Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/a892cd3e-052c-3ff3-9d4b-9e4c78fad954.roa
File: a892cd3e-052c-3ff3-9d4b-9e4c78fad954.roa (raw, json)
Hash identifier: vxf4mKoxg/kefe/SJr5nQQAdvsnkUGmd6m0mGipMdvA=
Subject key identifier: EB:40:56:97:EF:7E:D7:F4:F3:5F:F8:F9:1B:22:89:D1:9A:A1:AE:EF
Certificate issuer: /CN=f06bd477-b8a8-473e-9210-c25d8e9ee781
Certificate serial: 010D0C9F43285848504033F8C97EC746454B1E00
Authority key identifier: 76:D6:95:68:D1:DB:93:A7:99:AD:19:56:A7:AB:9B:69:46:3B:70:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/a892cd3e-052c-3ff3-9d4b-9e4c78fad954.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 401248
IP address blocks: 149.105.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:33:f8:c9:7e:c7:46:45:4b:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06bd477-b8a8-473e-9210-c25d8e9ee781
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=6fc2713d-91f8-4f7a-9862-04293130bef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:9f:c4:07:dd:d2:8b:7c:52:dd:cb:76:0b:
1d:3d:e5:43:e0:8e:42:28:64:6c:a4:a6:23:ee:b0:
7f:4b:d8:e2:81:2f:b1:b8:f5:b3:0a:1c:d0:fb:8e:
18:6e:da:af:de:15:23:82:3d:87:85:0d:a2:b9:c7:
1a:8a:69:b2:b9:90:63:e2:f3:6e:bb:89:c0:d2:75:
31:0c:e8:c4:3a:ca:4f:67:6a:5e:65:25:36:25:21:
b9:30:d5:a5:42:bd:0c:7f:ba:f8:39:88:50:1c:c3:
74:d5:a1:ac:b8:5b:01:db:e5:25:8e:a7:22:80:56:
8a:e7:6e:2a:9f:e5:64:a2:a1:2b:5f:0e:cf:cc:37:
d8:f8:c0:20:9a:28:1b:79:f6:e3:58:63:a8:f2:d4:
3b:8a:7f:e1:ca:c2:05:15:61:ec:bf:58:01:c7:9d:
66:fc:2e:78:d4:4d:09:ff:0c:4e:69:6d:b2:67:be:
16:67:cb:c6:1e:cc:2c:3b:3d:56:84:25:80:7d:a9:
58:94:8d:31:42:d2:01:aa:38:97:c3:35:56:5a:ea:
ac:48:38:13:c7:0e:61:20:36:b1:45:b2:c5:45:10:
82:22:ec:8e:51:e9:d9:33:83:c9:65:1d:97:25:cf:
74:f5:2b:06:0d:3a:b8:d5:17:42:7c:99:e6:5e:7d:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:56:97:EF:7E:D7:F4:F3:5F:F8:F9:1B:22:89:D1:9A:A1:AE:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/a892cd3e-052c-3ff3-9d4b-9e4c78fad954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/f06bd477-b8a8-473e-9210-c25d8e9ee781.crl
X509v3 Authority Key Identifier:
keyid:76:D6:95:68:D1:DB:93:A7:99:AD:19:56:A7:AB:9B:69:46:3B:70:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781.cer
sbgp-ipAddrBlock: critical
IPv4:
149.105.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:cf:5c:d4:c1:79:6f:41:6c:67:78:0d:f1:ee:11:19:5e:26:
62:cc:49:ed:bd:a3:79:ea:52:15:6c:9d:90:99:c0:c4:ca:17:
a4:1d:a0:ed:bb:e1:7d:20:b0:dd:e3:81:cf:74:71:07:f9:40:
ff:ce:6a:c0:9c:1d:93:1c:2d:e3:f8:c2:08:06:b1:89:b2:b1:
ee:5a:2f:c9:d2:9a:48:48:b7:6d:a6:91:53:bb:8b:23:83:50:
b5:17:65:bc:97:77:af:14:82:13:ac:43:89:8c:ef:dd:50:74:
b2:9a:6d:fe:c7:70:bc:6f:4d:c5:47:d1:8e:d4:d5:d5:0c:6e:
a9:52:2f:df:dc:80:38:a0:b7:a5:bd:9f:1d:7c:a7:38:b8:02:
5a:8b:f4:44:0e:33:a4:79:05:b9:77:39:1e:ba:17:05:b0:b2:
53:d1:96:7c:f3:90:e9:89:cb:2d:38:92:ac:42:7e:d9:24:8a:
28:01:52:ff:e5:6b:fa:3a:a8:46:04:c6:a7:30:fd:50:43:22:
10:7e:78:b7:11:68:f3:c2:0d:62:a7:aa:0b:2f:4a:97:cd:cf:
23:bc:42:07:4e:2c:15:91:b1:dc:6a:f8:ca:c9:4a:8a:60:43:
29:16:b9:93:bd:00:25:ef:c0:4a:11:63:e4:68:cd:31:be:57:
fc:5b:37:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:33 2025 by rpki-client