Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/18700e6e-0047-3c41-ac9b-aeeb84fcfb3d.roa
File: 18700e6e-0047-3c41-ac9b-aeeb84fcfb3d.roa (raw, json)
Hash identifier: rFLOsbcEhHKuKRe9870bDvjnro/qnKeSQeRpqz78hEI=
Subject key identifier: 34:27:F3:2F:B8:F7:E2:13:47:2F:CB:DE:A9:7D:B7:8E:34:AE:7C:B6
Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial: 010D0C9F432858486C2B1060737CDD7379FD3080
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/18700e6e-0047-3c41-ac9b-aeeb84fcfb3d.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 0
IP address blocks: 149.112.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:10:60:73:7c:dd:73:79:fd:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=02d9066a-feff-43fc-8552-db0eef3f42fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:af:1b:de:da:40:04:3b:92:84:3a:1e:5c:
d4:73:c9:c8:8a:a5:9c:99:55:a1:b6:80:11:ec:d8:
cb:62:dc:48:2d:06:47:36:3f:6f:0e:06:2e:73:ec:
92:ac:a2:dc:f3:ab:cc:2c:dd:53:b1:36:54:09:04:
77:46:f8:a8:bd:17:68:76:6e:f4:a9:f3:a3:5e:ee:
f8:8f:09:2f:2b:dd:55:04:78:74:54:70:ef:e3:c8:
5c:70:fd:c4:fe:15:db:4c:30:96:cb:b9:d3:d5:69:
e3:dd:05:0b:41:24:b5:e7:9e:30:b5:79:32:80:b0:
87:82:61:3b:c5:6a:62:e0:b1:ed:58:66:92:8e:6b:
49:8d:b7:90:21:ed:8a:4c:91:0f:fa:9a:f2:04:07:
34:0e:3b:70:72:fa:48:79:58:58:a3:8e:f4:62:4b:
b2:eb:52:ff:62:34:dc:00:55:6b:c4:a3:ab:90:bb:
aa:e0:91:bf:8e:b2:7e:8d:a3:d9:56:11:ca:7a:22:
1e:07:38:18:ac:73:fe:aa:24:73:6e:3a:e1:6c:75:
52:56:3e:7f:d5:bf:2b:a8:bc:c1:12:06:9c:d5:db:
b2:39:14:49:dc:33:d6:02:8d:1b:ff:f7:e9:f3:73:
41:ec:54:c1:70:37:7c:f2:45:47:98:d7:df:90:f7:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:27:F3:2F:B8:F7:E2:13:47:2F:CB:DE:A9:7D:B7:8E:34:AE:7C:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/18700e6e-0047-3c41-ac9b-aeeb84fcfb3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
X509v3 Authority Key Identifier:
keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:b3:7e:4a:aa:eb:fd:17:be:fd:83:f8:f2:3e:6a:b7:94:55:
8f:12:6f:b4:8e:8c:76:e6:c7:86:21:09:93:16:f9:c7:99:57:
b2:5c:f8:b4:45:be:e5:d3:15:53:f2:eb:96:dc:0e:97:1f:03:
84:17:18:5f:2a:ca:4a:3a:13:fb:bb:2e:10:68:56:42:76:bd:
0f:c3:e3:61:e7:7b:30:a1:e3:ae:23:32:1b:43:86:9b:98:2c:
a7:7c:6d:45:7b:6f:a2:c5:d0:86:ce:70:b0:03:14:1b:ae:cc:
79:b4:84:2e:53:04:fc:4e:08:cc:bd:54:22:8b:01:48:8e:f1:
6f:e3:50:5a:6e:e9:cb:44:87:ba:9f:69:40:14:2b:da:4b:57:
66:fb:21:d1:01:33:9a:b5:22:a9:fb:45:86:58:36:ae:fb:7d:
72:99:3a:8a:a4:db:52:4a:df:47:04:d7:4d:b4:a0:ec:d9:0b:
df:0c:08:6d:a0:57:e8:e1:fe:b4:c7:fb:c9:e1:35:c3:65:ed:
4e:8a:b4:21:f2:ca:66:ec:ee:b4:f1:85:5e:84:14:3d:4d:58:
5c:01:e9:27:a1:80:2b:4e:cd:2b:d9:63:21:35:e9:47:63:e6:
16:40:7f:2f:53:02:d6:36:25:83:92:9e:65:e2:38:3f:f6:20:
bb:ce:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:18 2025 by rpki-client