8e:7d:0f:36:97:70:b9:8a:39:
27:93:f0:76:ad:3f:15:fc:ca:24:5d:1d:de:ff:82:cc:34:9f:
28:9b:5d:99:29:da:e6:41:b5:4d:62:3a:28:0b:0a:66:e9:b9:
db:35:99:ed:cb:fe:79:25:46:47:0a:37:4b:c6:ad:b6:3b:34:
85:33:ba:b8:48:d0:aa:85:a9:e0:0a:66:b5:dd:37:39:9e:ab:
3e:98:24:20:34:95:ae:49:e2:2e:e5:98:0f:f5:19:ca:e8:1c:
20:46:4a:d6:a6:f2:c0:1e:85:ae:52:b3:ba:6d:99:8a:7b:8c:
00:a6:11:a9:0d:b2:1a:38:dd:45:f0:25:a1:08:97:52:c6:a9:
a5:ae:3f:73:b5:92:3e:e9:95:bf:fa:09:fc:c1:07:73:02:df:
5b:98:b1:c1:07:19:9f:d5:fc:b6:f2:e0:96:d3:ab:a0:fc:c0:
2a:f9:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:21 2025 by rpki-client