Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa
File: 1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa (raw, json)
Hash identifier: 2JR8hoquKKOZtkx2Trpp2+MBGGq6Qr0eDH+ULEzjGbo=
Subject key identifier: BF:2D:AC:E9:8D:20:F3:AC:52:AF:AD:C1:31:C2:EB:CA:42:71:21:4A
Certificate issuer: /CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48
Certificate serial: 010D0C9F4328584869606BEDB999BDDCF902BF80
Authority key identifier: 1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 0
IP address blocks: 149.112.0.0/24 maxlen: 32
2001:504:104::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6b:ed:b9:99:bd:dc:f9:02:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=51441407-cef4-4ac0-817d-6ddd61a7e7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:f4:bc:4e:35:66:34:bd:c2:ab:ff:ef:ba:
d5:3a:22:10:c4:84:12:f9:ff:a6:ea:90:b6:a9:77:
17:a7:ea:8c:71:f9:c9:f4:10:16:2b:17:42:50:e1:
14:45:a0:7a:3d:bd:eb:8b:31:a9:36:f5:25:ad:37:
c6:e0:bd:76:ac:21:37:fd:4c:7f:d5:8c:2f:61:6e:
4f:eb:2b:bf:8b:f7:b0:fe:43:d0:c2:64:a5:19:50:
8a:00:bf:bb:67:6b:de:cc:4a:39:bd:f1:94:d3:5d:
2a:4b:87:a9:ad:7e:57:a8:a2:df:ee:83:9d:da:e3:
33:1d:ad:cb:74:72:1c:34:dc:ee:b6:ae:e3:dc:08:
15:e7:fd:10:23:76:1f:2d:55:77:1c:86:b3:94:53:
0c:ef:fd:68:90:45:a4:b1:c9:58:58:e4:32:11:d1:
bd:70:62:f6:e8:25:8b:9c:dc:6f:f9:65:38:10:90:
42:5f:f4:0b:c2:00:9c:d8:a2:f5:ae:9f:c3:fa:8b:
4c:83:b4:31:3a:ec:97:b3:75:ce:50:5d:dd:72:26:
4e:a8:b8:fc:54:28:2e:07:73:98:fa:7c:a0:8e:4f:
a2:1e:51:61:f0:0b:a6:2a:da:b9:25:3e:d3:ac:58:
d2:9a:c4:55:fc:4b:af:02:8e:eb:a3:3a:e0:6a:54:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2D:AC:E9:8D:20:F3:AC:52:AF:AD:C1:31:C2:EB:CA:42:71:21:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl
X509v3 Authority Key Identifier:
keyid:1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.0.0/24
IPv6:
2001:504:104::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:70:a5:24:b6:a5:f2:5c:e9:1e:78:70:91:9f:98:91:8d:7b:
33:70:ce:39:93:c3:af:b8:7b:e5:8f:4e:fa:48:2f:20:7c:84:
52:b2:41:82:97:ef:0b:0a:a2:99:3a:84:33:13:c8:b1:55:36:
41:8a:55:23:bb:27:b1:ef:e5:d5:94:b0:65:31:88:15:8a:7b:
b1:9a:77:e9:8f:ab:e4:d0:07:54:33:2f:6f:f5:47:c9:e9:ba:
49:a1:2c:6f:72:ab:fc:44:fe:99:22:3d:ff:0f:58:c0:4c:d9:
32:88:0b:84:fc:09:e0:e5:92:65:df:ba:d3:d2:48:65:9f:d2:
8f:7c:ce:aa:9f:53:98:8c:20:dc:f8:35:4e:53:81:94:fc:44:
3c:8b:3f:36:c2:1a:d7:00:76:f9:09:f4:05:c6:5d:fc:37:bc:
81:ef:d8:3b:9c:e0:a3:54:6d:fc:52:0e:53:6c:37:df:e0:c7:
f4:02:47:c2:4f:52:df:45:0a:df:ba:f9:11:98:91:dc:76:88:
05:31:48:f0:61:ce:3d:97:87:8d:39:97:35:e0:99:49:ce:1b:
38:a5:2c:5b:36:2b:4d:67:8a:1e:3c:5b:70:95:42:df:c5:59:
b8:b3:3c:a8:61:58:a5:4a:e8:cc:3e:34:9d:17:31:db:27:e5:
5d:1e:17:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:54 2025 by rpki-client