Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa
File: 90308f7e-154a-30dc-9271-d2453cae8834.roa (raw, json)
Hash identifier: S3SIgV9zJXwdmxeTH8egpe6I/Y+4Aw7QcuGyt1DOXaI=
Subject key identifier: CF:0B:9F:C7:FF:B1:5A:01:E2:15:FF:34:11:EC:E6:5E:96:61:D7:4E
Certificate issuer: /CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c
Certificate serial: 010D0C9F43285848345581DFBEEF2AD128382340
Authority key identifier: 55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 31748
IP address blocks: 149.112.8.0/24 maxlen: 24
2001:504:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:81:df:be:ef:2a:d1:28:38:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=5340a9e8-2dd2-4ebc-9270-fada5818b410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:1c:e1:4a:21:62:5b:02:0d:68:4c:2f:3d:
c8:33:cd:18:7a:c3:7a:8e:f9:60:b4:76:4d:74:f7:
28:40:60:cf:55:4c:99:95:7e:54:9d:84:58:07:ea:
a6:66:55:67:00:cb:38:da:7e:59:00:d3:fb:8e:ac:
47:87:41:84:3b:d6:56:93:07:bb:d8:ed:3a:83:8c:
91:0d:32:d0:9f:50:3a:01:75:97:88:3c:01:b6:1b:
2e:2a:99:30:9d:0f:4e:36:9a:23:d6:41:70:b7:03:
21:5c:6d:14:c0:79:7d:5a:a9:88:fb:79:d0:0e:64:
6c:90:fe:7c:36:c0:db:74:bb:85:24:ac:23:b9:be:
29:a7:06:9d:5c:86:ba:47:e3:ee:21:b8:f7:59:68:
d8:8c:85:7b:5e:a1:b1:00:08:d1:cb:a6:0b:40:71:
40:07:85:4a:f6:3f:00:77:70:a5:09:a3:c5:7f:ec:
f6:6c:e2:98:7d:1b:9c:c2:85:9d:3e:45:78:4f:02:
59:0f:b3:68:67:80:6b:50:c8:21:da:76:13:8e:81:
ea:99:0f:a0:3c:42:b8:6a:bd:12:19:94:2e:64:c0:
bc:c2:fc:d0:dc:99:05:0f:42:ae:c8:c5:f4:a2:ab:
b8:6a:d0:05:f9:3c:b4:b2:0c:c7:70:9e:52:06:95:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0B:9F:C7:FF:B1:5A:01:E2:15:FF:34:11:EC:E6:5E:96:61:D7:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.crl
X509v3 Authority Key Identifier:
keyid:55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.8.0/24
IPv6:
2001:504:101::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:e0:61:b5:e8:05:72:58:b8:55:27:a5:aa:6d:10:c5:a4:8a:
18:3d:85:11:54:92:8e:cb:49:e6:da:32:a9:d1:b6:4d:89:c5:
3d:e9:fc:59:da:38:85:ce:f6:c3:8f:e1:7c:d2:c4:82:93:12:
07:1c:37:fe:8d:94:52:8a:41:04:e3:bd:87:35:6c:38:ef:0f:
5d:63:57:ff:e5:1f:3b:6d:a9:5a:98:da:a1:fd:35:f9:de:ad:
07:85:52:4f:f1:2e:d8:78:42:33:30:83:a0:93:e2:52:09:c3:
83:8c:d1:16:31:28:88:07:09:b0:67:01:5a:b6:59:c0:6a:62:
39:c3:52:0c:25:00:2a:63:ac:53:ae:9a:63:59:03:68:3f:1f:
25:a3:05:06:6e:94:ea:63:96:58:a2:6d:fc:6b:ff:90:16:19:
d6:72:23:f3:6e:56:0f:2b:b1:c7:70:80:30:77:88:ff:de:e9:
81:68:6d:bb:d4:06:ce:64:88:49:04:1e:c1:55:71:51:03:8d:
1a:59:e2:05:1e:b7:f0:17:f2:5f:2f:74:fc:e2:0e:7e:53:81:
90:b8:8d:f2:59:c6:26:ca:28:c2:5f:f6:62:97:85:69:10:cd:
12:33:6b:a1:48:11:8c:87:ed:ba:12:1c:bd:1f:fe:ee:cf:46:
e2:06:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:51:29 2025 by rpki-client