Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa
File: 9ecee302-59db-3fe2-8434-966c474e0474.roa (raw, json)
Hash identifier: rngyRb14Mx6ZMqZ/MQKGU7BRnSXAMWdhrfofGEJOHuc=
Subject key identifier: E2:41:A5:92:C0:3D:B2:68:26:D0:91:2B:FA:FB:1A:98:64:36:99:B8
Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial: 010D0C9F4328584858A05CDE82E724227EB65A20
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 0
IP address blocks: 149.112.17.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:5c:de:82:e7:24:22:7e:b6:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=d6c26974-6c19-40a7-8ceb-3670b790afa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:00:c7:2c:c7:df:e5:ae:0c:a7:39:f8:77:
05:b5:36:27:d8:bb:1b:34:47:6f:37:a6:45:f6:f8:
cb:77:9d:bd:30:1b:47:e6:e4:27:83:e5:14:d5:8a:
db:7e:d8:43:48:50:f4:cc:9f:a4:67:18:b2:88:70:
73:c8:66:a0:e2:61:48:11:c5:89:d8:94:c9:d5:5d:
a1:bf:f8:5a:59:9e:da:80:9e:7c:df:03:75:0c:47:
84:75:3c:83:4c:69:df:e5:d0:8f:f1:44:7f:05:e9:
16:16:e8:da:f3:8d:ea:ba:35:05:8e:16:d2:c0:91:
17:df:27:cc:96:9a:0e:2c:b6:e2:2d:77:27:59:f5:
11:f8:68:36:4a:3d:35:cd:7b:93:b5:98:08:cd:31:
4e:d2:43:11:97:e7:ab:ed:1f:8e:76:92:ae:98:6a:
b0:55:58:1a:79:bd:4c:9a:ca:2d:13:6b:f3:df:e6:
3b:c9:04:19:7b:3b:45:ed:29:2c:c4:c5:91:a2:83:
49:2a:a9:67:dd:65:91:f2:3d:b5:7a:fb:31:54:88:
b4:a4:22:54:11:47:da:21:e7:be:8a:58:0b:44:15:
20:03:a2:37:90:ce:8f:4c:1f:00:03:db:81:01:a3:
7a:c9:b4:3d:5c:5e:85:86:30:2b:a5:27:df:83:0a:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:41:A5:92:C0:3D:B2:68:26:D0:91:2B:FA:FB:1A:98:64:36:99:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
X509v3 Authority Key Identifier:
keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:58:0d:3f:ef:f6:1a:30:eb:57:b9:55:e4:29:27:e0:5e:88:
4c:7f:37:4c:8c:f1:1e:37:47:38:83:35:a3:3b:e9:fc:1b:14:
99:f1:93:8d:88:87:1d:8b:84:ef:b7:77:54:c1:40:81:87:db:
a6:72:59:4e:41:1c:83:a6:2d:ae:a7:ef:63:6a:3a:1d:46:72:
98:f3:f4:59:c7:c6:17:f7:d5:ae:f7:d1:61:ce:b3:2a:bf:78:
40:6b:de:9e:d1:93:1c:5c:30:da:63:74:fc:05:af:0b:78:5c:
49:88:d2:74:dc:67:f7:93:4d:6c:e6:e4:14:ef:67:66:88:94:
ec:d1:83:5f:f5:8b:53:69:26:c6:6e:57:75:51:9d:ea:89:15:
c2:50:3b:a5:f9:b9:76:e8:2f:ca:c4:fb:1a:14:4e:1e:de:c4:
b5:90:76:75:f3:3a:5e:12:dd:50:70:32:65:df:cf:7e:4c:fb:
d5:df:27:40:3b:97:46:04:30:01:a5:a5:ae:5e:fe:b8:63:0c:
12:8d:0d:20:49:fd:86:f5:31:71:76:48:99:d5:9e:90:62:f9:
8b:87:24:05:40:e0:b6:e9:f4:ed:b0:10:85:14:8b:b4:78:cc:
53:20:f5:9d:0d:a2:04:30:ae:49:2c:11:6d:ce:15:6a:e5:ab:
bf:fe:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:25 2025 by rpki-client